9260b088f35657a48f3abecb896260a8be97935885db4c579fd32e85e1626e89684967dbd687dc63b740ebd005c4b4897bf0ed340ee4a5e41a225efa5474fd281e66144d34e23b0285f8c4024e787bc592c334f9eb5ff5be7c4350a9cf9a42780852d27fbdbc722150e8f7ab63a64a72c4680be1caaeefa0d0c1fe02131cb6a0ff7f943d57a9c38c9d2dbd438124efe66eae18aad244fed0a2e8dfd60104fff83f34843461a3eaff2fc5c50557451334c3a4b8d2643dfc805c6e0d7342d996c58e2307608971b678051b75e3adb71bbc06aa23364e694c5e4a9fb8da2fc0b7299cabfd9c864da7e1637c0cc74eb6ad1440e060dfe245625a9c9ff6e2112d8b7438a5966477721c9b053ec4ae7aa25cf6d218ca7dbc6046249faa7035e297f5362739bc617a70bbfb0437a75f0a959e318a013b2711b37f0f656b2510886edcd29b3461f1da2b52a85b77385b5fec37abdf14f247fc434e5cedf8b129721b68a03d5572fffe10ce6590260808ffce7e62338fb2844e24ba99631bcbfae8c30efcce81d2d704d9bbb069a3e2310ebf9be120fa480944028fc79a29e335972a9701e53cd1f1434e37bcf9259e207dbfb4b66fa7369d2c99d42e84939c5f67e2f7ca04ff0270bcdf91d9af1e6263cb9bc92c81777487cf6f83d37001dec7be733d15f338dc0a8db3da8c2733b9172192085d6c0bac9be465befbd468c49d12833ac007910946c09d6495f7cdfaa2f566c80b7a09da48853b54056281b360eb8363ae3fe7cd48adbbd261a14b9feb4e6fe4a71c9e8883d037e03626f101e1293749ec48ca59325d667ea08495eb2e679f5ff31b5a5f67762d599890aa9f961cd32eda0c9f9df59e53e7dd979cb44a9be2c42737c0ae08db3a685e48cebbf97b6e47e6bb9b6b891c2a9861da4efbc1bfad5c7afdbbc5e1bbaabdc5d2b89e46b60be7aa5745477cfb8f0515b05e3c21be02e029d51a26cd5148fca40049cf5dcac027cd094226e459aebb25078c3f0ff5a265cc3200e0dd1f9c7072abad107580723cc89c15b4dc2192ec11013d556fecae599bc40be3ae5f7c947d74f719ca2c119a3781e0301e3fcf64eeb1a97e2bd225c7fe64b0736d84bd2dc0f3f5313d7c9c3c562e717a53ca3ba36910d8655128073f6a58532e0bb1ea1a1d016a25bfbbf58981531a2b0ed1781953b223c85097c65b9accb9aa4b87cfc11b407b87fc5bf30398a8a1bec6d992b85ec755490a3879d9f0f2c70d5a65e478877817c2a6d28118fb50f432288987356c95f01db69f099fc1e7e6c28d3c8b2a0ddd0f6f74309c7ff7af5fad900d1e53194d1b03fe22fdb7b6cf498d33b039dbe30e6187be4d26a32d7f580a24de2fbe8cca1852cf2c39226b4cbbd6751904381e40d37727c2f4af244e04d7e5b6cb4cea268dde2f252c636dc2e42ef8dea15a864ae472ec9a83b03ed8a60d36fc87398d9303278789d0d7f9eeb88d6ca803fdf9725df8d61ed9ffccfd7721204d1696ccdf5668fcc945c8bdcda30949c34e1f236aff9023d4551d32a3245dabcf8c763150ba815741b442f59d0fa61f748073fdbc86c0dad3c286533bd6006ae8ec55c8e93b1e7d6313fe8d9272fa43f23d981ad07ac6348dac2809e8b01fbb16384629d307f30106c7283589e978025069cd5c6da7d136fde8e5e89c31292ff3bb2bae93b82dc703808f9b420ec723cd56a6f3b3eca120d151c7c4565d4f2b87a807637fc2ac1391014deafe2d60e56f467e075b8611ce2d741fddf6b844e29fa176126d3ca536c52f7f9cd003e6939074912f92b4c4942b1cd6bab30a512a77e3b70ae4771620ff8aad95590f636e8fe93b49c76260e247a19de14c159ce71b63290575a15dfe88749631ddde5440ccbd993269ffdbf97f061e64d3828f3aecaf5f1050b06f8cc22df0e14e96d2bd2853f9eb386a84ad78dbebd4e5dd1dd5ded96f25972aa2a3009bc0fb03af43852806ad59ce1a789b199f6a1cff1cd6b48fa596b8e345dbee3bcd16706d06cbd19520554793f8b7bef690488b5fa4f8598a79bd8f8035f8690d4973b292368ca0efb4d67c1a2bb489ba1719284cf0c590b675b56e490ce6e99aab52ca8b63b7a500002f8f7b32798ea4b9fcaedf2045ea7c94b313f7693ca0c7cd45f7c4c935716db9bf4321cca0d5c345171eec7da3e3a1f38dee3aa6b2f781d2d39604404e115453c6c57c6c255347a2a81ced5324418e3e75f5521a318d2b7a1ceaad128ab5eb537169d8ecc910f32798e436b5c40b1c09a7bfc0481f0115d273d149027b6dec373599f4c39cfa00726cc9875bcdcf3461d18cfe6ff20e8e40d5da8d7349c5e9dcc2e1738000b17d0068be7234df80abced38cb0271741e0d25d37c008569a029ec8f1b88369a033590fb994cab29b5e1b61a602155009634985d58b05c46cd9fe677a064110cc3b939caf8892a1659d458dbfa738a9179db894bbab3734c7de5e9095d90f417485b2b53b7aab1ecddd562a02877e438045dcff76885732965439e110bbc8a03a89bda5d238ede9293c996852fb4f93a45652d0592db391614a48e731cadbc78449599729f3437bc5b96bb73698288fb654859da63a5e3883880c35c17b63e86f013b480392e1f52a576165de967e139e3062b468f81d49548fad393a7494dc4a1dfc9d36ebaa2cf34193421a111af49c74ae17b5c8eaba4db86faba8ff6f4249b01c3211e02a5a552902d24892d18e89261332469cd6759c4e35014d7c8c209657ff4730ca4f33334961af19b218103bde244a4e506777daff58069a0096c2c8e55f1e7ba2a8db93464923fea4b8e42167fc8ea05edc27d97c4aaf4bda2fd3b2b707c593c881fbb46d651783dbb4ed8d419c232242467cb3fe32adbe0b4f2d4a109e584f2b70b0cd0011b97156a431ad73fd604818c59ed8ee0305727eafd94dcb7f7b2d59f35457e6ffa7204ea1c5523f9c14228daaf88bd5e8eb327901a7246051347cd67048b5183b102d3ab804b02c47330cdcd86362d416a497ab4753e6e35781a0d69c00eb580d9b63d1278c6e1ce182917729bb81470868be76366e3c3f2ccb0518fd3c488c2e64fdc320fc7db3ccf6ef346ad045a8aa7cab355bf271a0bef778fc50e191a5e5e4c1858b8d3668dbd0803335bd1f7a7f0ba3ed5f0220be3afdc1aa1e36bc4cd0e504fa02954109bb29abeeec6eb570193aa78ea56a6121d0bb00e53e5cd3a84fc75f62f161b495044f95ac2f2bfe533666c017455520d64155c7ecf4d1dacf5fd8afd35"})
write(r2, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[  997.261213] loop1: detected capacity change from 0 to 256
[  997.268451] loop5: detected capacity change from 0 to 513
11:23:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40242, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[  997.286736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  997.300350] audit: type=1326 audit(1760959395.615:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8743 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bafe8cb19 code=0x0
11:23:15 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:15 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
close_range(r0, 0xffffffffffffffff, 0x0)

[  997.400348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:25 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x546e, &(0x7f0000000000)={0x0, 0x4d02, 0x8, 0x0, 0x1ed, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:25 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x480140, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'wlan0\x00', {0x4}, 0x9})
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:23:25 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = accept$inet6(r0, &(0x7f0000000c00)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000c40)=0x1c)
connect$inet6(r1, &(0x7f0000000c80)={0xa, 0x4e24, 0x80000000, @loopback, 0x8}, 0x1c)
fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x3})
fcntl$lock(r0, 0x24, &(0x7f0000000100))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x8e14, 0x200)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @any, 0x7f}, 0xe)
recvmmsg$unix(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/244, 0xf4}], 0x3}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/24, 0x18}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000700)=""/156, 0x9c}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001400"/20, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/101, 0x65}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x20000002, &(0x7f0000000b80)={0x77359400})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'})
write(r2, &(0x7f0000000d40)="b3cec6a5733cc5f7a1fec86bcdd800c655220eeabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d543df2cbc48a9c1fc45139d5532546602916beb4b3802c1a445be173afda290e98cc57c25a9fc9311896f65f8ffffffffffffff3c945998835e100e2544f096cc60ce80af5cbf8db8fdd3647cacc5cb63c4799d4c76575d62db43", 0x92)
r6 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
copy_file_range(r6, &(0x7f0000000100)=0x9, r3, &(0x7f00000001c0)=0x1, 0x5, 0x0)

11:23:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x403ca, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:25 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x6fa8, &(0x7f0000000000)={0x0, 0x4d8d, 0x2, 0x3, 0x5f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180))
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:25 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
fcntl$setlease(r3, 0x400, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
dup2(r1, r2)
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"7b643e8144eb68a4e59a3d88", &(0x7f0000000180)="317ea26b5f048b44c021250ef34d6bb62c6ed0f5f46ae61afe0daf6d98279714ca712e31af72760ebdd5e97e51795fb4780cf0ad99c48ba13ed49530c5f6a4f944519679e011819024e240c71994357381ab6f70060498a6965d9e388a95d7f9519a5d387fef9977991994b3b2a45ec1ae9313ad62cf2b6cce7e2c46fc6222cd", 0x80, 0x8, &(0x7f0000000040)={0x15, 0x1, 0x8, 0x8, 0x0, 0x0, 0x0, "1680f90e", 0x32, "a686b227", 0x4, 0x0, 0x4, "74cf9b", "8a859efb2210d9cca2e14946692dd5f157cdfb77cc66aea4f0a6d662457b9867d8434ca08095a8fc11d0c47be518"}, 0x3, 0x5, 0x1, &(0x7f0000000100)})
r4 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x30, 0x1000, 0x0, "3900c375e622f031614ffabb48cf89590902358c65701454614273935949136010bd5ae92e53870bb9bff1d2c4707a2d"})

11:23:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c655222e8e0bef48fb8cb2c8f1dc13636df0d850d8193c1b5f92d01c07b7616427729d55", 0x33)

11:23:25 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1007.507730] loop5: detected capacity change from 0 to 513
[ 1007.520564] audit: type=1326 audit(1760959405.835:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8778 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bafe8cb19 code=0x0
[ 1007.527748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1007.611199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:34 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x11f5, &(0x7f0000000000)={0x0, 0x2981, 0x2, 0x0, 0x3d5, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))
fcntl$setstatus(r0, 0x4, 0x44400)

