Warning: Permanently added '[localhost]:24987' (ECDSA) to the list of known hosts.
2024/11/18 18:11:26 fuzzer started
2024/11/18 18:11:26 dialing manager at localhost:42621
syzkaller login: [  103.630994] cgroup: Unknown subsys name 'net'
[  103.737082] cgroup: Unknown subsys name 'cpuset'
[  103.783494] cgroup: Unknown subsys name 'rlimit'
2024/11/18 18:11:45 syscalls: 2217
2024/11/18 18:11:45 code coverage: enabled
2024/11/18 18:11:45 comparison tracing: enabled
2024/11/18 18:11:45 extra coverage: enabled
2024/11/18 18:11:45 setuid sandbox: enabled
2024/11/18 18:11:45 namespace sandbox: enabled
2024/11/18 18:11:45 Android sandbox: enabled
2024/11/18 18:11:45 fault injection: enabled
2024/11/18 18:11:45 leak checking: enabled
2024/11/18 18:11:45 net packet injection: enabled
2024/11/18 18:11:45 net device setup: enabled
2024/11/18 18:11:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/18 18:11:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/18 18:11:45 USB emulation: enabled
2024/11/18 18:11:45 hci packet injection: enabled
2024/11/18 18:11:45 wifi device emulation: enabled
2024/11/18 18:11:45 802.15.4 emulation: enabled
2024/11/18 18:11:45 fetching corpus: 0, signal 0/2000 (executing program)
2024/11/18 18:11:45 fetching corpus: 45, signal 12990/16725 (executing program)
2024/11/18 18:11:45 fetching corpus: 93, signal 22614/27910 (executing program)
2024/11/18 18:11:45 fetching corpus: 143, signal 33051/39691 (executing program)
2024/11/18 18:11:45 fetching corpus: 193, signal 38061/46075 (executing program)
2024/11/18 18:11:45 fetching corpus: 243, signal 46285/55334 (executing program)
2024/11/18 18:11:45 fetching corpus: 293, signal 51026/61198 (executing program)
2024/11/18 18:11:45 fetching corpus: 343, signal 54812/66108 (executing program)
2024/11/18 18:11:45 fetching corpus: 393, signal 58583/70923 (executing program)
2024/11/18 18:11:45 fetching corpus: 443, signal 63712/76855 (executing program)
2024/11/18 18:11:46 fetching corpus: 493, signal 66625/80770 (executing program)
2024/11/18 18:11:46 fetching corpus: 543, signal 70374/85341 (executing program)
2024/11/18 18:11:46 fetching corpus: 593, signal 74120/89764 (executing program)
2024/11/18 18:11:46 fetching corpus: 643, signal 77067/93479 (executing program)
2024/11/18 18:11:46 fetching corpus: 693, signal 79812/96942 (executing program)
2024/11/18 18:11:46 fetching corpus: 743, signal 81921/99801 (executing program)
2024/11/18 18:11:46 fetching corpus: 793, signal 83787/102419 (executing program)
2024/11/18 18:11:46 fetching corpus: 843, signal 85454/104882 (executing program)
2024/11/18 18:11:47 fetching corpus: 892, signal 88046/108035 (executing program)
2024/11/18 18:11:47 fetching corpus: 942, signal 89555/110298 (executing program)
2024/11/18 18:11:47 fetching corpus: 992, signal 90708/112225 (executing program)
2024/11/18 18:11:47 fetching corpus: 1042, signal 92843/114944 (executing program)
2024/11/18 18:11:47 fetching corpus: 1092, signal 94839/117423 (executing program)
2024/11/18 18:11:47 fetching corpus: 1142, signal 96297/119483 (executing program)
2024/11/18 18:11:47 fetching corpus: 1192, signal 97454/121294 (executing program)
2024/11/18 18:11:47 fetching corpus: 1242, signal 98919/123289 (executing program)
2024/11/18 18:11:47 fetching corpus: 1292, signal 100261/125178 (executing program)
2024/11/18 18:11:47 fetching corpus: 1342, signal 101578/127068 (executing program)
2024/11/18 18:11:48 fetching corpus: 1392, signal 102972/128978 (executing program)
2024/11/18 18:11:48 fetching corpus: 1442, signal 104709/131016 (executing program)
2024/11/18 18:11:48 fetching corpus: 1492, signal 106393/133007 (executing program)
2024/11/18 18:11:48 fetching corpus: 1542, signal 106986/134263 (executing program)
2024/11/18 18:11:48 fetching corpus: 1592, signal 107747/135650 (executing program)
2024/11/18 18:11:48 fetching corpus: 1642, signal 108389/136903 (executing program)
2024/11/18 18:11:48 fetching corpus: 1692, signal 109258/138297 (executing program)
2024/11/18 18:11:48 fetching corpus: 1742, signal 111583/140579 (executing program)
2024/11/18 18:11:48 fetching corpus: 1792, signal 112844/142106 (executing program)
2024/11/18 18:11:48 fetching corpus: 1842, signal 113651/143394 (executing program)
2024/11/18 18:11:48 fetching corpus: 1892, signal 114698/144795 (executing program)
2024/11/18 18:11:49 fetching corpus: 1942, signal 116201/146508 (executing program)
2024/11/18 18:11:49 fetching corpus: 1992, signal 117171/147809 (executing program)
2024/11/18 18:11:49 fetching corpus: 2042, signal 118112/149069 (executing program)
2024/11/18 18:11:49 fetching corpus: 2092, signal 118916/150279 (executing program)
2024/11/18 18:11:49 fetching corpus: 2142, signal 119752/151444 (executing program)
2024/11/18 18:11:49 fetching corpus: 2192, signal 120298/152456 (executing program)
2024/11/18 18:11:49 fetching corpus: 2242, signal 121205/153678 (executing program)
2024/11/18 18:11:49 fetching corpus: 2291, signal 122290/154911 (executing program)
2024/11/18 18:11:49 fetching corpus: 2341, signal 123184/156046 (executing program)
2024/11/18 18:11:50 fetching corpus: 2391, signal 123849/157060 (executing program)
2024/11/18 18:11:50 fetching corpus: 2441, signal 124533/158074 (executing program)
2024/11/18 18:11:50 fetching corpus: 2491, signal 125226/159056 (executing program)
2024/11/18 18:11:50 fetching corpus: 2541, signal 126097/160114 (executing program)
2024/11/18 18:11:50 fetching corpus: 2591, signal 127359/161305 (executing program)
2024/11/18 18:11:50 fetching corpus: 2641, signal 128184/162302 (executing program)
2024/11/18 18:11:50 fetching corpus: 2691, signal 128909/163247 (executing program)
2024/11/18 18:11:50 fetching corpus: 2741, signal 129963/164315 (executing program)
2024/11/18 18:11:50 fetching corpus: 2791, signal 130947/165332 (executing program)
2024/11/18 18:11:50 fetching corpus: 2841, signal 131381/166056 (executing program)
2024/11/18 18:11:51 fetching corpus: 2891, signal 132073/166871 (executing program)
2024/11/18 18:11:51 fetching corpus: 2941, signal 132631/167678 (executing program)
2024/11/18 18:11:51 fetching corpus: 2991, signal 133413/168489 (executing program)
2024/11/18 18:11:51 fetching corpus: 3041, signal 134018/169263 (executing program)
2024/11/18 18:11:51 fetching corpus: 3091, signal 134918/170164 (executing program)
2024/11/18 18:11:51 fetching corpus: 3141, signal 135443/170904 (executing program)
2024/11/18 18:11:51 fetching corpus: 3191, signal 136266/171705 (executing program)
2024/11/18 18:11:51 fetching corpus: 3241, signal 136894/172459 (executing program)
2024/11/18 18:11:51 fetching corpus: 3291, signal 137247/173123 (executing program)
2024/11/18 18:11:52 fetching corpus: 3341, signal 137693/173811 (executing program)
2024/11/18 18:11:52 fetching corpus: 3391, signal 138436/174602 (executing program)
2024/11/18 18:11:52 fetching corpus: 3441, signal 138915/175256 (executing program)
2024/11/18 18:11:52 fetching corpus: 3491, signal 139377/175888 (executing program)
2024/11/18 18:11:52 fetching corpus: 3541, signal 139889/176498 (executing program)
2024/11/18 18:11:52 fetching corpus: 3591, signal 140232/177067 (executing program)
2024/11/18 18:11:52 fetching corpus: 3641, signal 140678/177674 (executing program)
2024/11/18 18:11:52 fetching corpus: 3691, signal 141030/178275 (executing program)
2024/11/18 18:11:52 fetching corpus: 3741, signal 142148/179019 (executing program)
2024/11/18 18:11:52 fetching corpus: 3791, signal 142638/179560 (executing program)
2024/11/18 18:11:53 fetching corpus: 3841, signal 143358/180152 (executing program)
2024/11/18 18:11:53 fetching corpus: 3890, signal 143762/180695 (executing program)
2024/11/18 18:11:53 fetching corpus: 3940, signal 144515/181333 (executing program)
2024/11/18 18:11:53 fetching corpus: 3989, signal 145012/181865 (executing program)
2024/11/18 18:11:53 fetching corpus: 4038, signal 145842/182431 (executing program)
2024/11/18 18:11:53 fetching corpus: 4088, signal 146300/182933 (executing program)
2024/11/18 18:11:53 fetching corpus: 4138, signal 146923/183422 (executing program)
2024/11/18 18:11:53 fetching corpus: 4188, signal 147368/183919 (executing program)
2024/11/18 18:11:53 fetching corpus: 4238, signal 147830/184387 (executing program)
2024/11/18 18:11:54 fetching corpus: 4288, signal 148450/184872 (executing program)
2024/11/18 18:11:54 fetching corpus: 4338, signal 148809/185306 (executing program)
2024/11/18 18:11:54 fetching corpus: 4388, signal 149178/185731 (executing program)
2024/11/18 18:11:54 fetching corpus: 4438, signal 149584/186164 (executing program)
2024/11/18 18:11:54 fetching corpus: 4488, signal 149901/186538 (executing program)
2024/11/18 18:11:54 fetching corpus: 4538, signal 150383/186951 (executing program)
2024/11/18 18:11:54 fetching corpus: 4588, signal 150823/187311 (executing program)
2024/11/18 18:11:54 fetching corpus: 4638, signal 151258/187612 (executing program)
2024/11/18 18:11:54 fetching corpus: 4688, signal 151690/187612 (executing program)
2024/11/18 18:11:54 fetching corpus: 4738, signal 152461/187612 (executing program)
2024/11/18 18:11:54 fetching corpus: 4788, signal 152968/187612 (executing program)
2024/11/18 18:11:54 fetching corpus: 4838, signal 153562/187612 (executing program)
2024/11/18 18:11:55 fetching corpus: 4888, signal 153771/187612 (executing program)
2024/11/18 18:11:55 fetching corpus: 4938, signal 154171/187612 (executing program)
2024/11/18 18:11:55 fetching corpus: 4988, signal 154520/187612 (executing program)
2024/11/18 18:11:55 fetching corpus: 5038, signal 154942/187618 (executing program)
2024/11/18 18:11:55 fetching corpus: 5088, signal 155275/187618 (executing program)
2024/11/18 18:11:55 fetching corpus: 5138, signal 155751/187631 (executing program)
2024/11/18 18:11:55 fetching corpus: 5188, signal 156086/187631 (executing program)
2024/11/18 18:11:55 fetching corpus: 5238, signal 156707/187631 (executing program)
2024/11/18 18:11:55 fetching corpus: 5287, signal 157063/187659 (executing program)
2024/11/18 18:11:55 fetching corpus: 5337, signal 157570/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5387, signal 157821/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5437, signal 158122/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5487, signal 158505/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5537, signal 159073/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5587, signal 159407/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5637, signal 159856/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5687, signal 160306/187659 (executing program)
2024/11/18 18:11:56 fetching corpus: 5737, signal 160698/187679 (executing program)
2024/11/18 18:11:56 fetching corpus: 5787, signal 161885/187679 (executing program)
2024/11/18 18:11:56 fetching corpus: 5837, signal 162285/187679 (executing program)
2024/11/18 18:11:57 fetching corpus: 5887, signal 162604/187679 (executing program)
2024/11/18 18:11:57 fetching corpus: 5936, signal 162917/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 5986, signal 163228/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6036, signal 163597/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6086, signal 163933/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6136, signal 164166/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6186, signal 164556/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6236, signal 164901/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6286, signal 165202/187684 (executing program)
2024/11/18 18:11:57 fetching corpus: 6336, signal 165663/187692 (executing program)
2024/11/18 18:11:58 fetching corpus: 6386, signal 166271/187692 (executing program)
2024/11/18 18:11:58 fetching corpus: 6436, signal 166655/187692 (executing program)
2024/11/18 18:11:58 fetching corpus: 6486, signal 167105/187692 (executing program)
2024/11/18 18:11:58 fetching corpus: 6536, signal 167408/187694 (executing program)
2024/11/18 18:11:58 fetching corpus: 6586, signal 167801/187707 (executing program)
2024/11/18 18:11:58 fetching corpus: 6636, signal 168085/187707 (executing program)
2024/11/18 18:11:58 fetching corpus: 6686, signal 168345/187707 (executing program)
2024/11/18 18:11:58 fetching corpus: 6736, signal 168573/187707 (executing program)
2024/11/18 18:11:58 fetching corpus: 6786, signal 169334/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 6836, signal 169569/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 6886, signal 169814/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 6936, signal 170012/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 6986, signal 170300/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 7036, signal 170557/187707 (executing program)
2024/11/18 18:11:59 fetching corpus: 7086, signal 171013/187708 (executing program)
2024/11/18 18:11:59 fetching corpus: 7136, signal 171411/187708 (executing program)
2024/11/18 18:11:59 fetching corpus: 7186, signal 171651/187708 (executing program)
2024/11/18 18:11:59 fetching corpus: 7236, signal 171994/187710 (executing program)
2024/11/18 18:11:59 fetching corpus: 7285, signal 172247/187715 (executing program)
2024/11/18 18:12:00 fetching corpus: 7335, signal 172451/187715 (executing program)
2024/11/18 18:12:00 fetching corpus: 7385, signal 172685/187715 (executing program)
2024/11/18 18:12:00 fetching corpus: 7435, signal 172988/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7485, signal 173271/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7535, signal 173561/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7585, signal 173900/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7635, signal 174127/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7685, signal 174269/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7735, signal 174654/187717 (executing program)
2024/11/18 18:12:00 fetching corpus: 7785, signal 174920/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 7835, signal 175365/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 7885, signal 175572/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 7935, signal 175753/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 7985, signal 175965/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 8035, signal 176292/187717 (executing program)
2024/11/18 18:12:01 fetching corpus: 8085, signal 176559/187727 (executing program)
2024/11/18 18:12:01 fetching corpus: 8135, signal 176780/187727 (executing program)
2024/11/18 18:12:01 fetching corpus: 8185, signal 177174/187727 (executing program)
2024/11/18 18:12:01 fetching corpus: 8235, signal 177355/187727 (executing program)
2024/11/18 18:12:01 fetching corpus: 8285, signal 177593/187727 (executing program)
2024/11/18 18:12:02 fetching corpus: 8335, signal 177857/187727 (executing program)
2024/11/18 18:12:02 fetching corpus: 8385, signal 178087/187727 (executing program)
2024/11/18 18:12:02 fetching corpus: 8435, signal 178409/187727 (executing program)
2024/11/18 18:12:02 fetching corpus: 8485, signal 178560/187727 (executing program)
2024/11/18 18:12:02 fetching corpus: 8535, signal 179284/187751 (executing program)
2024/11/18 18:12:02 fetching corpus: 8585, signal 179663/187751 (executing program)
2024/11/18 18:12:02 fetching corpus: 8635, signal 179863/187751 (executing program)
2024/11/18 18:12:02 fetching corpus: 8685, signal 180192/187751 (executing program)
2024/11/18 18:12:02 fetching corpus: 8735, signal 180364/187751 (executing program)
2024/11/18 18:12:02 fetching corpus: 8785, signal 180527/187751 (executing program)
2024/11/18 18:12:03 fetching corpus: 8835, signal 180842/187751 (executing program)
2024/11/18 18:12:03 fetching corpus: 8885, signal 181103/187751 (executing program)
2024/11/18 18:12:03 fetching corpus: 8935, signal 181368/187761 (executing program)
2024/11/18 18:12:03 fetching corpus: 8985, signal 181563/187761 (executing program)
2024/11/18 18:12:03 fetching corpus: 9035, signal 181872/187761 (executing program)
2024/11/18 18:12:03 fetching corpus: 9085, signal 182072/187787 (executing program)
2024/11/18 18:12:03 fetching corpus: 9135, signal 182339/187787 (executing program)
2024/11/18 18:12:03 fetching corpus: 9185, signal 182585/187787 (executing program)
2024/11/18 18:12:03 fetching corpus: 9235, signal 182826/187787 (executing program)
2024/11/18 18:12:03 fetching corpus: 9285, signal 183020/187787 (executing program)
2024/11/18 18:12:03 fetching corpus: 9335, signal 183203/187787 (executing program)
2024/11/18 18:12:04 fetching corpus: 9385, signal 183377/187787 (executing program)
2024/11/18 18:12:04 fetching corpus: 9435, signal 183596/187787 (executing program)
2024/11/18 18:12:04 fetching corpus: 9485, signal 183836/187787 (executing program)
2024/11/18 18:12:04 fetching corpus: 9535, signal 184012/187787 (executing program)
2024/11/18 18:12:04 fetching corpus: 9585, signal 184228/187796 (executing program)
2024/11/18 18:12:04 fetching corpus: 9635, signal 184404/187796 (executing program)
2024/11/18 18:12:04 fetching corpus: 9685, signal 184644/187796 (executing program)
2024/11/18 18:12:04 fetching corpus: 9735, signal 184780/187796 (executing program)
2024/11/18 18:12:04 fetching corpus: 9785, signal 185002/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 9835, signal 185449/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 9885, signal 185612/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 9935, signal 185799/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 9985, signal 186008/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 10035, signal 186222/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 10085, signal 186429/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 10134, signal 186597/187796 (executing program)
2024/11/18 18:12:05 fetching corpus: 10135, signal 186598/187797 (executing program)
2024/11/18 18:12:05 fetching corpus: 10135, signal 186598/187797 (executing program)
2024/11/18 18:12:09 starting 8 fuzzer processes
18:12:09 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000540)=""/243, 0xf3, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x7f, 0x1f, 0x0, 0xbed, 0x20, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x5ac0, 0x1, 0x0, 0x5, 0xfffffffffffffffb, 0x5, 0x8, 0x0, 0x8, 0x0, 0x5})
clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