11:23:34 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)=<r1=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r4 = dup2(r2, r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
syz_io_uring_submit(r5, 0x0, 0x0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r6}}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r9=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r8, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r10}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x3f)
syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0x6, 0x0, 0x7fff, 0x0, 0x0, {0x0, r10}}, 0x5)

11:23:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:34 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write(r1, &(0x7f0000000080)="b3cec6a5733cc57a0149f7a1fec86bcdd8fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761782772d5295f67ba01b80f994500000000000000000000000000000047e17021162e4d51534f05e1f660e021e18d4051310d7aaf25630f1943391b4767a7ea94a0c6c65f9d9c9e0aea9c6f98ae8300", 0x77)

11:23:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x1}, 0xb)
ioctl(r1, 0x8e0c, &(0x7f0000000040)="8aa31129276fa4252f22d5e1a6")

11:23:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40410, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:34 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x480140, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:23:34 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400f0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1016.539998] loop5: detected capacity change from 0 to 514
[ 1016.561036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:23:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1016.586747] loop6: detected capacity change from 0 to 512
[ 1016.627516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:23:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1016.634886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.690705] loop5: detected capacity change from 0 to 514
[ 1016.699198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.704579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1016.766018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:43 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x79cd, &(0x7f0000000000)={0x0, 0xd279, 0x2, 0xeb4, 0x10f, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
sendfile(r3, r2, &(0x7f00000001c0)=0x6, 0x0)

11:23:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:43 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:23:43 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x87, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0xe)

11:23:43 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x80000001, 0x0, &(0x7f0000000040)=[r0, r1, r2, r0, r3, r4]}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
sendfile(r1, r2, &(0x7f00000000c0)=0x3, 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x4})

11:23:43 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

[ 1025.566567] loop5: detected capacity change from 0 to 515
11:23:43 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000014c0)=[{}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/153, 0x99}, {&(0x7f0000000100)=""/48, 0x30}], 0x8)
io_uring_setup(0x3cfa, &(0x7f0000001540)={0x0, 0xcafd, 0x1, 0x3, 0x300, 0x0, r0})
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1025.603226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:23:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40024, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:43 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x80000001, 0x0, &(0x7f0000000040)=[r0, r1, r2, r0, r3, r4]}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:44 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1025.701424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:44 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40024, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:44 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000d00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYBLOB="53cb09aacfd2d7e246a88cfe72b0617cf069afa8cccf464bd91aead36c2ad278a3e8f6cbc76d699536acb9efcd329e6164a16d0e9d01e863646494178a3bd3469d5d0c5d0a9b03938bc99d584c5ff76b08f6f474c1d61d4a9ff14ec68199f0fec41968ded82c8de0f2ab9a2323980530bf9383e09aa1176a4b8f813cc72c5c3a8b83175daeb360c4db4a8ccba395d62464c315f9ba0bfc55cb27cefaf199eb57af7543e408faa3eddc6069fd11adbcba73395ad54c7e5c50766e9f80", @ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x49885)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r5, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r6}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x3f)
clock_gettime(0x0, &(0x7f0000000100)={<r7=>0x0, <r8=>0x0})
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={r7, r8+60000000}, 0x1, 0x0, 0x1, {0x0, r9}}, 0x400)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)

11:23:44 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x80000001, 0x0, &(0x7f0000000040)=[r0, r1, r2, r0, r3, r4]}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:44 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40015, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1025.778309] loop5: detected capacity change from 0 to 515
11:23:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40024, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1025.844408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1025.869994] loop1: detected capacity change from 0 to 512
[ 1025.893011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1025.947707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.965218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x700, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:23:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x4, 0x7f, 0x1, 0x8, 0x3, 0x80, 0x8}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:23:53 executing program 4:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x4c}}, 0x2404c0d4)
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000040)=<r1=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r4 = dup2(r2, r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
syz_io_uring_submit(r5, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r6=>0x0, <r7=>0x0})
syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={r6, r7+60000000}}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x10001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0)

11:23:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:53 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x44)