18:12:09 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14)

[  145.054048] audit: type=1400 audit(1731953529.344:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:12:09 executing program 2:
ioperm(0x0, 0x870, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))

18:12:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

18:12:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f801002000400003000000000000008000293fe737f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100028e870325132510000e87032510300000000002e2e202020202020202020100028e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200028e870325132510000e870325104001a040000", 0x80, 0x1a00}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1c00}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x2200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4800}], 0x0, &(0x7f0000010f00))

18:12:09 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x530f, 0x0)

18:12:09 executing program 7:
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

18:12:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

[  146.335163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.341598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.344554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.354582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.361775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  146.364532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.391425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.394404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.396250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.415906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.420129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.423097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.425326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.432649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.435057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.451857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.457661] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  146.464574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.516516] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.529785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.532983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.545952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.550722] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.554720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.580646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.587860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.602787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.612651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.622678] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.631751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.673094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.685016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.689800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.699848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.712637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.729621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.741105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.744786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.755048] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.761415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.768144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.770289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.772941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.791432] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  146.806772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.844304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.867587] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.887624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.419689] Bluetooth: hci0: command tx timeout
[  148.483265] Bluetooth: hci1: command tx timeout
[  148.483890] Bluetooth: hci2: command tx timeout
[  148.610240] Bluetooth: hci3: command tx timeout
[  148.674274] Bluetooth: hci4: command tx timeout
[  148.866238] Bluetooth: hci6: command tx timeout
[  148.931432] Bluetooth: hci7: command tx timeout
[  148.931990] Bluetooth: hci5: command tx timeout
[  150.467586] Bluetooth: hci0: command tx timeout
[  150.530483] Bluetooth: hci2: command tx timeout
[  150.530925] Bluetooth: hci1: command tx timeout
[  150.659258] Bluetooth: hci3: command tx timeout
[  150.722309] Bluetooth: hci4: command tx timeout
[  150.915293] Bluetooth: hci6: command tx timeout
[  150.979331] Bluetooth: hci7: command tx timeout
[  150.979763] Bluetooth: hci5: command tx timeout
[  152.515255] Bluetooth: hci0: command tx timeout
[  152.580215] Bluetooth: hci1: command tx timeout
[  152.580668] Bluetooth: hci2: command tx timeout
[  152.707730] Bluetooth: hci3: command tx timeout
[  152.770499] Bluetooth: hci4: command tx timeout
[  152.962302] Bluetooth: hci6: command tx timeout
[  153.027347] Bluetooth: hci5: command tx timeout
[  153.027792] Bluetooth: hci7: command tx timeout
[  154.563234] Bluetooth: hci0: command tx timeout
[  154.627400] Bluetooth: hci2: command tx timeout
[  154.627842] Bluetooth: hci1: command tx timeout
[  154.755247] Bluetooth: hci3: command tx timeout
[  154.818249] Bluetooth: hci4: command tx timeout
[  155.010231] Bluetooth: hci6: command tx timeout
[  155.075230] Bluetooth: hci5: command tx timeout
[  155.075668] Bluetooth: hci7: command tx timeout
[  209.236075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.239107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.241993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.251543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.255528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  209.258478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.399683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.402725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.405836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.415084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.417926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  209.420627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.438960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.441351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.443666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.459134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.462819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  209.466004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.474937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  209.481759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  209.490415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  209.495524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  209.506203] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  209.509661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  209.513321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.521599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.549599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.559106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  209.575979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.583717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  209.592526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  209.595012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  209.602384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.610680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  209.623602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  209.649962] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  209.668728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  209.670869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  209.676671] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  209.679134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  209.690655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  209.692552] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  209.703342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  209.707610] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  209.709683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.741012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  209.766510] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  209.768416] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  211.330399] Bluetooth: hci0: command tx timeout
[  211.458313] Bluetooth: hci1: command tx timeout
[  211.522263] Bluetooth: hci2: command tx timeout
[  211.586388] Bluetooth: hci3: command tx timeout
[  211.714911] Bluetooth: hci4: command tx timeout
[  211.778280] Bluetooth: hci6: command tx timeout
[  211.779074] Bluetooth: hci5: command tx timeout
[  211.842840] Bluetooth: hci7: command tx timeout
[  213.380225] Bluetooth: hci0: command tx timeout
[  213.506307] Bluetooth: hci1: command tx timeout
[  213.571076] Bluetooth: hci2: command tx timeout
[  213.634251] Bluetooth: hci3: command tx timeout
[  213.762361] Bluetooth: hci4: command tx timeout
[  213.826407] Bluetooth: hci6: command tx timeout
[  213.827968] Bluetooth: hci5: command tx timeout
[  213.890280] Bluetooth: hci7: command tx timeout
[  215.427214] Bluetooth: hci0: command tx timeout
[  215.554254] Bluetooth: hci1: command tx timeout
[  215.618249] Bluetooth: hci2: command tx timeout
[  215.683335] Bluetooth: hci3: command tx timeout
[  215.810257] Bluetooth: hci4: command tx timeout
[  215.875392] Bluetooth: hci5: command tx timeout
[  215.875857] Bluetooth: hci6: command tx timeout
[  215.938598] Bluetooth: hci7: command tx timeout
[  217.475377] Bluetooth: hci0: command tx timeout
[  217.603249] Bluetooth: hci1: command tx timeout
[  217.666374] Bluetooth: hci2: command tx timeout
[  217.730341] Bluetooth: hci3: command tx timeout
[  217.859541] Bluetooth: hci4: command tx timeout
[  217.925202] Bluetooth: hci5: command tx timeout
[  217.925662] Bluetooth: hci6: command tx timeout
[  217.986275] Bluetooth: hci7: command tx timeout
[  266.150360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.151076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.353220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.353875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.680491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.681127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.934867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.935572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.332181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.332835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.552362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.553030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.721709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.722601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.911976] loop3: detected capacity change from 0 to 128
[  267.964922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.965618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:14:12 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

[  268.095743] audit: type=1400 audit(1731953652.386:8): avc:  denied  { open } for  pid=7272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  268.100043] audit: type=1400 audit(1731953652.386:9): avc:  denied  { kernel } for  pid=7272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
18:14:12 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:12 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:12 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:12 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:13 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:13 executing program 3:
r0 = timerfd_create(0x9, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)

18:14:13 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0)
pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000001180)='Q', 0x1}], 0x1, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

[  270.734463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.740893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.742971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.752671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.756853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  270.761417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.001728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  271.011368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  271.021590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  271.031449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  271.043041] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  271.044832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.251684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.259510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.262536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.280552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.286259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  271.288509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.333018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.338951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.340733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.349555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.356911] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  271.362970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.508682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  271.515589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  271.522026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  271.526467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  271.528908] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  271.530802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  271.554558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  271.570544] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  271.573551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  271.578299] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  271.584736] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  271.588827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  271.595535] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  271.597382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.612654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  271.631512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  271.636505] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  271.638406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  272.834584] Bluetooth: hci0: command tx timeout
[  273.090385] Bluetooth: hci1: command tx timeout
[  273.346651] Bluetooth: hci2: command tx timeout
[  273.475256] Bluetooth: hci3: command tx timeout
[  273.602292] Bluetooth: hci6: command tx timeout
[  273.666233] Bluetooth: hci5: command tx timeout
[  273.666900] Bluetooth: hci7: command tx timeout
[  274.883209] Bluetooth: hci0: command tx timeout
[  275.139359] Bluetooth: hci1: command tx timeout
[  275.395309] Bluetooth: hci2: command tx timeout
[  275.522298] Bluetooth: hci3: command tx timeout
[  275.650273] Bluetooth: hci6: command tx timeout
[  275.716029] Bluetooth: hci5: command tx timeout
[  275.716632] Bluetooth: hci7: command tx timeout
[  276.930298] Bluetooth: hci0: command tx timeout
[  277.186491] Bluetooth: hci1: command tx timeout
[  277.442260] Bluetooth: hci2: command tx timeout
[  277.570256] Bluetooth: hci3: command tx timeout
[  277.698456] Bluetooth: hci6: command tx timeout
[  277.762319] Bluetooth: hci7: command tx timeout
[  277.764087] Bluetooth: hci5: command tx timeout
[  278.979336] Bluetooth: hci0: command tx timeout
[  279.236199] Bluetooth: hci1: command tx timeout
[  279.491299] Bluetooth: hci2: command tx timeout
[  279.619538] Bluetooth: hci3: command tx timeout
[  279.747266] Bluetooth: hci6: command tx timeout
[  279.812271] Bluetooth: hci7: command tx timeout
[  279.812960] Bluetooth: hci5: command tx timeout
[  322.506479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.507978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.771267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.771925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.029302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.029936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.269832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.271528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.122149] hrtimer: interrupt took 36740 ns
[  324.146213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.146811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.298442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.299098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.442418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.443047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.672142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.672813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.652730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.653500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.809257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.809925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.613238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.613915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.723175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.723848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.819282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.819901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.938319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.938999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:15:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:11 executing program 2:
ioperm(0x0, 0x870, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))