11:23:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40008, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:53 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:23:53 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)=<r1=>0x0)
socketpair(0x10, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
pwrite64(0xffffffffffffffff, &(0x7f0000002cc0)="bb4a526f13430b227bb6dc7031d21479fe3e666d24dcef1f5708e80848e29f2fc53e715ddfc8995ceb947686f64ab573cdfd25df31c3cf4deb4d9199aefd139df153019a84b034b8c33572b99676422ff90a1903bd48f6dcebdba08950dd8da1f51cee598e632f233280e20c79ef48ba372519dfd0cc1b475dccf1baf970d3cde3788c90118198af78224d15", 0x8c, 0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'bond_slave_0\x00', <r7=>0x0})
sendmmsg$inet(r6, &(0x7f0000002b80)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="3fd03a0222f59498768c9fbd23dc36543faf9dfde66149fb749a6c5e51dc861edeb8d60aa5291f35262ce8570944b804c5a3294d2a4eac545edb2cedd7f7432daafa", 0x42}, {&(0x7f0000000400)="62f4d65df421e149fbbd8ed6b0ab70d2f9d53576bdfdbcfa0c759ddefa344c4478532b41674ea4ad4f9d77201f68c0426781c4994983c07361d23c0d2a03718d77faa48259fb7c82e34fd770c17edaa8c7bea3ace197325391d3f27a8205597dce687802a2fc4aa9946129f15c94fd92f13deafda7abc297fcccb9224e79b1ca7b5d441f4ae38a94ddcf291fe4e399ded1e4da75b0ffafc8f9cc12287f88ba359b6c2dc0ef82a3c4f2e490846dc6e2d43418449309b44255b01e6efdb539e6c56de0e40ff5c6efee17d76b875e0ccb87a4c50ea7f0688cf5e9a5fc441de74e6cff07f931f89a33ad3d9c5e43ed777691ca9a08aabb451177835d2afc5414aadf44e9c6d7bb002937cc4831ff917066a40dc7c66af340f55d59961f85341146c0f9b6c423f841fbe20b154099b658d2ae189cf137508a2d2d8fded02ca8d9c50777fe751c4a36a24915b18bdc2415a0d3d61f95d180ce6b46104b902caf57e0b37086057cc4fb2f1e12afbdf02c381748f44df446568b0277973ad833d35c002e4243008ab53a52c6263ad71877194a6be4aaee3251b95edd38b1f0699acdef6a2b0d16abf5687109fc47458312d87af13a659baffdbddf7d5978e06f30047522b325e07b91eb9a58dbcd04b0d6e6cebb78e1094d65dcf622c9b3d86561752611cfafda72f9f919120bbe0fd982f419c77b27fda30089d70dc4ef1d04e239580070e3c27539f2b627a8bb779cc917f183c6264784da1689419a0e88023a93935b38a53e520ab064d193add5ce2331f8a809f42a5e905693d76829f4f86fc1fefbce4dc31d20a89372e694a37456f50414b3cc5c5048380e998c425c86980f3e02c7ad7c89f2611866039e2141d81f2ad988a5fdc27a80f53b93af8db825797d909c208e5c94fb3851150e5af79c949f67af07dc490d75adb3986248011ce8a7c266882d482ece3b422d0f21b1e87575b728ceb9f84328bc02ddeec2c8886b56485ab2673dab486774df826a3d032d96665f9d2387275483972595f0522988b04a19bc015331f070d4f1f2d2bc48fa53f7f5a9248a71a9c213df1de78e613c29b534a9e7ec25a44dcaf154748bcbc50e8d19b576cb2a7c48674617b82cd6afdc5f63ab353c4aca05a0190696e60e061a3721474d2ebb97a64d7790f2f3b6719ef7af032622f9c403d074c76de16fe652c896d7f77e63312016cf1191f88900d549fd7aa31851716fdae2be42edf7feb34bca8d186fcae8bf71fd232456521fdf238f4cc9f50475620151d3494410f728952d8d57dfe6c128c830e63b02d1619b166524232780afbfc365243f6c16bcbc7de1fb59ae1799154c8dbd3bd109c828e63e2d4b7df47246ceb19bdfee019fb44a954ff8bec9adc0feaeb7b63d99035cd8a95f28d8c27a1ba9d1fdad676c74f494f508ee530d8fcea886e15c6d8a38647f040c551af3e2b3bf5a24a0f967dc2d641ad058e5aa0522a643d2c4a58f40e7c1b3f93008b7c4d424354ac78f12a56b55406df99b1841ecce53f16bf75c3417eae6fbb94728d4aab10c866974e7d039191eaca627acd1d1c8c092cb501bc8e6c2ab584d31701958c8d246ad5a107b849b6f45fe7e2fdab30ae96ac07c818a5aecf108e0231f2eb9531fd3f247884ac7e918baab594c974dcb2b45cbb9050ef3f6e2f0ab77877a340e5dd45b91f8d6754fe2c2756b5f8e494b05c1abd87b55bf832b5d854c0f2f0018ebaffe14f034a2b18c3befc6fde9add97e3f5305677e30506b24ab8db902ffd60d09af52d1386a0bdf86a9364e702db40c19fec95013375a1c22501d2149d1fbb7a79344e300f08d4ebd059842b0e590ad1ced2965bd248816820e032d12790129ad0fc8d326a7475fd680585c3a5cfab9259df117c3ef841242c12a8b8915ddc026aeb4f2b02c0c930b862bf0eae789cff315cbb011866ec20699cccbf99bc21d351d97152a55ff77222377adb9809ee08b73840aeddbe847a5814948347bcc107f50cf829bc27b333e379bbac67c31e311c6a9b9264176ec3fdda41e4f68c29298273b9f57d789ceda6e0ea8a791031feecce492cd2073ca86dbc6ddce682b0a48afa2d62ea0891144cd4f34cfa1fe3c0f065133d05732fe5531f43c60ebffadc78363fd90135ddec203924fe2ca2fbc480b81b46d4fd03003ad29e50d3393d84c8615860c91185676d067b636955eb9f3799c0d0ce62ebb993af90a897e962c8d0beec81908bad70f41d7b1ee1128b8dfeba9cb2fff51a687af43d278e42df7668c09650b58e48c0195ceb95a319bbe1d9438ed572f3019e9257a0da3a942ae6fed7ca7de75a03e1bec44d1eea0de94e1daadd8fdeb08f9a82ada3c82ddb5e9a71a862975421c5540419a8a3403cebe7c76ac049a85a877ec856070647789b74d86ae79f340602393668975ef1728545de94303851a83e11b0bdf280170634acd48dc6016698fb8c8040aa190d95195cbc5302d311a9191f267ec7eee23c1d12e578e9cfab970eda9af7d8b892b164479808972f086f64d893a8b0c83f1270317da03572abc3293a66e0cb82e5939558424016a4590bd76dbc2e097b74f800eb80769d1b0bd726aab5f38e3b862fcd67f92726df96a73df839dfad9b1c41e316732bde2363bdfd750befdb3002cf047f630dc1d9c667507dd1eb6178a56e94352617738dde47dee1e81672af334575e9b985239cc678c234c1f1a564befc98ca4a9aed37f444bdf7a018615987c96db8698314a18fa545e166bcc24a011c3f56d31685c31a719b3fe17754b57ee467dcc1936c000610367bc60328310b2345e71f5fe6d598591a50592b998a8a050eebd5152c93bfeb0353a124c3f1c5de9d0e69b48cbefad4ecfc98e21b3fb1f06d298d810b5de71a6afcb4ecdcdf34bbdaf6bb420e0497a55d0bc98e2339d861116d0fc6cd1779d86b96e6c4bdb205a64810427fb300acea201432bf6b039b58b9014093a3928e3bcc89b9f9b98ceb710c45ae38f0381564936e215ecdda4e180673de8e62a31076be2857aa30ae693053cce0cb6e8aeb5bcebd845d5edace90fddbcef6f841f0c9f1728178cf0a98a60e5698a616c42873e9b6424d0086874a8a9774d75ddd3d1ebd38fbdd3fef9c674fd6790fe3da2fd8755f3e52427553cd0e189a61ebf8c61c002d9782519f5999cb66a49c11535a1a01e5401322023ef4716391ecdfb59627f3acfe0ce3b765e89f809447bc80c5754f176d59d8142eb1c664793a0e25198243b5429fe862a84d65459475203f53f94391655c3bde41c9f1b98aeb8a6facc5c70dc9cc0e3a301d1de5ead5d833a07564fbd790edbb572ef2f4734542c4b9c60946830aae4d3fa87bae7a3a635f399d06578182a25c3e5fc8945e355808a77a4d2706e2270cecce59842414011e7649a11509232d26320e88960cf76fb796b2b97adb9dc8c3c2df8c8e526c01f4291764a7761fb4453a560e077dcf85ad7b566c2385ffd82cc86a60fdb3430ac19b2a93b918c70d42be90d6a2d44ad9aa317046473aafcaf7d3f80234201defca40a4fde8341a2184d4cf8384fbd838d7cc1c4ec3d6e587d10ed7cebc0e7f24d40a442f93b56f566b80c3a10903b8e94c260b66b5c43f93e9306e18997afefd1896b4c2252ca7456757101a36e90075265f8a6519948d8d46f197a1110961b112b8c72610396356984f4f08e30b1779882eb3c91620ab92b399e42d5cb8f0044d9996b29238ae3a504dacd2093f85884a699489bb346e51e718094673e65c49ffadf48616a52a1c0f7dfe2b595af12b8af6e1d097e9c6e522dc8a2edb15b0081c91b6d6ec3a4691542c8bd0cd22060e902fe5a11ea13f9c9fc646abbc407df79b120eb49d8253da2634deee3f8c25e62b384952eb5359757683026db76e32d5b4f6002dda94897a9998c1d3d12b286fe08432178f60f324ba3ae3162c3b029c515bb5d29110e77c0f2b896f33935c4c61e2b78d1b60f55ee2d2c09a1a08e7831914ab6a950816a4f7a64e86b2fb66f7c334a6d259a78e369f012276ced2fa53df30517fb52cb69fcc4b630b430dd927573abc64141d1d1abc80decf9d3ab7983f0d6ddb366ff8cfc16550589686b7251ddfed4c05222110d2adb2f2667e5fc4ec33ad35ef07703ca3b119b2c16f60bbf6c574f25fe2a3644c1c8be4063f2324cc005bddb838d7723c51cf7e92106884b1d2ab0d69e6d883d0fca83a5af78555382d363d22a1538bcaff8edb09f1a8869f155f35cb7fb950b6e48e6312439d346c64e96e5c1e808fb7850ba87abeddfa6c77bf8b09686d5d4d691550263d2d1c8907e8e98d9f25485f1038fa93fbb0b017b7b7d95890e90434798c872286ae2dd78c866095d27e380d83a9736e64d291c4896ae2a544c30e78ffb872a6c0eb213868228f1673d9131b6e94a762970bd22ffb8f25469ab4979e940a2f09b232bd219b5a4019737388ab8021d7d34623f3ce4a6413af6603e1f03f7de9c39583dfbbc2920278bc779877f2c7e9db66f3861466a8c6ca7c94c72e4b623acc23208374bdeb852bb3394ba38b157eef2da8bb438fd9720e63db8b1c207f2c378214a61e58953d36081138c17dcea169d08fcfbeccb6f17181033aa3d43602c1563b983493ab75eae58bb8deb50fe7be036f182b4e45815812f3b35c31a3d6be3ac6fa9c134e9bb54ff9c189d949e2723c3bbd4c6ea9079abd3bc51ea5cbf54b11f35bd2266c456bac6b0f391367bc03487cc95620df71c3ff57f4bb1ff160e1a13a9797c4b735873ecf6ca74ac3899dcf30cba57a7fb1f01998934e0e84b0e275335d2dd5ce10362e06c3c318034db2660e94afd92875a11ec2665b6c1a4be0cac93d1869a5092bb60afb984eb620e52a8d570452a4fbba06f306999a6986bcc5cac2b675e65de3810c51028146a538a55a77ce2121ffa248ddf5cc825aa2a9a6c5e7c8b15b0fd207239cf06c7915b2feb73285fba4aa6f5728f3d67470352fc9a56bf36bf295f8f1cda6ebbd96f7723212325da985fb589e59c7c55a991626e1283b28872c0dca3f9530052bb035f716bf88dd3710b8828dd3cabe220394ea078173da72abdba8ee4906b49d80c5e6e3a89261316c37b5150d11f3c7767a0fa07cd93e4f9f3b80447f0f79c6b86c2fbfab971f474fb09df48c1cc5cc9af9b6caebb9c39e63fd512561f7b3870928bca3355b04e5bf16a12f224b3d4f9f25c45083d6212649ce482f46dfea04ef88a0c35c9db6735c4a5dfec483eb40b16cf1c05bb5bf36e1cb6f931a1e752e31dc1dc897eace359b2cf8a8289af51ca050576b528c1328614b7315d17975ee6a2df8cdaa84223cd4fa65d5e923dc7e564cab46ce6305180e2d56d6ef90e69e6e4b9c234fb9d2ac22cd129db8ebf24df8532a92b586f0493eb1be91da0d52ead98833cf9c7bcaf1f92a6195baa1507447e7c81bcccdd1727456c093b6a5488cc37d6569c7403091641d6cac18ecdaeaa0422c228bdd260ca7471d30cddbc6f3af247d7ec8a81773c0f75e83f7db311dad6696e6ba37ba6de2f50097b605e61faf1d25f27828187c95feba8cea709d8f7c443aafff0771712b1ac30c3e6b5ea50ba26e3129da0700981dbd9013f1efdb75c139db5af4527da8e3891d5b6bcebeca5f3c229c01303ef8e1d4f836581cf9ef14515115c5b08c55c14b0f6bebb2f85a62b6560ff2554b9e125a457c2ce5802a4ae8c20ac2fdc745f0b070d1716282af3b77389dd2c5ba13b82449ed892b50152b1166f5f63fb8fa165e1efecb7d48f320f8751a73b81238d", 0x1000}, {&(0x7f0000000280)="7969fbd8d833ef9a7652d15f1cb219532bb0dd99a0ae67f4e42c9861cd3ade9979d29b8b1f3371ad5cabc33276d1f2a5304aa61d212743e54e986ac080fe5770893366009c605a5a9e12f33818b26e3b3fcf6f143948d466f877ecb166582d4627437f9a49914b766529ab4484edcf3839f1e1e456327d3326038dda8e03fd02e2222c51f0b52eb0a5829a63c18523caf8dc89837a580d5727a3ba23e46d8053a212869a8811a17ec5faf943c4a0746fff9ef16129bc796ac2aab7fa2f6f07d4aa93b522e1ec33a3", 0xc8}, {&(0x7f0000001400)="f09e631a1156631c518cb0e455fc1364a1193ef74f4bcb213efa10bc2fe5d19b775835b3e6852b76d3c32e3b941b43bcad5f2ce86b9e3e82d994a9c4af13dac296dbbf6cc060d74f9db8650d98dc992021067a10ab90f2954163541b4e2536ac7a373ba9d8a8e2b88045e1686d4a866df0049fad806455292c4fcb539c54522b55db691bf846b7e0fe84", 0x8a}], 0x4, &(0x7f00000014c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x62df}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x68}}, {{&(0x7f0000001540)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001580)="d9a9c5a07e09b660ede8c3b1d2cd81ea73ede9e1b1030d786de83923ff4cc4582e6d6e1b78d796b6a5d3bb6ae1dabd68a66032ed8a94e46f49c5fed144321a0bcb78645a2f541a79642a66939b23eef2d9ab13ae0c36b8c732bd397d42e8c02a95a8b8196755c96819d94097f0230819c20f22a627cec32804f909c4d56793a3bb7f172f8eb9daf34c4485bac7b90e7f2d0d8727c1b91c89f8d7def87b80d8e8fc7cd9826b5ee40b31", 0xa9}, {&(0x7f0000001640)="d045160f55e68e9a3738e45c3bd71dfbd7d676b965843295614190b8317474d174e8ad4e37f78539ca2ee0b59cf9afe8cddd716c6cfc090d6a363c2febe24c8a6b3ea1b6bf0cf4dfa7ad05bd0d4afea9d370474e00a4d2980e2552fa80f4223fca2555d85c48e50570ed1eefa8c14fbc29bf7ee843a1331124319d5609b95f9f4dab914845fda6a80d5abcece82307e16e6fb54b6ba3631410b7e6d4247775a453de96dc91ef425c36b9d894d272818d375546d2605afeb5c093d141d8d33bff773b2c84ca0917b7", 0xc8}, {&(0x7f0000001740)="f32492430342a71d3889cae4cd3adcf1a515389dccd560573207d5916d92ab0a66a4319981cd2c5a28bd245dd3f3e3f81699b406c3ca16f7301db0625fade232a83a6cf06c0b8df3753b3d512dd8ba127805008631d5996c5178d144926db0df481d3f0c506a940ab3c848a3162b5f6f4409b747d41f7957a8a716d5b2f023b78211534f9711d92ea6556c8c5934d1d9548961e652fbffc523b81c9c1850ee24d6d4da16398dfcaa340a6b61364c85dbafaaad6294cc", 0xb6}, {&(0x7f0000001800)="58d739cec134e80ff63779d90e8d98ab97f45bac90a840c305435e0c683c7102ad7b7e23666dd6809dc630a7c1128870855790c066ec19c57d9524545ab93fbac04a3cb0b8ce0b3f2a12f73a4c3b945af23925908f4d0f5bc7e0fd25ddff10c499bbb86f611e4c3a6a1409e1fff06b23aa6b2fc0c2ad256f910ac534a4bc1f34d3d1d26a0aacab2ad3d23248ac8a408dd9d6c9c9b4774a4b817b04e0", 0x9c}], 0x4, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}], 0x70}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001b40)="848ce406c492192d152ba75cbe2872b82ba7ebb1fe5ae0a7564a48ac8a223a4ae22b90a42b642d3a77a8599530713d345e9861e5a305fd64d3f142c2e417b04357b88cd4035995664e0d03ed327db08b72a67f148c49b8685674c006fbcd16ebe5b86a5c00ad84dcc286cd524d13d9a1825bf35b61e2562414f889b145e6dd84d95898e232ea4b3af87fcec16b94934a7c68fdcfc82648f370b2e0b85dc095ccfd12ecc8667a9a42f7e11397fc8aeb8f808ed28793fddbee83fd0ed2a984d80f0b96f08e81236a6a6fdec57e4688ad4d30806a2b1f55ed41f84e10db9abbf09b44fd62fe937e56ae", 0xe8}, {&(0x7f0000001c40)="24c70065a1d15c1e236449c75e821c22ab7ad84c27800486e04623427e6855cece27add09e", 0x25}, {&(0x7f0000001c80)="11de7ea4913316b2d8315795c431fcec7e1eaf3929c5965799161f2dee122acfa6d08bd372442ef02eb4a9c9e5db756e13d6c6bc80752740d9d3bd455699c445e508d433eaf0aff455e93142d3448f4398647b6d8e3c318af993f7784af55019a0a8868834866fe9621e150575f95a94c21c96cb651a4c7162bfd27e891bceb34472db2a0e3f3cdddb2aa70695f7f7e6203636fcc89037e388797049065254a3ad2f53945fbf8d0667f2b6c9a54fcacb833f62091a1895f5491ee418330144bc811dcf33c6324fdbea5c459871e7eb38d98c3da127ac0c58f1da8a271445", 0xde}, {&(0x7f0000001d80)="c040a3c53f53225ac984209974a32f892d10f4f231554e6a570519da0057cd5095bd6e", 0x23}, {&(0x7f0000001dc0)="5aaf5d3c54862381a7570d7a62bb0442da0e719a94bd95c1fdbfca665365b568902ba3903365af629b347618743a8e2bdfb283ac0c1d0a5c0eaf24abf4a55ed74360b6fba5c9e27dcb097721024916970bb27e5bea6e7b2f4042f24523c4d984dd151cce415a7686f54405d6c000dde00519d35b49630e5b3f37c71afa9f565d0e557a7016d641a7a2b79e0741781c42291058db33793c770c736aee9e533c503dde55905b2ebebdb0a35bb32f56e68ddf547bcb574c0043252c6596861e12a2473a2ffb68f28b9a26ee6b69092b450011467fef9015d9e5bb01ffd53112da8dc4b5b270", 0xe4}], 0x5, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x1d8}}, {{&(0x7f0000002140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002180)="f8edddb88aa92d6690", 0x9}, {&(0x7f00000021c0)="1b08c933c4176f2d092aa649c203b6139c565f63dc679f182852d7741c632febe4c596cce9c259b4e44fade7cbcd5cbdcf52fe78d97f772385c62c63f67da00b0f948c9234341722ffc2ff183470e0d64fda12869b6bcf802a34652a6e3b5b1688a0cf070235a82dfb5aa690203000acae36ba551eb94145f9eeb0901bde6c27d30c5b3e902eae76e656572b4166", 0x8e}, {&(0x7f0000002280)="fcf62b17b86855179dad027db7db547c8ea6d9041a0aefedcbedd3b5debb0fe920e8729d0b5d74c91bc6c93e54d23a1e63eea4f5150d32e6154af8f9c696e145e1cd96afa1420d788cac9ef86598dae05400df4288cab66e713b3d20f7e2543b6a", 0x61}, {&(0x7f0000002300)="0c623a5cdcdbbf3bfefbeb4f2526ec7506747682166bbc10192181c47bd13970ce2b8f49749253a9b32f25fcf7867d5711b15d6cae980439ed3b78f01293a587ac609ad9bccc1cfdc952f62d96ea355aed3f3ed2204dba0f8350933d37a625a576d0c69907421089", 0x68}, {&(0x7f0000002380)="b1d5a25d587138aad1a90cc383981f43cc4f6fbe056cb6e97ea2efacd1e360fc4d19babf5c2b67c6caba2d8f29e574e4713b30377a7eb433fef3165d1c7962adf7abb90b6a3db4dffe90688da964e99596a43c60b6d9c9645258bfb83d", 0x5d}, {&(0x7f0000002400)="27f70471b87a12c08a334839cc5cfc99944bac9e62dce68aa45655b132fd14b84aac43d48eae93b9890175c71eca477e2ecf3936351ed56d5c176392f02f6912fc8710a436c7b10c0f40ccbc924d3ff114917a03ef1d688234cd4984583503f8393cb5a81a486dfc4426dcb9cb6ff8c0494ee1e23fdc7a61c924cf12a817314e5021211438ee7c1ae65ca3f9b0bfbb7cef74a0e32337a6c9e80087ddbfdd116b9b076b6a3c15a3d9f03f5105133f37e5b311387ec4f78961fca81d2926b3830309631c59815f209a392b89bb7a2ea0304e4b92943fd34eec8df71e240ccaf0", 0xdf}], 0x6}}, {{&(0x7f0000002580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000002940)=[{&(0x7f00000025c0)="7739bdde1364bbd6c8057a723565ac3f965f07c4bff9e8dfe83e861e16e24c232bf9c00cae3ac363173984cfa6ef8a3ccd1152cde0fc819618413376b441d85b8cf604aa573603f27ff91ec40dd4a93e51400dc3", 0x54}, {&(0x7f0000002640)="1871ac3f5332e4faaeaf943b7b28d50a0a1165875d5403357018fd4f4f977fc6424aef1749d907d2654a5d56e589f0c4d51e6349d915492d236b0992e8d30462ef0a8a6c6db9d82989209a28d9f7c11bdef7acaa0ba2166115e998ae28e053bc97f6e05ed6e76d41db3868a4ec4e8293fab9426433dc3a8f8f907654f61094ad5716622c73169c09a306e1f9fa5706488784cc24cdc63981ec817e12210ddab12ea75d5d2ebb202274db3c583abc380e966f175a018729678ac6b0e38f8720273f6fe74947c1a524b2ac4c498567aea5bac3493ad337d0a1a84f92c08bc6dbcaed488c1ef60bd62704bb", 0xea}, {&(0x7f0000002740)="c0f65a9d107aee2b216d4d429841d5023bbfc4ad57688eb469493560181aa5601bf70228f3e08b664a3756b229c154c5ae700ed6670dfe1ca901a1984cff87f4a5ed30f8405fa761f51ddb6114dd16df", 0x50}, {&(0x7f00000027c0)="e39f66e277a84f8062414076ee003697521f739d68f4ca7c6050d2a7381ac37eae2b379dbf9c1c195132521ae3f629d714ccfad898139d165c24a665e8132a3c5e69b103ae82bd1dce6c0ad71e1bdfa6556f48b17c9537b0419182fcdf56fafff8463f491441661ca4242848fa2194b7700bb9c9f936268a5f897f16487a0d3d21d5a6fd0e12bfa82c815011e038a5494ef3f2eb52abddfea611cde683b1f16920e9637a881fc965e07c9d7f4d82e5ffd7b7390f98f3d9", 0xb7}, {&(0x7f0000002880)="5c363b4ecd42289a5f2c763553c2c47c561fe967f6968db2d1dac31a1589cbc01fde645904d7ea667afea248975b81ace9cd020072d42610ecdda40c333d6ea99fcc67f02684493a73d55ca3ce78685718876e16eaf137dcbd2aef4c528dd1a34f04ae38eb4f08ff5ec7d04def792bf48c4ecf0e24ce9013b394f2c2d28d324e81a1b262bc6b2204e343b29fe60260b97b8befd8d8ff", 0x96}], 0x5, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"/420], 0x1b0}}], 0x5, 0x40000)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1}, 0x3f)
syz_io_uring_submit(0x0, r1, &(0x7f0000002d80)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6}, 0x800)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x6)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[r0, r2, r3, r0, r4, r5, r8]}, 0x7)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1035.100685] loop1: detected capacity change from 0 to 512
[ 1035.101058] loop5: detected capacity change from 0 to 516
11:23:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x44)

[ 1035.144076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.147952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:23:53 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x0)

11:23:53 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1c9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup2(r1, r2)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x3fc000000000, 0x0, 0x2f3, 0x3, 0xf463e55c330e5093}, 0xfff)

11:23:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x409f5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1035.222280] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.226874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:23:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:23:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x44)

11:23:53 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1035.316599] loop5: detected capacity change from 0 to 516
[ 1035.328870] loop1: detected capacity change from 0 to 512
[ 1035.339237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.339426] loop4: detected capacity change from 0 to 512
[ 1035.361251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.371092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.385175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.409643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.436844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:02 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

11:24:02 executing program 4:
r0 = io_uring_setup(0x5571, &(0x7f0000000040)={0x0, 0x114e, 0x10, 0x0, 0x1d3})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x100, 0x7ee, 0x0, 0x4, 0x4, [{0x40, 0x6, 0x7, '\x00', 0x3002}, {0x1, 0x8100, 0x8, '\x00', 0x8}, {0x4, 0xbab, 0x40, '\x00', 0x100}, {0x100000001, 0x1, 0x80, '\x00', 0x3008}]})
fcntl$getflags(r0, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r2, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
fcntl$dupfd(r3, 0x406, r2)

11:24:02 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1)

11:24:02 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:02 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x401, 0x7f, 0x7, 0x89, 0x81, 0x7, 0x8}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', <r2=>0x0, 0x0, 0x20, 0x2, 0x9, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0x0, 0xc612bc352e533ed5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop]}}}}})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@private2, r2}, 0x14)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
write(r3, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761640000d5295fb9ba01b80f9945139d55", 0x44)

11:24:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x10080, 0x0, 0x2}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r1}}, 0x20)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r4 = dup2(r2, r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
syz_io_uring_submit(r5, 0x0, 0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r1}}, 0x5)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:02 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)

11:24:02 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1044.475243] loop5: detected capacity change from 0 to 517
[ 1044.507656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)
syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))

11:24:02 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1)

11:24:02 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x2f2eb74b}}, './file0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r2, 0x820a, 0x5f, 0x4})

11:24:02 executing program 4:
r0 = syz_io_uring_setup(0x6e1e, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x40002012})
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000280)={{r2}, {@val, @max}})
syz_io_uring_setup(0x150b, &(0x7f0000000000)={0x0, 0x2ec2, 0x20, 0x0, 0x245, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:02 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40a23, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1044.610041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:02 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1044.673213] loop5: detected capacity change from 0 to 517
11:24:03 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1044.703540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048004)

11:24:03 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:03 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x4})

[ 1044.791891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:03 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1)

11:24:03 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1045.335771] loop5: detected capacity change from 0 to 517
[ 1045.363303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:03 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x4})

11:24:03 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x8001, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:03 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:03 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:03 executing program 3:
r0 = syz_io_uring_complete(0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200, 0x1}, 0xe)
write(r1, &(0x7f0000000040)="b3cec6a5733cc5f7a1fec86bcdd800c6552230ea000000000000000048fb84b2c8f1dc13636df0d850d8193c1b5f92d0834907c3cc179bd2291c07b761642772d5295fb9ba01b80f9945139d55", 0x4d)

[ 1045.481478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:13 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

11:24:13 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x4})

11:24:13 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
copy_file_range(r1, &(0x7f0000000100)=0x4, r2, &(0x7f0000000200)=0x800, 0x100, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x8001, @none, 0x0, 0x1}, 0xe)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)

11:24:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:13 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x1, 0x97, 0x7, 0x42, 0x0, 0x2, 0x5}, 0xc)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1055.607270] loop5: detected capacity change from 0 to 518
[ 1055.633917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:13 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:14 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:24:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1055.747341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1055.823494] loop5: detected capacity change from 0 to 520
[ 1055.840151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1055.862282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:24 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:24 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