18:15:11 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0)
pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000001180)='Q', 0x1}], 0x1, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

18:15:11 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14)

18:15:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:11 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x530f, 0x0)

18:15:11 executing program 4:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

18:15:11 executing program 7:
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

18:15:11 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e27, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x0)

18:15:11 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14)

18:15:11 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14)

18:15:11 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0)
pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000001180)='Q', 0x1}], 0x1, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

18:15:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ppoll(&(0x7f0000000200)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)

18:15:11 executing program 7:
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

18:15:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:12 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x530f, 0x0)

18:15:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:12 executing program 7:
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

18:15:12 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0)
pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000001180)='Q', 0x1}], 0x1, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

18:15:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:12 executing program 2:
ioperm(0x0, 0x870, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))

18:15:12 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=static'}}}]})

18:15:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ppoll(&(0x7f0000000200)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)

[  327.972669] tmpfs: Bad value for 'mpol'
[  327.979407] tmpfs: Bad value for 'mpol'
18:15:12 executing program 1:
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000fff000/0x1000)=nil)

18:15:12 executing program 2:
ioperm(0x0, 0x870, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))

18:15:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

18:15:12 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x530f, 0x0)

18:15:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ppoll(&(0x7f0000000200)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)

18:15:12 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r0 = syz_io_uring_setup(0x3938, &(0x7f0000000000)={0x0, 0x4cfe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

18:15:12 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x0)

[  328.334530] process 'syz-executor.1' launched './file1' with NULL argv: empty string added
18:15:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ppoll(&(0x7f0000000200)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)

18:15:12 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4)

18:15:12 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000340)='./file0\x00')

18:15:12 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40044591, 0x0)
readv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

18:15:12 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0)

18:15:12 executing program 2:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '@\x00'})

18:15:12 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x0)

[  328.577887] audit: type=1400 audit(1731953712.867:10): avc:  denied  { setattr } for  pid=10572 comm="syz-executor.2" name="ns" dev="proc" ino=9921 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  328.579745] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
18:15:12 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0)

18:15:12 executing program 2:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '@\x00'})

18:15:12 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x0)

18:15:12 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000340)='./file0\x00')

18:15:12 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40044591, 0x0)
readv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

18:15:12 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4)

18:15:13 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

18:15:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x80811501, &(0x7f0000000000))

18:15:13 executing program 2:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '@\x00'})

18:15:13 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0)

18:15:13 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000340)='./file0\x00')

18:15:13 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x0)

18:15:13 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40044591, 0x0)
readv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

18:15:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4)

18:15:13 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@broadcast}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
poll(&(0x7f00000000c0)=[{}], 0x20000000000000b4, 0x0)

18:15:13 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

18:15:13 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000340)='./file0\x00')

18:15:13 executing program 2:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '@\x00'})

18:15:13 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0)

18:15:13 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

18:15:13 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40044591, 0x0)
readv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

18:15:13 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0x0, 0x0, 0x0)

18:15:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4)

18:15:13 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
ioperm(0x0, 0x81, 0x3ff)

18:15:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:13 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fallocate(r0, 0x2, 0x0, 0x401)

[  329.427014] audit: type=1400 audit(1731953713.696:11): avc:  denied  { write } for  pid=10628 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
18:15:13 executing program 5:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x0)

18:15:13 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

18:15:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

18:15:14 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[])
chdir(&(0x7f0000000340)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
sendfile(r0, r1, 0x0, 0xfffffdef)

18:15:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000d80))

18:15:14 executing program 3:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xba, 0x6, 0x3f, 0x5, 0x0, 0x200, 0x40000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0xa0, 0x3, 0x40100000, 0x6, 0x2, 0x486ca9f7, 0x7, 0x0, 0x623}, 0x0, 0x5, r0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

18:15:14 executing program 1:
ioperm(0x0, 0x7ff, 0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

18:15:14 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00')
readv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1)

18:15:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x80800)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}])

18:15:14 executing program 4:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8015}, 0x4000)
syz_io_uring_complete(0x0)
clone3(&(0x7f0000000f80)={0x30004d00, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00), {}, &(0x7f0000000e40)=""/23, 0x17, &(0x7f0000000e80)=""/165, &(0x7f0000000f40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0), 0x349280, 0x0)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x34}, 0x1, 0x0, 0x0, 0xc885}, 0x8000)

18:15:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:15 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000057ffff"], 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

18:15:15 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup3(r1, r0, 0x0)

18:15:15 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[])
chdir(&(0x7f0000000340)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
sendfile(r0, r1, 0x0, 0xfffffdef)

18:15:15 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4)
sendmmsg$sock(r0, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804)
sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e26, 0x0, @remote}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="f23456cdf8dcdf7db792ad814a5cf50d472768038adb2abd9c2fbab92f01a1d2238f03ed64aa36d69764d8ed3fbb410c0d87a1a4bd7a0da7cfcae32d86dbd1dd63e0b5700fa6884dcd0119de", 0x4c}, {&(0x7f0000000400)="a24cf5473e3db9affd383fbf149cee47f6e70defda7be4740c28fea8f72cf7ed10af2881a340e35ed50a50d9b2a07374648b678f152622af297840a9bd640e87fb23af55fc8074fc02b646c6ecd5c6c972b80d3a99eaa3ab423981932ceec877a7a35164dc8960b6e44440bc8cff2753c379920319", 0x75}, {&(0x7f0000000040)="0a97b2d302790b2e7638f05b3b7151d425b475c3f1c305024a4b85d017a8f184d1bd1b9e5735c1b2f78f2482e79bbf5d727214e620f51a0a27440f8690611ec32b6721be7ce06e19a9ad7fd626eaa4cbee493a45648e061c41bbf5e9310c1da0ff1860c29824496cfb3920f8c31ea717fa2a2f203e30991d3dac5e38eaf191431607019880f794c03f94fd71975846f1f1094060d83868024cbc2051c53fe142903b14803cede32959b6ffe49048efb8bd324391ce68a9f0eac13d74f065", 0xbe}, {&(0x7f0000000100)="1e0a", 0x2}], 0x4}}], 0x2, 0x0)

18:15:15 executing program 3:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xba, 0x6, 0x3f, 0x5, 0x0, 0x200, 0x40000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0xa0, 0x3, 0x40100000, 0x6, 0x2, 0x486ca9f7, 0x7, 0x0, 0x623}, 0x0, 0x5, r0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

18:15:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x80800)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}])

18:15:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0xfffffe28, &(0x7f0000002700)=[{&(0x7f0000000100)={0x10, 0x10}, 0x10}], 0x1}, 0x0)

18:15:16 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

18:15:16 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[])
chdir(&(0x7f0000000340)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
sendfile(r0, r1, 0x0, 0xfffffdef)

18:15:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x80800)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}])

18:15:16 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
inotify_add_watch(r2, 0x0, 0x1000001)

18:15:16 executing program 3:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xba, 0x6, 0x3f, 0x5, 0x0, 0x200, 0x40000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0xa0, 0x3, 0x40100000, 0x6, 0x2, 0x486ca9f7, 0x7, 0x0, 0x623}, 0x0, 0x5, r0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

18:15:17 executing program 4:
r0 = memfd_create(&(0x7f0000000040)='b\xf7\xf3\x80\x04\x989\x1f\xe1M', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0)

18:15:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:18 executing program 5:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

18:15:18 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x23, 0x0, &(0x7f00000035c0))

18:15:18 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

18:15:18 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x10001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c)

18:15:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000002c0)={0x2, {0xa}})

18:15:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x80800)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}])

[  335.225978] Bluetooth: hci4: command 0x0406 tx timeout
18:15:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\xac\xbdw~\xa2\xcf$\x1c\x85\xed\xb9\x12\x18\x1a\xd6jZ\xbba\xb7\x06 \x8c;/\x9eL\xf2\'\xd58\xec\xe0\x00\x80\xd5\xfc\xba\xd3u\xe1O\xfa\x175\xd2C\x91^\x8aC\xd9,\xdc\xfd\x88 \x9eQ\xca6,\xbc\xb9\x8c]\x1f\xb2\x80\x02\x00\x00\x00\x00\x01\xbc\x00'/94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000480)="b56633e1ca7abe3cfd74a97bfc5069512d49db5c9b2d971f2824971874577cc89900d5204763b0f199532112dbfb99b1cc51bd9aa8f56d267561f12648e634e8daa172a35db70944db596d71b409332926e43d597bcb7a75c8b66ae4367c368c2f9d5fc117db08146182dfab6eac273ac45d290bc204d75e13f4e0c68fde9a05c22a0e05d153383b6bbc20cfeb41d85addaf15eeb9d81b4dcb9049ea2ba0cec7d6465637a84899d9f466965de8fa7479212b1bc9d1b7819ceed4fe57b939bfcf0f", 0xc1, 0x4)
pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

18:15:20 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})