11:24:24 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41020, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:24 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x10, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext, 0xaa60}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000003c0)={{0x0, 0xc4f, 0x7fff, 0x0, 0x6, 0x0, 0x1, 0x3ff, 0x7, 0xfff, 0x8, 0xffff, 0xffffffffffffb631, 0x2, 0x7}})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x7f, &(0x7f00000000c0)=0x4)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:24 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1000000000000, 0x2)

11:24:24 executing program 6:
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:24:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:24 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)

[ 1066.150900] loop5: detected capacity change from 0 to 520
11:24:24 executing program 6:
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1066.208117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:24 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:24 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

11:24:24 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

11:24:24 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

[ 1066.391747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:24 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:24 executing program 6:
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:24:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x4)

11:24:35 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x3, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:35 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)

11:24:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x94629c076865a976, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xffff}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x64, 0x2}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:35 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:35 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880)={0x0, <r5=>0x0}, &(0x7f00000018c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@loose}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00\xfe\x88\xb8\x18\xcdk\x7f\xf3^\x8d\x9d\x85\xfe\x1e\xb8&\xff\x92\xf1\x1f#\x06U\xafd!S\xc6Y\x93*$O\xe7\xabV\xbe\xe8`\x84\xac\xd5;\xa3\xcd\xa2\xc3n\x04w\rz\xb0\x02\x17\x1a\xf6\xf6\xae\xa9#\xb9\ttt~\x94\xad\xc5\xda\xca\x86\"\xc4(\\4\xed-\xf7\xf2\x8f\x87\x98\x87)\xc6b\xb0S|bpj\xe4\xd7GZ!\xa1\"\xba\xb3\x85K}J4@rU\xd9\xaec\xdc\xc9\xae[\x1a\xb6\xfdp\xb3\xce\xcf\xdeW\x0f3o\x94SS\xb7(\f\xbb\x80x~GH\x9e\x18, l\x03!\xcb\x04\x87\x00\xdbY\xea\xdc\x8c\x8f\x0f\xdeH\xf0\xca\r\xe8\xf4\xc8\x8d\xae\xc0\x90PHC+\xbb\x00\x00\x00\x00\x00\x00\x86j\xcc\xc0\x91\xc1`Y\x054[\xa2\xfe\"\xfbUx9\x03\xd9t(#(\x1c_\xbd\xb6\xc1\x8fR9\xc5\x99~\xa7\x86\xfd\x92\xa8\x03\xd6\x05\xfd.\x8e\xf4\xe3Q\xc3\x00%\xbc\x01\x90\x9c\xe9yv\x11\x16\xd6\xbd\'d\xc5\x05\xe0v\x179*!\xed\x9a\xda\x7f\xc4\xbfN\x95\xc4NH.\xbe'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio}]}})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:35 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1077.303496] loop5: detected capacity change from 0 to 522
[ 1077.344802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1077.433703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:45 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:45 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
fcntl$setstatus(r0, 0x4, 0x731c19f11e6bb24b)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:45 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:24:45 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001880), &(0x7f00000018c0)=0xc)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x5}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:45 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1087.476913] loop5: detected capacity change from 0 to 522
11:24:45 executing program 6:
r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:45 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:24:45 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400d0c0}, 0x4000000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x80, @none, 0x3ff, 0x2}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xe)
r6 = pidfd_getfd(r5, r4, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x6)
write(r4, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0xc, 0x4)

[ 1087.539039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:45 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1087.671004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:45 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:24:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:45 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

[ 1087.791305] loop5: detected capacity change from 0 to 524
[ 1087.808641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.871303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:46 executing program 6:
r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:46 executing program 1:
syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:24:46 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:46 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41987, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:46 executing program 6:
r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f00000000c0)="b3cec6a5733cc5d7a1fec83e3ddc4e86125568bee22305b16bcddc0fc6612204dbbb892f802e8e1350d8193c1b5f92d01c078916000000000000b9b6010f9945139d55bba7", 0x45)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="0100007342486e0000000000", @ANYRES32=<r1=>r0, @ANYBLOB="06000000000000002e2f66696c653000"])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'})

11:24:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:24:46 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1088.478039] loop5: detected capacity change from 0 to 524
[ 1088.527152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1088.597671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:24:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:24:56 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:24:56 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

11:24:56 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:24:56 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:24:56 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:24:56 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x3b0, 0x1b, 0x210, 0x70bd29, 0x25dfdbfe, {0x19}, [@typed={0x9, 0x27, 0x0, 0x0, @str='.log\x00'}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x81, 0x0, 0x0, @u32=0x6}, @nested={0x174, 0x89, 0x0, 0x1, [@generic="482b7f1ecd0ee85987e5142e519e1c73463acb85c6ca31c5c2f91d89d9f9ac6a00254e46c4982fa1a1119ac160d0f82a524bb8eb4ee0911dfd79731932524a55bffd97d17c033ef2889ce62e0d808be6d1c22860e5f34058c2416b59ba206e561f8611bc0d5c902541ea84b67aa63b173f2b85ba67e2ae2c3988d02960a95305b6fb4c014b141af057c7bfd003f254ce7d506d", @generic="16ecaf508dfd67e5cf23204d0421694c7b0b336835af777d3401008140c98bcb4ff3cd7162ae9e0e44848c2a1803e62d4849531ca2451c744c10c073bf7ef8db65bca4523352ff9a821ab855ed076a711b828ea85437ec", @generic="49b7f1bf07d6340465d3d96fab135df34b33d1cc5064353b9d2f1a9c3f5df2222c2da1aff598b0d2d858cf5c7f2ccd721455772d1aead7f892bdc8ab52ecb9501c82cedb00fa5b30ed5db9036e3b5db96890280771f99f2d99d544a79e2a232ed06244984a900d31744343ac2a19", @typed={0x8, 0x8d, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, @generic="abefb4932a242dad7c678ffae98a8ea1567c157cca041c9e68694e80fd2a3f21f46d9eef9ae7e52d330bbeedb8c803ade82892e9975b64e775d2e9c989107239b2eb0d429b4fc3de2763c2be22d3c3cc4e983590db158dbb24f35d868eccbf08652730df1f6dd62577dd1f4515625e2a024f8c0a7b66f10557f1f03a768a1aec5682283db8839751325abbe9d756cbd4c7604b0909942b0284f24145c8b9266a732a07b65c24ba9b6bca1aaf815f32a39dd461537a2441ecbadaf45a5c27c13d51bd6b5a508011a733ea95178972954a468d1ba8597172a3de6d5dd5294765dcb417dd9af8fa11ce1848f99fcfa1973530803da03724942b5b", @generic="f29236847e037c750411332af77fae493ccf4bd08592c076bc8b0920edd52ad1664245ae10ad9b9b8e8612792f8dab3905b3a5e55d0cadca74544fc7db5f4446bee228ac00eddf8d3698a77902662ab0885913658d80695eafbad01bf51312124b1f3ba89c71b98395fd7ed9362f26c6bc3d443c3d6627b120e9f8a2756baa91a7c3016d6f86dbb7227f4c1e4da1450cdcbca68f3867439b", @generic="72b6effe0e1d29556656e119a1f710fe9c1e0680ea9affa539ede173bea81c2b90cf702fee88f10b4600911f94254775a522f6782375f9661f2f74e998fbff76aa5705c2ede6e5f1c218b9a17120878b5c7bd7ff1a9dd499529504336069d3fa0c2948365758d210d393eae8cdc93f968ecb880258dc993160a7ad"]}, 0x3b0}, 0x1, 0x0, 0x0, 0xc4}, 0x20000090)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x60000, 0x158)
connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:56 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:24:56 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:24:56 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r1], 0x4)

[ 1097.948257] loop5: detected capacity change from 0 to 528
[ 1097.971705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:24:56 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, 0xffffffffffffffff, r1], 0x4)

[ 1098.034178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:06 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00')
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(0xffffffffffffffff, &(0x7f0000000040)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c315f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x17)

11:25:06 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, 0xffffffffffffffff, r1], 0x4)

11:25:06 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42010, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:25:06 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:06 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:25:06 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @any, 0xff00, 0x2}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
creat(&(0x7f0000000100)='./file0/file0\x00', 0x8)
bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0xffff, @any, 0x80}, 0xe)

[ 1107.961902] loop5: detected capacity change from 0 to 528
11:25:06 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

[ 1107.998384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.080482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:15 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:15 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x101, @none, 0x71, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:15 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:25:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_io_uring_complete(0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa5c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:25:15 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1], 0x4)

11:25:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x0, 0x7a, 0x4, 0xd281]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:15 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='ip6_vti0\x00'})

11:25:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42203, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1116.746185] loop5: detected capacity change from 0 to 529
11:25:15 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1], 0x4)

[ 1116.775695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:25:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1494eb006ff7de8e8ce320ff374b0ef2b54d59f530024f41a7d4b74294c9085134fc6d434df6f81f8ba9c3fdb2f84979bce1a1aaa8bcdfb0071483d1cdb50607980efc163365a3ce51c732ceb00d80b01dea647291019a0cda8f35b9cc7ef30b3695cb7f42c689698fc9330db6d1db7063cdbd08808fa2ef5187a4e22715295b7a2afb058f0010f1e36f6927d2c6f31ae9a3df809ab8499d388635fb4f62b88a8f65e7d1ce3f20", @ANYRES16=r1, @ANYBLOB="0102000000000000000001000000"], 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:15 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:15 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

[ 1116.873311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:25:15 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:15 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:15 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1], 0x4)

11:25:15 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

[ 1116.969049] loop5: detected capacity change from 0 to 529
[ 1117.028416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1117.089226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

11:25:25 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(0x0, 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4230a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:25:25 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, 0xffffffffffffffff, r1], 0x4)

11:25:25 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400040, 0x7)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffa, @none, 0x1000}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x4, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/223, 0xdf)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000200)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='\xff\xff\xff\xff\xff\xff', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='%&$\x00', &(0x7f0000000340)='[\x00', &(0x7f0000000380)='[\x00'], 0x800)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000400), 0x1)
connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x4}, 0xe)

11:25:25 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4)
r3 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x4}, 0xffffff6d)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = open_tree(r2, &(0x7f0000000200)='./file0\x00', 0x8000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x7f)

11:25:25 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1127.477025] loop5: detected capacity change from 0 to 529
11:25:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)

[ 1127.544030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:25:25 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(0x0, 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:25 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

11:25:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:25:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

[ 1127.682604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:26 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(0x0, 0x2, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:26 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1127.768405] loop5: detected capacity change from 0 to 530
[ 1127.815097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1127.917187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:35 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:35 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