18:15:20 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

18:15:20 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0xfff, 0x80})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x80000, 0x4)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x80000, 0x4)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

18:15:20 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[])
chdir(&(0x7f0000000340)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
sendfile(r0, r1, 0x0, 0xfffffdef)

18:15:20 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/class/dma', 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffeff008}, {0x6}]}, 0x10)

18:15:20 executing program 5:
arch_prctl$ARCH_SET_CPUID(0x1025, 0x0)

18:15:28 executing program 3:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xba, 0x6, 0x3f, 0x5, 0x0, 0x200, 0x40000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0xa0, 0x3, 0x40100000, 0x6, 0x2, 0x486ca9f7, 0x7, 0x0, 0x623}, 0x0, 0x5, r0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

18:15:28 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = dup2(r0, r0)
ioctl$PIO_UNIMAP(r1, 0x5424, &(0x7f0000000e00)={0x0, 0x0})

18:15:28 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
lseek(r0, 0x0, 0x4)

18:15:28 executing program 4:
fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/186)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x541d, 0x0)

18:15:28 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f)
write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='#!\n'], 0xb)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

18:15:28 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

18:15:29 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001d00)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)

18:15:29 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

18:15:29 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x541d, 0x0)

18:15:29 executing program 5:
linkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

18:15:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

18:15:29 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x541d, 0x0)

18:15:29 executing program 6:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x8})

18:15:30 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x221, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0)

18:15:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x541d, 0x0)

18:15:34 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0))
openat(r0, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

18:15:34 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$setflags(r0, 0xf, 0x0)

18:15:34 executing program 4:
fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/186)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00')
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0)

18:15:34 executing program 6:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x8})

18:15:34 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0xfffffffc})

18:15:34 executing program 0:
r0 = epoll_create1(0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x4, r1, &(0x7f0000000100))

18:15:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000040))

[  349.904368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.905809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.011272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.012499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:15:34 executing program 6:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x8})

18:15:34 executing program 2:
set_mempolicy(0x8005, &(0x7f0000000080)=0xd5, 0xb9a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5b0, &(0x7f0000000100)=[{}]})

18:15:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
vmsplice(r2, &(0x7f0000000640)=[{&(0x7f00000006c0)="a3", 0x1}], 0x1, 0xa)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
r3 = accept$inet(r1, 0x0, &(0x7f0000000100))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xffff}, 0x16, 0x1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1c62}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

18:15:34 executing program 1:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804)
sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

18:15:34 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, 0x0, 0x7})

18:15:34 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window, @sack_perm, @sack_perm], 0x20000000000000aa)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

18:15:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000040))

18:15:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0)

18:15:35 executing program 2:
futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)

18:15:36 executing program 6:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x8})

18:15:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:36 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "421f0a"})

18:15:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000040))

18:15:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x78, r2})

18:15:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
vmsplice(r2, &(0x7f0000000640)=[{&(0x7f00000006c0)="a3", 0x1}], 0x1, 0xa)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
r3 = accept$inet(r1, 0x0, &(0x7f0000000100))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xffff}, 0x16, 0x1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1c62}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

18:15:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="d3f2b14fec493265753a76"]}, 0x24}], 0x1}, 0x0)

18:15:36 executing program 4:
fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/186)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:36 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000009c0)="52641f47b93944ffbeadbd1d5d44ba0b2d5ed5d5e843fc93d1e2d989d05742b2f61f6bcd8868e0381b3951ada3d9b53a2c39db1ff9bde7d6c2989571c969b50183795b7fbfa3eca58a48f0f9d99353e42e81b61e6b6a053b7022bf2b19f35e28d70714b24f4da0bb430e3d1da806d292f33ac902935833fb5719d1a9861b6fbdd5142747e0bec9991463b2df6d76e369b0dada4050178c1efe34ef44fd1f716b9387e600964c7172fd562becd5843764dcfec548c40db6d7e32e06c63e0bc4608a2dca3f6cd0123c6234f8fc8fc7e6abc62d7a2ebdd42b76a994b3009bd4020a", 0xe0)

18:15:36 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf}})

18:15:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  353.306458] Bluetooth: hci0: Opcode 0x0401 failed: -4
18:15:37 executing program 3:
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x1000000}, 0x20)

18:15:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000040))

18:15:37 executing program 1:
move_pages(0x0, 0x1, &(0x7f0000001700)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f0000001740), 0xffffffffffffffff, 0x0)

18:15:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000009c0)="52641f47b93944ffbeadbd1d5d44ba0b2d5ed5d5e843fc93d1e2d989d05742b2f61f6bcd8868e0381b3951ada3d9b53a2c39db1ff9bde7d6c2989571c969b50183795b7fbfa3eca58a48f0f9d99353e42e81b61e6b6a053b7022bf2b19f35e28d70714b24f4da0bb430e3d1da806d292f33ac902935833fb5719d1a9861b6fbdd5142747e0bec9991463b2df6d76e369b0dada4050178c1efe34ef44fd1f716b9387e600964c7172fd562becd5843764dcfec548c40db6d7e32e06c63e0bc4608a2dca3f6cd0123c6234f8fc8fc7e6abc62d7a2ebdd42b76a994b3009bd4020a", 0xe0)

18:15:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
vmsplice(r2, &(0x7f0000000640)=[{&(0x7f00000006c0)="a3", 0x1}], 0x1, 0xa)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
r3 = accept$inet(r1, 0x0, &(0x7f0000000100))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xffff}, 0x16, 0x1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1c62}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

18:15:37 executing program 4:
fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/186)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:37 executing program 2:
rt_sigaction(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0))

18:15:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x24004001, &(0x7f0000000400)=@tipc, 0x80)

18:15:37 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, r0, r1)

18:15:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000009c0)="52641f47b93944ffbeadbd1d5d44ba0b2d5ed5d5e843fc93d1e2d989d05742b2f61f6bcd8868e0381b3951ada3d9b53a2c39db1ff9bde7d6c2989571c969b50183795b7fbfa3eca58a48f0f9d99353e42e81b61e6b6a053b7022bf2b19f35e28d70714b24f4da0bb430e3d1da806d292f33ac902935833fb5719d1a9861b6fbdd5142747e0bec9991463b2df6d76e369b0dada4050178c1efe34ef44fd1f716b9387e600964c7172fd562becd5843764dcfec548c40db6d7e32e06c63e0bc4608a2dca3f6cd0123c6234f8fc8fc7e6abc62d7a2ebdd42b76a994b3009bd4020a", 0xe0)

18:15:37 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x9)

18:15:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:15:38 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8)

18:15:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
vmsplice(r2, &(0x7f0000000640)=[{&(0x7f00000006c0)="a3", 0x1}], 0x1, 0xa)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
r3 = accept$inet(r1, 0x0, &(0x7f0000000100))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xffff}, 0x16, 0x1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1c62}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

18:15:38 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000040)={'wlan0\x00'})

[  354.498293] Bluetooth: hci0: command 0x0401 tx timeout
18:15:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r1}, @val={0xc}}}}, 0x30}}, 0x0)

18:15:47 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000040)={'wlan0\x00'})

18:15:47 executing program 2:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

18:15:47 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000040)={'wlan0\x00'})

18:15:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="450efdffffff0000000007000000080000000000000008000300", @ANYRES32=r3, @ANYBLOB="0500530040000000140004"], 0x4c}}, 0x0)

18:15:47 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000040)={'wlan0\x00'})

[  363.261615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  363.292939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
18:15:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0x5)

18:15:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)

18:15:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r1}, @val={0xc}}}}, 0x30}}, 0x0)

18:15:49 executing program 2:
r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000240), 0x0)

18:15:49 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x40}}, 0x0)

18:15:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000009c0)="52641f47b93944ffbeadbd1d5d44ba0b2d5ed5d5e843fc93d1e2d989d05742b2f61f6bcd8868e0381b3951ada3d9b53a2c39db1ff9bde7d6c2989571c969b50183795b7fbfa3eca58a48f0f9d99353e42e81b61e6b6a053b7022bf2b19f35e28d70714b24f4da0bb430e3d1da806d292f33ac902935833fb5719d1a9861b6fbdd5142747e0bec9991463b2df6d76e369b0dada4050178c1efe34ef44fd1f716b9387e600964c7172fd562becd5843764dcfec548c40db6d7e32e06c63e0bc4608a2dca3f6cd0123c6234f8fc8fc7e6abc62d7a2ebdd42b76a994b3009bd4020a", 0xe0)

18:15:50 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000000c0))

18:15:50 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

18:15:50 executing program 5:
r0 = epoll_create(0x7fff)
r1 = io_uring_setup(0x3ed2, &(0x7f0000000080))
close_range(r1, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)

18:15:50 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
perf_event_open(&(0x7f0000001a40)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

18:15:50 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x0, 0x0)
pread64(r0, &(0x7f0000000340)=""/247, 0xf7, 0x0)

18:15:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r1}, @val={0xc}}}}, 0x30}}, 0x0)

18:15:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0)

18:15:50 executing program 6:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000)

[  366.176901] netlink: 'syz-executor.7': attribute type 9 has an invalid length.
18:15:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff)

18:15:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0)

18:15:50 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x8, 0x0, 0x87ffffc)