11:25:35 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket$inet6(0xa, 0x1, 0x1a8)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000007700)="fc3a8160ee9fce2f1e1d7811516300f03ebb32cfa4fb968b1185ca475cf6a3bc1bd4535cdc79361590c90427e3831beceed01f002f0584a360f6ef98b2ffb8b857c0afb938137983151f15a093bd33c9b1a7d6b93cc9103b2cc99a1cc60f19285ea1bc19cc0a43ce39d435fb3b374dab2a4e6c7b27c3ca330519a8824d6e5f14eacb2afa76fbc90d02c52f74540d1d78860b92f700826357314fe765d24dce553566c6137d8d45e950b839152c4343f5a2ae855c84fe5e9c463eaafae6cc08c69b", 0xc1}, {&(0x7f0000007800)="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", 0x1000}, {&(0x7f0000008800)="8295945903df5e6578909ffb6370e87c10ac3dc6eb4aff6402d4e0cc4e1449ed9107705635f231967bf36d8076664e4fcd41675f0c4894b1d4f1b297dc05e418ad0ce59660fcb457c86cab107e78f7a1c095f040f32d07cab1ccfb1ead6823addfdf88672d74ba58d8de5c4af3406db05498cd25350138b5a24d06da509ed702ff525c902515c2e47641a4beb6ad880f9dd8a60eb775a90a05c1844843b3bd9a2c5d7cb1e2485f387cc807c3b7be71b0e4a723b1a45d8184363579022322cc7c97031654cb58db535611d03b01f81db44692dfab14be", 0xd6}, {&(0x7f0000008900)="7d4541e6ad9ea8f7b0173516b96420215ea6a32e5bbc6d6bda0102a477d47be8849e158939480e2aba9829a878b8fa7358b6b1363d15c46b0b929144769f84cfa0a1e6785efc75e47bb2473010e6f9a898389d5353ec6ea8193ba42814e05d690dea7b67ab64cf6c46fa9f138557444d6d993e233a7d9c2d394123e12008216fcd22d8a92be5b53c781c6c3f2fe26a34c15d4ddb224790fdb495da937f", 0x9d}], 0x4, &(0x7f00000089c0)=[{0x100, 0x113, 0xfffffc01, "1e9a9ee5ca6f31ba012c360769d9204b136495c9d7d06c6616b7d6707e344aa5ec56d2dcf322638976880c72dc16bab6e419ab2334c99660a40d8eac29a555ca0621e75286bb3213b15cef12336195accf177cd48b901244d1ff7ce31fef6d2bee0e3800ba4f00d52e755be037e4cfaba1f99317012fb0b75b486a231bc7e4212ec4b0d6e283a2a7bfb90fff1c4b6e296c64e7075a673465b2b32f83d188efbcc333454a00af6fe84b97fae26be3d33d6665ca4cef0dab8d38974999405a663984f05e4dbdb2d74c4bd781c3afe6f2a2f4a927c0f16af94a10ff32c2934503408580b20fc8854891a8f6"}, {0x28, 0x10b, 0x8, "8eab61250fd9986d0bcacdc515e5cfa54667b08f"}, {0x108, 0x105, 0x8, "8b517ca77416d2af381c9dc9d6d4a2dbd141d955496307d64dc7b07262516f9e23cdfba08b8737566795da0a8b740fbcf7076d280a0411f8a55bd15fa68d80a86fee2dd75a0915b1ae4ca25976589046592093423d9b536fd823f2d6651735f3d0bd49fe03bd705bd3d791192c2ee31ec29bdab8ed226740ef8ed4bf2465a664f92ad905a56e2457bd2553e8a44a7cc375b8425c60521af9460e2fe546c26e61b18a8ce75d0e9043481218819c385d87c371f01d6868faa3714b9ce4d23bb56d74fd6346eb1f5b76911aed585fab9c6702dd7227a80f0e7c0ac453d8bba3c5552053f540e445078c7113c16f189c383c7d77b1"}, {0x28, 0x128, 0x10001, "155f0656973129affc6ce960258fa0e1f1b3"}], 0x258}, 0x40)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

11:25:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x8, 0x9, 0x2, 0x3, 0x6c, 0x7ff}, 0xc)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:25:35 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:25:35 executing program 7:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:25:35 executing program 7:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:35 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1137.188456] loop5: detected capacity change from 0 to 531
[ 1137.225084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:25:35 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:35 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

11:25:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)

11:25:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000280)=""/232, 0xfd04)
getdents64(r0, 0x0, 0x0)

11:25:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:25:35 executing program 7:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x4, @none, 0x7}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:25:35 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4100)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43c01, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1137.456757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1137.588926] loop5: detected capacity change from 0 to 542
[ 1137.646163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1137.727922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:25:47 executing program 3:
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080)=0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:25:47 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:25:47 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:25:47 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:47 executing program 4:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/124, 0x7c}], 0x9, 0x4375, 0xfffffffd)
r1 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, 0xffffffffffffffff, r1], 0x4)

11:25:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket$inet6(0xa, 0x1, 0x1a8)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000007700)="fc3a8160ee9fce2f1e1d7811516300f03ebb32cfa4fb968b1185ca475cf6a3bc1bd4535cdc79361590c90427e3831beceed01f002f0584a360f6ef98b2ffb8b857c0afb938137983151f15a093bd33c9b1a7d6b93cc9103b2cc99a1cc60f19285ea1bc19cc0a43ce39d435fb3b374dab2a4e6c7b27c3ca330519a8824d6e5f14eacb2afa76fbc90d02c52f74540d1d78860b92f700826357314fe765d24dce553566c6137d8d45e950b839152c4343f5a2ae855c84fe5e9c463eaafae6cc08c69b", 0xc1}, {&(0x7f0000007800)="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", 0x1000}, {&(0x7f0000008800)="8295945903df5e6578909ffb6370e87c10ac3dc6eb4aff6402d4e0cc4e1449ed9107705635f231967bf36d8076664e4fcd41675f0c4894b1d4f1b297dc05e418ad0ce59660fcb457c86cab107e78f7a1c095f040f32d07cab1ccfb1ead6823addfdf88672d74ba58d8de5c4af3406db05498cd25350138b5a24d06da509ed702ff525c902515c2e47641a4beb6ad880f9dd8a60eb775a90a05c1844843b3bd9a2c5d7cb1e2485f387cc807c3b7be71b0e4a723b1a45d8184363579022322cc7c97031654cb58db535611d03b01f81db44692dfab14be", 0xd6}, {&(0x7f0000008900)="7d4541e6ad9ea8f7b0173516b96420215ea6a32e5bbc6d6bda0102a477d47be8849e158939480e2aba9829a878b8fa7358b6b1363d15c46b0b929144769f84cfa0a1e6785efc75e47bb2473010e6f9a898389d5353ec6ea8193ba42814e05d690dea7b67ab64cf6c46fa9f138557444d6d993e233a7d9c2d394123e12008216fcd22d8a92be5b53c781c6c3f2fe26a34c15d4ddb224790fdb495da937f", 0x9d}], 0x4, &(0x7f00000089c0)=[{0x100, 0x113, 0xfffffc01, "1e9a9ee5ca6f31ba012c360769d9204b136495c9d7d06c6616b7d6707e344aa5ec56d2dcf322638976880c72dc16bab6e419ab2334c99660a40d8eac29a555ca0621e75286bb3213b15cef12336195accf177cd48b901244d1ff7ce31fef6d2bee0e3800ba4f00d52e755be037e4cfaba1f99317012fb0b75b486a231bc7e4212ec4b0d6e283a2a7bfb90fff1c4b6e296c64e7075a673465b2b32f83d188efbcc333454a00af6fe84b97fae26be3d33d6665ca4cef0dab8d38974999405a663984f05e4dbdb2d74c4bd781c3afe6f2a2f4a927c0f16af94a10ff32c2934503408580b20fc8854891a8f6"}, {0x28, 0x10b, 0x8, "8eab61250fd9986d0bcacdc515e5cfa54667b08f"}, {0x108, 0x105, 0x8, "8b517ca77416d2af381c9dc9d6d4a2dbd141d955496307d64dc7b07262516f9e23cdfba08b8737566795da0a8b740fbcf7076d280a0411f8a55bd15fa68d80a86fee2dd75a0915b1ae4ca25976589046592093423d9b536fd823f2d6651735f3d0bd49fe03bd705bd3d791192c2ee31ec29bdab8ed226740ef8ed4bf2465a664f92ad905a56e2457bd2553e8a44a7cc375b8425c60521af9460e2fe546c26e61b18a8ce75d0e9043481218819c385d87c371f01d6868faa3714b9ce4d23bb56d74fd6346eb1f5b76911aed585fab9c6702dd7227a80f0e7c0ac453d8bba3c5552053f540e445078c7113c16f189c383c7d77b1"}, {0x28, 0x128, 0x10001, "155f0656973129affc6ce960258fa0e1f1b3"}], 0x258}, 0x40)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

11:25:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1148.801575] loop5: detected capacity change from 0 to 543
[ 1148.827802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:25:47 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:25:47 executing program 4:
pidfd_open(0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:25:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket$inet6(0xa, 0x1, 0x1a8)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000007700)="fc3a8160ee9fce2f1e1d7811516300f03ebb32cfa4fb968b1185ca475cf6a3bc1bd4535cdc79361590c90427e3831beceed01f002f0584a360f6ef98b2ffb8b857c0afb938137983151f15a093bd33c9b1a7d6b93cc9103b2cc99a1cc60f19285ea1bc19cc0a43ce39d435fb3b374dab2a4e6c7b27c3ca330519a8824d6e5f14eacb2afa76fbc90d02c52f74540d1d78860b92f700826357314fe765d24dce553566c6137d8d45e950b839152c4343f5a2ae855c84fe5e9c463eaafae6cc08c69b", 0xc1}, {&(0x7f0000007800)="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", 0x1000}, {&(0x7f0000008800)="8295945903df5e6578909ffb6370e87c10ac3dc6eb4aff6402d4e0cc4e1449ed9107705635f231967bf36d8076664e4fcd41675f0c4894b1d4f1b297dc05e418ad0ce59660fcb457c86cab107e78f7a1c095f040f32d07cab1ccfb1ead6823addfdf88672d74ba58d8de5c4af3406db05498cd25350138b5a24d06da509ed702ff525c902515c2e47641a4beb6ad880f9dd8a60eb775a90a05c1844843b3bd9a2c5d7cb1e2485f387cc807c3b7be71b0e4a723b1a45d8184363579022322cc7c97031654cb58db535611d03b01f81db44692dfab14be", 0xd6}, {&(0x7f0000008900)="7d4541e6ad9ea8f7b0173516b96420215ea6a32e5bbc6d6bda0102a477d47be8849e158939480e2aba9829a878b8fa7358b6b1363d15c46b0b929144769f84cfa0a1e6785efc75e47bb2473010e6f9a898389d5353ec6ea8193ba42814e05d690dea7b67ab64cf6c46fa9f138557444d6d993e233a7d9c2d394123e12008216fcd22d8a92be5b53c781c6c3f2fe26a34c15d4ddb224790fdb495da937f", 0x9d}], 0x4, &(0x7f00000089c0)=[{0x100, 0x113, 0xfffffc01, "1e9a9ee5ca6f31ba012c360769d9204b136495c9d7d06c6616b7d6707e344aa5ec56d2dcf322638976880c72dc16bab6e419ab2334c99660a40d8eac29a555ca0621e75286bb3213b15cef12336195accf177cd48b901244d1ff7ce31fef6d2bee0e3800ba4f00d52e755be037e4cfaba1f99317012fb0b75b486a231bc7e4212ec4b0d6e283a2a7bfb90fff1c4b6e296c64e7075a673465b2b32f83d188efbcc333454a00af6fe84b97fae26be3d33d6665ca4cef0dab8d38974999405a663984f05e4dbdb2d74c4bd781c3afe6f2a2f4a927c0f16af94a10ff32c2934503408580b20fc8854891a8f6"}, {0x28, 0x10b, 0x8, "8eab61250fd9986d0bcacdc515e5cfa54667b08f"}, {0x108, 0x105, 0x8, "8b517ca77416d2af381c9dc9d6d4a2dbd141d955496307d64dc7b07262516f9e23cdfba08b8737566795da0a8b740fbcf7076d280a0411f8a55bd15fa68d80a86fee2dd75a0915b1ae4ca25976589046592093423d9b536fd823f2d6651735f3d0bd49fe03bd705bd3d791192c2ee31ec29bdab8ed226740ef8ed4bf2465a664f92ad905a56e2457bd2553e8a44a7cc375b8425c60521af9460e2fe546c26e61b18a8ce75d0e9043481218819c385d87c371f01d6868faa3714b9ce4d23bb56d74fd6346eb1f5b76911aed585fab9c6702dd7227a80f0e7c0ac453d8bba3c5552053f540e445078c7113c16f189c383c7d77b1"}, {0x28, 0x128, 0x10001, "155f0656973129affc6ce960258fa0e1f1b3"}], 0x258}, 0x40)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

11:25:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:25:47 executing program 6:
syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:25:47 executing program 6:
syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1149.003903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1152.288973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1152.294012] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1152.296287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1152.302042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1152.306119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1154.324587] Bluetooth: hci7: command tx timeout
[ 1156.372565] Bluetooth: hci7: command tx timeout
[ 1158.420487] Bluetooth: hci7: command tx timeout
[ 1160.469427] Bluetooth: hci7: command tx timeout
[ 1167.397425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1167.398576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1167.479115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1167.480509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:26:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:13 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x101, @any, 0x50}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6}, 0xe)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x10, 0x7, {0x7e, @struct={0x3, 0x3}, 0x0, 0x0, 0x533d1790, 0x7fff, 0x81, 0x328eaca0, 0xe, @struct={0x200, 0xffffffff}, 0x2, 0x3f, [0x3, 0x400, 0x1, 0xfffffffffffffffb, 0x1, 0x8001]}, {0x9, @struct={0x17, 0x3}, 0x0, 0xfffffffffffffffb, 0x100000000, 0x2, 0xfff, 0x1ff, 0x58, @struct={0x115}, 0xc89, 0x398, [0x31ea, 0x7986, 0x5, 0x4ac, 0x0, 0x6]}, {0x80000001, @usage=0xff, 0x0, 0x3, 0x1f, 0x8000000100000000, 0x7, 0x9, 0x0, @usage=0x6, 0x80000000, 0x6, [0x1, 0x74, 0x2, 0x40, 0x9]}, {0x8, 0x9, 0x8}})
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000))

11:26:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:26:13 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:13 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket$inet6(0xa, 0x1, 0x1a8)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000007700)="fc3a8160ee9fce2f1e1d7811516300f03ebb32cfa4fb968b1185ca475cf6a3bc1bd4535cdc79361590c90427e3831beceed01f002f0584a360f6ef98b2ffb8b857c0afb938137983151f15a093bd33c9b1a7d6b93cc9103b2cc99a1cc60f19285ea1bc19cc0a43ce39d435fb3b374dab2a4e6c7b27c3ca330519a8824d6e5f14eacb2afa76fbc90d02c52f74540d1d78860b92f700826357314fe765d24dce553566c6137d8d45e950b839152c4343f5a2ae855c84fe5e9c463eaafae6cc08c69b", 0xc1}, {&(0x7f0000007800)="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", 0x1000}, {&(0x7f0000008800)="8295945903df5e6578909ffb6370e87c10ac3dc6eb4aff6402d4e0cc4e1449ed9107705635f231967bf36d8076664e4fcd41675f0c4894b1d4f1b297dc05e418ad0ce59660fcb457c86cab107e78f7a1c095f040f32d07cab1ccfb1ead6823addfdf88672d74ba58d8de5c4af3406db05498cd25350138b5a24d06da509ed702ff525c902515c2e47641a4beb6ad880f9dd8a60eb775a90a05c1844843b3bd9a2c5d7cb1e2485f387cc807c3b7be71b0e4a723b1a45d8184363579022322cc7c97031654cb58db535611d03b01f81db44692dfab14be", 0xd6}, {&(0x7f0000008900)="7d4541e6ad9ea8f7b0173516b96420215ea6a32e5bbc6d6bda0102a477d47be8849e158939480e2aba9829a878b8fa7358b6b1363d15c46b0b929144769f84cfa0a1e6785efc75e47bb2473010e6f9a898389d5353ec6ea8193ba42814e05d690dea7b67ab64cf6c46fa9f138557444d6d993e233a7d9c2d394123e12008216fcd22d8a92be5b53c781c6c3f2fe26a34c15d4ddb224790fdb495da937f", 0x9d}], 0x4, &(0x7f00000089c0)=[{0x100, 0x113, 0xfffffc01, "1e9a9ee5ca6f31ba012c360769d9204b136495c9d7d06c6616b7d6707e344aa5ec56d2dcf322638976880c72dc16bab6e419ab2334c99660a40d8eac29a555ca0621e75286bb3213b15cef12336195accf177cd48b901244d1ff7ce31fef6d2bee0e3800ba4f00d52e755be037e4cfaba1f99317012fb0b75b486a231bc7e4212ec4b0d6e283a2a7bfb90fff1c4b6e296c64e7075a673465b2b32f83d188efbcc333454a00af6fe84b97fae26be3d33d6665ca4cef0dab8d38974999405a663984f05e4dbdb2d74c4bd781c3afe6f2a2f4a927c0f16af94a10ff32c2934503408580b20fc8854891a8f6"}, {0x28, 0x10b, 0x8, "8eab61250fd9986d0bcacdc515e5cfa54667b08f"}, {0x108, 0x105, 0x8, "8b517ca77416d2af381c9dc9d6d4a2dbd141d955496307d64dc7b07262516f9e23cdfba08b8737566795da0a8b740fbcf7076d280a0411f8a55bd15fa68d80a86fee2dd75a0915b1ae4ca25976589046592093423d9b536fd823f2d6651735f3d0bd49fe03bd705bd3d791192c2ee31ec29bdab8ed226740ef8ed4bf2465a664f92ad905a56e2457bd2553e8a44a7cc375b8425c60521af9460e2fe546c26e61b18a8ce75d0e9043481218819c385d87c371f01d6868faa3714b9ce4d23bb56d74fd6346eb1f5b76911aed585fab9c6702dd7227a80f0e7c0ac453d8bba3c5552053f540e445078c7113c16f189c383c7d77b1"}, {0x28, 0x128, 0x10001, "155f0656973129affc6ce960258fa0e1f1b3"}], 0x258}, 0x40)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

11:26:13 executing program 6:
syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1175.459493] loop5: detected capacity change from 0 to 544
11:26:13 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:13 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

[ 1175.527567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:26:13 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x58400, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
read$usbmon(r1, &(0x7f0000000200)=""/185, 0xb9)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(0xffffffffffffffff, &(0x7f0000000140)="b3cec6a573c86bcdd800c6552230eabb892f802e8eb2c8f1dc13636df0d850d8193e3c1b5fd2d01c07b761642772d52920c9ba01b84f9945139d55a68925cd06b2d21c4951e1c99354938411c60efec761b2e59109b57bc399307139cd9e9617bde6405c4286ca5f0daeeb5d9a26ff936031fef37393771b274300f878c2c5e1739b9e0e370125cdd4578cba4a3613695cf27cdcae880000000000", 0xffffffffffffffe7)

11:26:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:13 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket$inet6(0xa, 0x1, 0x1a8)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000007700)="fc3a8160ee9fce2f1e1d7811516300f03ebb32cfa4fb968b1185ca475cf6a3bc1bd4535cdc79361590c90427e3831beceed01f002f0584a360f6ef98b2ffb8b857c0afb938137983151f15a093bd33c9b1a7d6b93cc9103b2cc99a1cc60f19285ea1bc19cc0a43ce39d435fb3b374dab2a4e6c7b27c3ca330519a8824d6e5f14eacb2afa76fbc90d02c52f74540d1d78860b92f700826357314fe765d24dce553566c6137d8d45e950b839152c4343f5a2ae855c84fe5e9c463eaafae6cc08c69b", 0xc1}, {&(0x7f0000007800)="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", 0x1000}, {&(0x7f0000008800)="8295945903df5e6578909ffb6370e87c10ac3dc6eb4aff6402d4e0cc4e1449ed9107705635f231967bf36d8076664e4fcd41675f0c4894b1d4f1b297dc05e418ad0ce59660fcb457c86cab107e78f7a1c095f040f32d07cab1ccfb1ead6823addfdf88672d74ba58d8de5c4af3406db05498cd25350138b5a24d06da509ed702ff525c902515c2e47641a4beb6ad880f9dd8a60eb775a90a05c1844843b3bd9a2c5d7cb1e2485f387cc807c3b7be71b0e4a723b1a45d8184363579022322cc7c97031654cb58db535611d03b01f81db44692dfab14be", 0xd6}, {&(0x7f0000008900)="7d4541e6ad9ea8f7b0173516b96420215ea6a32e5bbc6d6bda0102a477d47be8849e158939480e2aba9829a878b8fa7358b6b1363d15c46b0b929144769f84cfa0a1e6785efc75e47bb2473010e6f9a898389d5353ec6ea8193ba42814e05d690dea7b67ab64cf6c46fa9f138557444d6d993e233a7d9c2d394123e12008216fcd22d8a92be5b53c781c6c3f2fe26a34c15d4ddb224790fdb495da937f", 0x9d}], 0x4, &(0x7f00000089c0)=[{0x100, 0x113, 0xfffffc01, "1e9a9ee5ca6f31ba012c360769d9204b136495c9d7d06c6616b7d6707e344aa5ec56d2dcf322638976880c72dc16bab6e419ab2334c99660a40d8eac29a555ca0621e75286bb3213b15cef12336195accf177cd48b901244d1ff7ce31fef6d2bee0e3800ba4f00d52e755be037e4cfaba1f99317012fb0b75b486a231bc7e4212ec4b0d6e283a2a7bfb90fff1c4b6e296c64e7075a673465b2b32f83d188efbcc333454a00af6fe84b97fae26be3d33d6665ca4cef0dab8d38974999405a663984f05e4dbdb2d74c4bd781c3afe6f2a2f4a927c0f16af94a10ff32c2934503408580b20fc8854891a8f6"}, {0x28, 0x10b, 0x8, "8eab61250fd9986d0bcacdc515e5cfa54667b08f"}, {0x108, 0x105, 0x8, "8b517ca77416d2af381c9dc9d6d4a2dbd141d955496307d64dc7b07262516f9e23cdfba08b8737566795da0a8b740fbcf7076d280a0411f8a55bd15fa68d80a86fee2dd75a0915b1ae4ca25976589046592093423d9b536fd823f2d6651735f3d0bd49fe03bd705bd3d791192c2ee31ec29bdab8ed226740ef8ed4bf2465a664f92ad905a56e2457bd2553e8a44a7cc375b8425c60521af9460e2fe546c26e61b18a8ce75d0e9043481218819c385d87c371f01d6868faa3714b9ce4d23bb56d74fd6346eb1f5b76911aed585fab9c6702dd7227a80f0e7c0ac453d8bba3c5552053f540e445078c7113c16f189c383c7d77b1"}, {0x28, 0x128, 0x10001, "155f0656973129affc6ce960258fa0e1f1b3"}], 0x258}, 0x40)