18:15:50 executing program 5:
r0 = epoll_create(0x7fff)
r1 = io_uring_setup(0x3ed2, &(0x7f0000000080))
close_range(r1, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)

18:15:50 executing program 0:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

18:15:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000d00)={&(0x7f0000000a40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x28}}, 0x0)

18:15:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r1}, @val={0xc}}}}, 0x30}}, 0x0)

18:15:50 executing program 6:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000)

[  366.504248] netlink: 'syz-executor.7': attribute type 9 has an invalid length.
18:15:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0)

18:15:50 executing program 2:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa)
fork()

18:15:50 executing program 3:
unshare(0x4000600)
unshare(0x20000)

18:15:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)

18:15:51 executing program 5:
r0 = epoll_create(0x7fff)
r1 = io_uring_setup(0x3ed2, &(0x7f0000000080))
close_range(r1, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)

[  366.803522] netlink: 'syz-executor.7': attribute type 9 has an invalid length.
18:15:51 executing program 6:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000)

18:15:51 executing program 1:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

18:15:51 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0)

18:15:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00\x00\x11', 0x0)

18:15:51 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x10, 0x80, 0x6, 0xfff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x9, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4, 0x7}})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2})
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1})
init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[')

18:15:51 executing program 1:
r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

18:15:51 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

18:15:51 executing program 6:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000)

18:15:51 executing program 5:
r0 = epoll_create(0x7fff)
r1 = io_uring_setup(0x3ed2, &(0x7f0000000080))
close_range(r1, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)

18:15:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8531)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0)
preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0xfdef}], 0x2, 0x0, 0x0, 0x8)

[  367.171316] netlink: 'syz-executor.7': attribute type 9 has an invalid length.
[  367.205181] Invalid ELF header magic: != ELF
18:15:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8531)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0)
preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0xfdef}], 0x2, 0x0, 0x0, 0x8)

[  367.255464] Invalid ELF header magic: != ELF
[  367.377994] Bluetooth: Unknown LE signaling command 0x2a
[  367.378565] Bluetooth: Wrong link type (-22)
[  367.379467] Bluetooth: Unknown LE signaling command 0x2a
[  367.379946] Bluetooth: Wrong link type (-22)
18:15:51 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9000c00080005002a1f04008cee0200"], 0x11)

18:15:51 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

18:15:51 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f00000000c0)={{0x1}, 'port1\x00'})

18:15:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8531)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0)
preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0xfdef}], 0x2, 0x0, 0x0, 0x8)

18:15:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00\x00\x11', 0x0)

18:15:51 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000000)={'sit0\x00', 0x0})

18:15:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x124042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0})

18:15:51 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x0, 0x4})

18:15:51 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000000), 0x6e)

18:15:51 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

18:15:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8531)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0)
preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0xfdef}], 0x2, 0x0, 0x0, 0x8)

18:15:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00\x00\x11', 0x0)

18:15:51 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind(r0, &(0x7f00000001c0)=@nl=@unspec, 0xf)

18:15:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000240))

18:15:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

18:15:51 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

[  367.723861] loop1: detected capacity change from 0 to 39
18:15:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00\x00\x11', 0x0)

18:15:52 executing program 7:
ioperm(0x0, 0x6d1f, 0x3)
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000))

18:15:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$tun(r0, 0x0, 0x0)

18:15:52 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

18:15:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r1, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))

18:15:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000018c0)={[{@journal_ioprio}]})

18:15:52 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
accept4$inet(r0, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)

[  368.096521] syz-executor.3: attempt to access beyond end of device
[  368.096521] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  368.100007] EXT4-fs (loop3): unable to read superblock
[  368.117486] syz-executor.3: attempt to access beyond end of device
[  368.117486] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  368.123154] EXT4-fs (loop3): unable to read superblock
18:15:52 executing program 6:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffa, 0x4)

18:15:52 executing program 7:
r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffffffff8695)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0)

18:15:52 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
keyctl$invalidate(0x7, 0x0)

18:15:52 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00')

18:15:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='wH', 0x2}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="1922", 0x2}], 0x1}}], 0x2, 0x0)

18:15:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000018c0)={[{@journal_ioprio}]})

18:15:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

18:15:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

[  368.481454] syz-executor.3: attempt to access beyond end of device
[  368.481454] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  368.482630] EXT4-fs (loop3): unable to read superblock
[  368.531907] loop1: detected capacity change from 0 to 39
18:15:52 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b4b, 0xffffffffffffff0e)

18:15:52 executing program 0:
r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1d, 0x0, 0x0)

[  368.542273] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  368.544271] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  368.561768] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.563598] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  368.570876] loop4: detected capacity change from 0 to 39
[  368.578527] Bluetooth: hci0: Opcode 0x0406 failed: -4
18:15:52 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@session}]})

18:15:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2405, 0x401)

[  368.590721] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  368.598198] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  368.606462] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  368.616218] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  368.617490] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  368.628021] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  368.646559] Bluetooth: hci3: Opcode 0x0c1a failed: -4
18:15:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000018c0)={[{@journal_ioprio}]})

[  368.649088] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  368.664259] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  368.675588] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  368.681371] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  368.687075] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  368.700264] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  368.705330] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  368.713185] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  368.722592] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  368.725461] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  368.728640] syz-executor.5: attempt to access beyond end of device
[  368.728640] loop5: rw=0, sector=64, nr_sectors = 2 limit=0
[  368.731419] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  368.738848] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  368.746446] syz-executor.5: attempt to access beyond end of device
[  368.746446] loop5: rw=0, sector=64, nr_sectors = 2 limit=0
[  368.750940] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  368.752661] syz-executor.3: attempt to access beyond end of device
[  368.752661] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  368.755647] EXT4-fs (loop3): unable to read superblock
18:15:53 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x1c)

[  368.793494] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  368.795372] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.803620] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  368.808702] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  368.813029] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  368.819428] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  368.826569] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  368.829418] Bluetooth: hci7: Opcode 0x0c1a failed: -4
18:15:53 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f00000009c0)='Rd', 0x2)

18:15:53 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0)

18:15:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000018c0)={[{@journal_ioprio}]})

18:15:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

18:15:53 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@session}]})

18:15:53 executing program 7:
r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffffffff8695)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0)

18:15:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

18:15:53 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0xfffffe01, 0x800}, 0x1c)

[  369.118869] loop1: detected capacity change from 0 to 39
[  369.133213] syz-executor.5: attempt to access beyond end of device
[  369.133213] loop5: rw=0, sector=64, nr_sectors = 2 limit=0
[  369.133315] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  369.136445] syz-executor.3: attempt to access beyond end of device
[  369.136445] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  369.136565] EXT4-fs (loop3): unable to read superblock
[  369.180976] loop4: detected capacity change from 0 to 39
[  369.204811] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  369.208969] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  369.212599] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  369.213415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  369.226810] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  369.227523] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  369.233800] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  369.235027] Bluetooth: hci7: Opcode 0x0c1a failed: -4
18:15:53 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0)

18:15:53 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@session}]})

18:15:53 executing program 0:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

18:15:53 executing program 6:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x832, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0))

[  369.334558] syz-executor.5: attempt to access beyond end of device
[  369.334558] loop5: rw=0, sector=64, nr_sectors = 2 limit=0
[  369.336895] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
18:15:53 executing program 7:
r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffffffff8695)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0)

18:15:53 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0)

18:15:53 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@session}]})

18:15:53 executing program 0:
ioperm(0x0, 0x6d1f, 0x562)
r0 = fork()
ptrace(0x10, r0)

[  369.529824] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  369.530778] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  369.531647] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  369.533921] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  369.535464] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  369.537505] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  369.539815] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  369.541903] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  369.607824] syz-executor.5: attempt to access beyond end of device
[  369.607824] loop5: rw=0, sector=64, nr_sectors = 2 limit=0
[  369.613219] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
18:15:54 executing program 6:
prctl$PR_GET_DUMPABLE(0x3)

18:15:54 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0)

18:15:54 executing program 0:
ioperm(0x0, 0x6d1f, 0x562)
r0 = fork()
ptrace(0x10, r0)

18:15:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

18:15:54 executing program 7:
r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffffffff8695)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0)

18:15:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f00000001c0)='E', 0x1)

[  369.775597] loop4: detected capacity change from 0 to 39
[  369.794832] loop1: detected capacity change from 0 to 39
18:15:54 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3)

18:15:54 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0)

[  369.899058] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  369.900985] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  369.909070] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  369.909758] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  369.913083] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  369.940579] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  369.941385] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  369.942090] Bluetooth: hci7: Opcode 0x0c1a failed: -4
18:15:54 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3)

18:15:54 executing program 0:
ioperm(0x0, 0x6d1f, 0x562)
r0 = fork()
ptrace(0x10, r0)

18:15:54 executing program 2:
pkey_alloc(0x0, 0x3)
r0 = pkey_alloc(0x0, 0x2)
pkey_free(r0)
fork()
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)

18:15:54 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x14)

18:15:54 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2, &(0x7f0000002340))

18:15:54 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prOfer=rEmative:', @ANYRESOCT])

18:15:54 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3)

18:15:54 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)

[  370.306696] tmpfs: Bad value for 'mpol'
[  370.310755] tmpfs: Bad value for 'mpol'
18:15:54 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

18:15:54 executing program 4:
r0 = epoll_create(0x402)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0))
r3 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))

18:15:54 executing program 1:
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1, [{0x4, 0x1, "c09c55cfa70c"}]}}}}}}, 0x0)

18:15:54 executing program 0:
ioperm(0x0, 0x6d1f, 0x562)
r0 = fork()
ptrace(0x10, r0)

18:15:54 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3)

18:15:54 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff})

18:15:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x1e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r1, &(0x7f0000001bc0)=ANY=[], 0xaf3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r2, 0x0)
syz_io_uring_complete(r3)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="710c4336a3204141a89eec17", @ANYRES32=<r4=>r0, @ANYBLOB="5b65b105000000000000004a6fd96d1b"])
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='&.\x00')
r5 = epoll_create(0x4)
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0))
r7 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x529203, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4628}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000200)='E', 0x140000)

18:15:54 executing program 7:
kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=';', 0x1, 0x0, 0x8000}], 0x0)

[  370.544067] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET)
18:15:54 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000080))

18:15:54 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

18:15:54 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x28901, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000580)=ANY=[], 0xb)

18:15:54 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), 0x4)

18:15:55 executing program 6:
memfd_create(&(0x7f0000000040)='C\x8b\t\xbe\xa5$\xba\\\xf4b4D\x8d\xa6\xf5r\xe7\xadz\n;\xfc|,\x15\xb8a\xa5\n{\r.\xad\x01du\x04?\x87\x12L`4\xbc\x88T\xdfC\xa6gp\x06r\f\xdb\xedq\x99\xeb\xf7\n\x83\xccQ\v\xcd\xa4`m\xea\xa4\f\xb4b\xa0~?9\b\xe5\x17\xca\xdf\n\b\xc7R\x9d-g>\xa0:\x8c<\x9a24j\x9e&.\xef\x19O\x95Q\xd0l\xc3\xabDc\x8c\xc3\xbd`Q\xf4M\xdc\xdf\x83|6{-!%\xec\xaa\xc3\xed:\xbfR\xb0\xc2\xf7|m,\x8d\xa9/\xabp\xe0M\a\xe4\x1ak\xe0\x86w[\x05\t\xe31\x15\xd4\x8d(N\x15zk\x06\x93\x82\x9aS3\xfaE\xab>2\xa8l8\x17\nd\xa5\x12r2\x95w\x80\x95!(k\x8b\x92E\xfd\x9fHo\xd5\xfb\xfbP\xd2\xa0g(&\'\\\xc8b\xf3\xbd\x02\xacu\xbb\xf0\xd6\xbe\xaa\x86J\xferD\xa1P|\n\x02J\t.\xb0f\x1e\xc1\xf1\xea\x1f\xbb\xa2INAX_\xc46v\xc6', 0x0)

18:15:55 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580))
ioctl$KDSKBSENT(r0, 0x541b, &(0x7f00000000c0)={0x0, "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"})

18:15:55 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10)

[  371.976183] Bluetooth: hci4: command 0x0406 tx timeout
[  372.490947] Bluetooth: hci7: command 0x0c1a tx timeout
[  372.491624] Bluetooth: hci5: command 0x0c1a tx timeout
[  372.492199] Bluetooth: hci6: command 0x0c1a tx timeout
[  372.492779] Bluetooth: hci3: command 0x0c1a tx timeout
[  372.493308] Bluetooth: hci2: command 0x0c1a tx timeout
[  372.493903] Bluetooth: hci1: command 0x0c1a tx timeout
[  372.494479] Bluetooth: hci0: command 0x0401 tx timeout
[  373.704495] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
18:15:58 executing program 1:
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000040)={{}, "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"})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)

18:15:58 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

18:15:58 executing program 7:
timer_create(0x2, 0x0, &(0x7f0000000500))
timer_create(0x3, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
timer_delete(0x0)
io_setup(0x8000, &(0x7f0000000280))

18:15:58 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8)
sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)

18:15:58 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x141602)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5309, 0x0)

18:15:58 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000000c0)={0x0, ""/231}, 0xef, 0x2, 0x0)

[  374.018211] Bluetooth: hci4: command 0x0406 tx timeout
[  374.037147] 
[  374.037337] =============================
[  374.037700] [ BUG: Invalid wait context ]
[  374.038061] 6.12.0-next-20241118 #1 Not tainted
[  374.038472] -----------------------------
[  374.038850] syz-executor.7/11242 is trying to lock:
[  374.039292] ffff88807ffdcf78 (&zone->lock){..-.}-{3:3}, at: __rmqueue_pcplist+0x4cd/0xe60
[  374.040100] other info that might help us debug this:
[  374.040546] context-{2:2}
[  374.040803] 3 locks held by syz-executor.7/11242:
[  374.041464]  #0: ffff888014d1c668 (&ctx->ring_lock){+.+.}-{4:4}, at: ioctx_alloc+0x207/0x1df0
[  374.043405]  #1: ffffffff85c16140 (rcu_read_lock){....}-{1:3}, at: __find_and_get_object+0x24/0x150
[  374.045221]  #2: ffff88806ce41518 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x4a5/0x2130
[  374.047564] stack backtrace:
[  374.048212] CPU: 0 UID: 0 PID: 11242 Comm: syz-executor.7 Not tainted 6.12.0-next-20241118 #1
[  374.049885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  374.050609] Call Trace:
[  374.050860]  <IRQ>
[  374.051071]  dump_stack_lvl+0xca/0x120
[  374.051456]  __lock_acquire+0x1535/0x4430
[  374.051856]  ? __pfx_lock_release+0x10/0x10
[  374.052264]  ? trace_lock_acquire+0x137/0x1b0
[  374.052703]  ? __pfx___lock_acquire+0x10/0x10
[  374.053126]  ? srso_return_thunk+0x5/0x5f
[  374.053533]  ? lock_acquire+0x32/0xc0
[  374.053897]  ? __virt_addr_valid+0x1c6/0x5d0
[  374.054326]  lock_acquire.part.0+0xeb/0x320
[  374.054742]  ? __rmqueue_pcplist+0x4cd/0xe60
[  374.055187]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  374.055649]  ? srso_return_thunk+0x5/0x5f
[  374.056055]  ? trace_lock_acquire+0x137/0x1b0
[  374.056500]  ? srso_return_thunk+0x5/0x5f
[  374.056902]  ? lock_acquire+0x32/0xc0
[  374.057262]  ? __rmqueue_pcplist+0x4cd/0xe60
[  374.057703]  _raw_spin_lock_irqsave+0x3a/0x60
[  374.058128]  ? __rmqueue_pcplist+0x4cd/0xe60
[  374.058572]  __rmqueue_pcplist+0x4cd/0xe60
[  374.059012]  ? srso_return_thunk+0x5/0x5f
[  374.059418]  ? __pfx___rmqueue_pcplist+0x10/0x10
[  374.059887]  ? srso_return_thunk+0x5/0x5f
[  374.060288]  ? lock_acquire+0x32/0xc0
[  374.060654]  ? get_page_from_freelist+0x4a5/0x2130
[  374.061119]  get_page_from_freelist+0x500/0x2130
[  374.061575]  ? srso_return_thunk+0x5/0x5f
[  374.061978]  ? hlock_class+0x4e/0x130
[  374.062360]  ? __pfx_get_page_from_freelist+0x10/0x10
[  374.062850]  ? should_fail_alloc_page+0xe8/0x110
[  374.063305]  ? srso_return_thunk+0x5/0x5f
[  374.063706]  ? prepare_alloc_pages+0x178/0x500
[  374.064159]  __alloc_pages_noprof+0x213/0x1f90
[  374.064596]  ? srso_return_thunk+0x5/0x5f
[  374.064999]  ? find_held_lock+0x2c/0x110
[  374.065399]  ? __is_insn_slot_addr+0x136/0x290
[  374.065845]  ? srso_return_thunk+0x5/0x5f
[  374.066248]  ? lock_release+0x20f/0x6f0
[  374.066632]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  374.067122]  ? 0xffffffffa0000000
[  374.067451]  ? srso_return_thunk+0x5/0x5f
[  374.067855]  ? __is_insn_slot_addr+0x140/0x290
[  374.068293]  ? srso_return_thunk+0x5/0x5f
[  374.068702]  ? srso_return_thunk+0x5/0x5f
[  374.069103]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  374.069588]  ? srso_return_thunk+0x5/0x5f
[  374.069989]  ? policy_nodemask+0xeb/0x4e0
[  374.070393]  alloc_pages_mpol_noprof+0xf2/0x330
[  374.070831]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  374.071313]  stack_depot_save_flags+0x575/0x900
[  374.071770]  kasan_save_stack+0x34/0x50
[  374.072155]  ? kasan_save_stack+0x24/0x50
[  374.072559]  ? __kasan_record_aux_stack+0x8c/0xa0
[  374.072997]  ? task_work_add+0xb8/0x390
[  374.073378]  ? run_posix_cpu_timers+0x65e/0x760
[  374.073837]  ? tick_nohz_handler+0x414/0x6d0
[  374.074268]  ? __hrtimer_run_queues+0x57c/0xa70
[  374.074724]  ? hrtimer_interrupt+0x369/0x830
[  374.075152]  ? __sysvec_apic_timer_interrupt+0xc2/0x330
[  374.075644]  ? sysvec_apic_timer_interrupt+0x6b/0x80
[  374.076117]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.076620]  ? _raw_spin_unlock_irqrestore+0x34/0x50
[  374.077093]  ? __find_and_get_object+0x75/0x150
[  374.077555]  ? paint_ptr+0x10/0x80
[  374.077922]  ? alloc_slab_obj_exts+0x56/0x90
[  374.078369]  ? new_slab+0xbe/0x210
[  374.078751]  ? ___slab_alloc+0x8a8/0x1200
[  374.079176]  ? kmem_cache_alloc_noprof+0x228/0x3d0
[  374.079641]  ? alloc_empty_file+0x76/0x1e0
[  374.080059]  ? alloc_file_pseudo+0x139/0x200
[  374.080496]  ? ioctx_alloc+0x551/0x1df0
[  374.080880]  ? __x64_sys_io_setup+0xc8/0x1f0
[  374.081303]  ? do_syscall_64+0xbf/0x1d0
[  374.081699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.082201]  ? srso_return_thunk+0x5/0x5f
[  374.082609]  ? find_held_lock+0x2c/0x110
[  374.083014]  ? __virt_addr_valid+0x2e8/0x5d0
[  374.083436]  ? srso_return_thunk+0x5/0x5f
[  374.083848]  ? lock_release+0x20f/0x6f0
[  374.084227]  ? __pfx_lock_release+0x10/0x10
[  374.084633]  ? trace_lock_acquire+0x137/0x1b0
[  374.085072]  ? srso_return_thunk+0x5/0x5f
[  374.085476]  ? lock_acquire+0x32/0xc0
[  374.085843]  ? __virt_addr_valid+0x1c6/0x5d0
[  374.086264]  ? srso_return_thunk+0x5/0x5f
[  374.086667]  ? __virt_addr_valid+0x100/0x5d0
[  374.087095]  ? srso_return_thunk+0x5/0x5f
[  374.087502]  __kasan_record_aux_stack+0x8c/0xa0
[  374.087938]  task_work_add+0xb8/0x390
[  374.088315]  ? srso_return_thunk+0x5/0x5f
[  374.088715]  ? lock_release+0x20f/0x6f0
[  374.089094]  ? __pfx_task_work_add+0x10/0x10
[  374.089522]  ? __pfx_lock_release+0x10/0x10
[  374.089922]  ? trace_lock_acquire+0x137/0x1b0
[  374.090352]  ? __pfx_lock_release+0x10/0x10
[  374.090773]  run_posix_cpu_timers+0x65e/0x760
[  374.091219]  ? __pfx_run_posix_cpu_timers+0x10/0x10
[  374.091709]  ? sched_balance_trigger+0x1ac/0xcc0
[  374.092173]  ? sched_tick+0x1c6/0x310
[  374.092538]  ? srso_return_thunk+0x5/0x5f
[  374.092947]  tick_nohz_handler+0x414/0x6d0
[  374.093363]  ? do_raw_spin_unlock+0x53/0x220
[  374.093793]  ? __pfx_tick_nohz_handler+0x10/0x10
[  374.094255]  __hrtimer_run_queues+0x57c/0xa70
[  374.094711]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  374.095188]  ? ktime_get_update_offsets_now+0x260/0x3c0
[  374.095695]  hrtimer_interrupt+0x369/0x830
[  374.096123]  __sysvec_apic_timer_interrupt+0xc2/0x330
[  374.096610]  sysvec_apic_timer_interrupt+0x6b/0x80
[  374.097071]  </IRQ>
[  374.097288]  <TASK>
[  374.097504]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.097999] RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50
[  374.098520] Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 b6 7d a9 fc 48 89 ef e8 be f0 a9 fc 80 e7 02 74 06 e8 04 4a d3 fc fb 65 ff 0d 54 ec 7c 7b <74> 07 5b 5d e9 a3 1e 00 00 0f 1f 44 00 00 5b 5d e9 97 1e 00 00 0f
[  374.100090] RSP: 0018:ffff88804178faf8 EFLAGS: 00000286
[  374.100578] RAX: 0000000000000121 RBX: 0000000000000202 RCX: 1ffffffff0fe6a87
[  374.101206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8486ba6c
[  374.101838] RBP: ffffffff85d019c0 R08: 0000000000000001 R09: fffffbfff0fdda03
[  374.102473] R10: ffffffff87eed01f R11: 0000000000000001 R12: ffff888018e89818
[  374.103107] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888009402cc0
[  374.103748]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  374.104221]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  374.104697]  __find_and_get_object+0x75/0x150
[  374.105132]  paint_ptr+0x10/0x80
[  374.105477]  alloc_slab_obj_exts+0x56/0x90
[  374.105894]  new_slab+0xbe/0x210
[  374.106246]  ___slab_alloc+0x8a8/0x1200
[  374.106642]  ? alloc_empty_file+0x76/0x1e0
[  374.107061]  ? __pfx_lock_release+0x10/0x10
[  374.107459]  ? srso_return_thunk+0x5/0x5f
[  374.107855]  ? lock_is_held_type+0x9e/0x120
[  374.108271]  ? alloc_empty_file+0x76/0x1e0
[  374.108680]  ? kmem_cache_alloc_noprof+0x228/0x3d0
[  374.109132]  ? srso_return_thunk+0x5/0x5f
[  374.109530]  kmem_cache_alloc_noprof+0x228/0x3d0
[  374.109967]  alloc_empty_file+0x76/0x1e0
[  374.110360]  alloc_file_pseudo+0x139/0x200
[  374.110773]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  374.111235]  ioctx_alloc+0x551/0x1df0
[  374.111598]  ? lock_release+0x20f/0x6f0
[  374.111973]  ? __x64_sys_futex+0x1d3/0x4d0
[  374.112369]  ? __pfx_ioctx_alloc+0x10/0x10
[  374.112758]  ? lock_acquire+0x32/0xc0
[  374.113119]  ? __might_fault+0xe0/0x190
[  374.113516]  ? __might_fault+0xe0/0x190
[  374.113910]  __x64_sys_io_setup+0xc8/0x1f0
[  374.114303]  do_syscall_64+0xbf/0x1d0
[  374.114688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.115162] RIP: 0033:0x7ff5ff440b19
[  374.115505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  374.117036] RSP: 002b:00007ff5fc9b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  374.117698] RAX: ffffffffffffffda RBX: 00007ff5ff553f60 RCX: 00007ff5ff440b19
[  374.118313] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000008000
[  374.118939] RBP: 00007ff5ff49af6d R08: 0000000000000000 R09: 0000000000000000
[  374.119555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.120169] R13: 00007ffcebed4bef R14: 00007ff5fc9b6300 R15: 0000000000022000
[  374.120798]  </TASK>
[  374.228193] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
18:15:58 executing program 1:
perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  374.530215] Bluetooth: hci0: command 0x0401 tx timeout
[  374.530760] Bluetooth: hci1: command 0x0c1a tx timeout
[  374.534295] Bluetooth: hci2: command 0x0c1a tx timeout
[  374.534796] Bluetooth: hci3: command 0x0c1a tx timeout
[  374.535351] Bluetooth: hci6: command 0x0c1a tx timeout
[  374.535834] Bluetooth: hci5: command 0x0c1a tx timeout
[  374.536354] Bluetooth: hci7: command 0x0c1a tx timeout
[  376.578390] Bluetooth: hci1: command 0x0c1a tx timeout
[  376.584831] Bluetooth: hci7: command 0x0c1a tx timeout
[  376.585865] Bluetooth: hci5: command 0x0c1a tx timeout
[  376.586884] Bluetooth: hci6: command 0x0c1a tx timeout
[  376.587887] Bluetooth: hci3: command 0x0c1a tx timeout
[  376.588888] Bluetooth: hci2: command 0x0c1a tx timeout
[  376.589884] Bluetooth: hci0: command 0x0401 tx timeout

VM DIAGNOSIS:
18:15:58  Registers:
info registers vcpu 0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82646205 RDI=ffffffff886796a0 RBP=ffffffff88679660 RSP=ffff88806ce08cb0
R8 =0000000000000000 R9 =ffffed1001d55046 R10=0000000000000034 R11=666666203a322320
R12=0000000000000034 R13=ffffffff88679660 R14=0000000000000010 R15=ffffffff826461f0
RIP=ffffffff8264625d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff5fc9b6700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff5ff550000 CR3=000000003fc26000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007ff5ff5277c000007ff5ff5277c8
XMM02=00007ff5ff5277e000007ff5ff5277c0 XMM03=00007ff5ff5277c800007ff5ff5277c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000594 RBX=ffffffff85766594 RCX=ffffffff8480e99e RDX=0000000000000008
RSI=0000000000000001 RDI=ffffffff85766594 RBP=0000000000000008 RSP=ffff88806cf09908
R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000000 R11=00000000000c3926
R12=fefefefefefefeff R13=ffffffff85766594 R14=ffff88800eea28ec R15=0000000000000000
RIP=ffffffff84a01470 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f879059f700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555583237708 CR3=000000000f05c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000