11:26:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44202, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:13 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1175.684578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1175.686129] loop6: detected capacity change from 0 to 543
[ 1175.702096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1175.749960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1175.822713] loop5: detected capacity change from 0 to 545
[ 1175.842626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1175.897833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:23 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:23 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:26:23 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x4000)
dup(r1)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:23 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43c01, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:23 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
socket$inet6(0xa, 0x1, 0x1a8)

11:26:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x6, 0x6, 0x401, 0x70bd28, 0x25dfdbfc, {0xc, 0x0, 0x6}, [@typed={0xaf, 0x2, 0x0, 0x0, @binary="261e7ef6ed9def2bb5e2f49dbb592a128fbe2141380a0d5668eb8783cb47fbc8589bba6d6700850fad22f3a8903705595b0f89a132ac5d18c68697ac06b652406599e1c275c4e2e2c46cae6663c47302b2f24dc42edd30f5715666ab987a10b783d79cd11485169628f6e741f322d99bed564561571fb77fc51a89ec1003e231b573b80e877c9197bfbf6edad21fadcb8499003faeb994616fc45884217dc9c2d92ff94da1dc08bbb2c0d2"}]}, 0xc4}}, 0x40011)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x7ff, 0xfff3, 0x0, 0x4, 0x7, 0x7, 0x1ff}, 0xc)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x400, @any, 0xffff, 0x2}, 0xe)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1185.068576] loop6: detected capacity change from 0 to 542
[ 1185.089297] loop5: detected capacity change from 0 to 545
[ 1185.093299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1185.166137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1185.167723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:26:23 executing program 2:
fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @none}, 0xe)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:23 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x8, 0x9, 0x2, 0x3, 0x6c, 0x7ff}, 0xc)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:23 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:23 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r1, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:23 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x6f2, 0x1, 0x9, 0x10001}, {0xfff, 0x1, 0x7, 0x7d4}, {0x5, 0x0, 0xfb, 0x9}]}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
sendto$packet(r2, &(0x7f0000000280)="f4c1507fb14a033c06e9c1bd6da8a9dbdd29b807eaf368cd81c551f1d69ecb45d1d9022f956b6461f31a5416bfdf680a3d13fe36f03fed1a14fa24ef286c59029ba48887071a40cb74d1a64fca446a96c4ab178fa84e0e375eff1fb3b39b622a777fb1632177273c657c122ce6e3c03a9169af6bb192c2d328ec9a911e4b4e91465a783376f9fc8ccb88d23f66cbca76c4ba3a597943a6deef8335b260b2f6b6c33020193abf62c1291f44bf51dc5526146488b3c911", 0xb6, 0x8800, &(0x7f0000000000)={0x11, 0x11, 0x0, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @any, 0x2}, 0xe)
write(r3, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

11:26:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x80000)
sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="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", 0xff, 0x20008010, &(0x7f0000000280)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r2 = socket(0x25, 0x6, 0xffffffe0)
listen(r2, 0x9)

11:26:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1185.338861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:23 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

[ 1185.457169] loop5: detected capacity change from 0 to 551
[ 1185.485041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1185.548574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:32 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x8, 0x9, 0x2, 0x3, 0x6c, 0x7ff}, 0xc)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:26:32 executing program 4:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:32 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0xd874}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
dup(r1)

11:26:32 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:26:32 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x3, &(0x7f0000002e00)=[{0x1, 0x58, 0x3e, 0x9}, {0xff, 0x2, 0x0, 0x11db}, {0x5, 0x3, 0x3, 0x8}]}, 0x10)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:26:32 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="ec", 0x1}], 0x1, 0x2000000, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x68e146a1)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
fsetxattr(r4, &(0x7f0000000040)=@known='user.incfs.metadata\x00', &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x5, 0x0)

11:26:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x45a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

11:26:32 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x8, 0x9, 0x2, 0x3, 0x6c, 0x7ff}, 0xc)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:32 executing program 4:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1194.566056] loop5: detected capacity change from 0 to 557
[ 1194.605965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1194.668857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

11:26:42 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x8, 0x9, 0x2, 0x3, 0x6c, 0x7ff}, 0xc)

11:26:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_io_uring_complete(0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000001c0)={0xfff, 0x3, 0x3, 0x80, 0x6, 0x7f, 0xd09}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r1, @ANYRES32=r0, @ANYBLOB="000000002e2f010e5970d07c03cf000000000000653000"])
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'})
bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4, @none, 0x1}, 0xe)

11:26:42 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe000, @none, 0x4, 0x2}, 0xe)

11:26:42 executing program 4:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x45c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:42 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:26:42 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

[ 1204.592091] Bluetooth: hci7: link tx timeout
[ 1204.592916] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
11:26:42 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)

11:26:42 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1204.634105] Bluetooth: hci7: link tx timeout
[ 1204.634538] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1204.654710] loop5: detected capacity change from 0 to 558
11:26:42 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r0, &(0x7f00000001c0)="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", 0x189)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xfb9}}, './file0\x00'})
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3b, 0x2}, 0xe)

11:26:42 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:26:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1000}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040))

[ 1204.746149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:26:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

11:26:43 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b80), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000bc0)={{}, {0x0, 0x62}})
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r4, {0xee01}}, './file0\x00'})
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
write(r0, &(0x7f0000000040)="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", 0xff)

11:26:43 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})

11:26:43 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1204.857590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:43 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:43 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1204.940754] loop5: detected capacity change from 0 to 560
[ 1204.991092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1205.013511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1206.612536] Bluetooth: hci7: command 0x0405 tx timeout
11:26:52 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

11:26:52 executing program 2:
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x40, 0x0, 0x8}}}, 0x18)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81, 0x1}, 0xfffffffffffffdfe)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x9, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x8, 0x1, 0x8000, 0x3f, 0x7, 0x70, 0x6}, 0xc)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)

11:26:52 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:26:52 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x8, 0xff}}, './file0\x00'})
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000200)={0x2})
sendfile(0xffffffffffffffff, r3, &(0x7f0000000280), 0x1ff)
write(r2, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:52 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46802, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:52 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:26:52 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

[ 1213.953656] loop5: detected capacity change from 0 to 564
[ 1213.965059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:26:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

11:26:52 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80c00)
getsockname(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, &(0x7f0000000240)=0x80)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @hci, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, @sco, 0xbe11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3c, 0x4000008, 0x826})
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1214.130230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:26:52 executing program 6:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:26:52 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:26:52 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x47201, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:26:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x80, 0x2}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:26:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

[ 1214.216504] loop5: detected capacity change from 0 to 569
11:26:52 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1214.237909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:26:52 executing program 6:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

[ 1214.390202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.020524] Bluetooth: hci7: command 0x0405 tx timeout
11:27:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477a8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:01 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = memfd_secret(0x80000)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
r4 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x282100, 0x88)
getdents64(r4, &(0x7f0000000380)=""/244, 0xdf)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:27:01 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
sendfile(r0, r0, &(0x7f0000000040)=0x7, 0x10001)

11:27:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

11:27:01 executing program 6:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:01 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1223.512634] loop5: detected capacity change from 0 to 571
[ 1223.544861] Zero length message leads to an empty skb
11:27:01 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

[ 1223.558770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:01 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
fsetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000200)='$\x00', 0x2, 0x1)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff7f, 0x2}, 0xe)

11:27:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

[ 1223.585594] SELinux:  Context $ is not valid (left unmapped).
[ 1223.588979] audit: type=1400 audit(1760959621.902:15): avc:  denied  { relabelto } for  pid=10258 comm="syz-executor.2" name="RAWv6" dev="sockfs" ino=28806 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=rawip_socket permissive=1 trawcon="$"
11:27:01 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477a9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1223.666120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:27:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

11:27:02 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:02 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1223.784604] loop5: detected capacity change from 0 to 571
[ 1223.835053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1223.914308] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:27:11 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:11 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff, r0], 0x4)

11:27:11 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:11 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:11 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040), 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:27:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477aa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1232.860107] loop5: detected capacity change from 0 to 571
11:27:11 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

[ 1232.901790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:11 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:11 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

11:27:11 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:11 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

[ 1233.059072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1234.836456] Bluetooth: hci7: command 0x0405 tx timeout
11:27:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:21 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477a9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ab, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:21 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:21 executing program 6:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x202}, 0xe)

11:27:21 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1ccf3b738d302e5b, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xf801, @any, 0x7, 0x2}, 0xe)

11:27:21 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

[ 1242.795483] loop3: detected capacity change from 0 to 571
11:27:21 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

[ 1242.820017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:21 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

[ 1242.860641] loop5: detected capacity change from 0 to 571
[ 1242.876971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:21 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040), 0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

[ 1242.954251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1242.964496] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1244.948519] Bluetooth: hci7: command 0x0405 tx timeout
11:27:31 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:31 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

11:27:31 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ac, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r1, {0xfffffffb, 0xfff}}, './file0/file0\x00'})
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe)
write(r0, &(0x7f00000000c0)="f9f7989a37a1a4c7d800c6552230eabb072f802e8e0bef48fb84b2c8f1de13636df0d850d8193c1b5f92d01c07b761642772d5295fb90f994513a7b3", 0x3c)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x18, @any, 0xec9c}, 0xe)
sendfile(r0, r0, &(0x7f0000000240)=0x6, 0x5)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x85a4, 0x401, 0x7, 0x0, 0x4, 0x6, 0xbe6a}, 0xc)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
fcntl$dupfd(r3, 0x0, r0)
dup(r0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x3ff, 0x3f, 0x4, 0x3, 0x5, [{0x6, 0x1, 0x3}, {0xf74, 0x3, 0xffffffffffff4c88, '\x00', 0x208}, {0xfffffffffffffeff, 0x1, 0x4}, {0x2, 0x2, 0x40000000000004, '\x00', 0x80}, {0x6, 0xffffffffffff5062, 0x5, '\x00', 0x1801}]})

11:27:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477aa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:31 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0, 0xffffffffffffffff], 0x3)

[ 1253.585687] loop5: detected capacity change from 0 to 571
11:27:31 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

11:27:31 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r0], 0x2)

[ 1253.662630] loop3: detected capacity change from 0 to 571
11:27:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x1, 0x9783}, 0x100, './file0\x00'})

[ 1253.678418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:32 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x202}, 0xe)

11:27:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1253.718491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:27:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ad, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1253.744349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:32 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:27:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1253.903569] loop5: detected capacity change from 0 to 571
[ 1253.949919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1253.968589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1254.027640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:27:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ae, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:40 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

11:27:40 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1000}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040))

11:27:40 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:27:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(0xffffffffffffffff, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x0)
r2 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x4, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="0b2d1846fca48ca9aa07eb609d3e14d5084397163a20fed9e58ece6ba2c91b05e2c917a3df7bc9a39271b1c434a1f5788e1ded3e3d28454d5480b802c5e305ec2507d0980f92974c2a2b8868355d1aa301c4505a9492133aca5ce386397a8493ced31bd19bbbb8f306de1f2c191aea8c798c8a6fb6c1d06d507e2a4888865333dcc2b1a663abb00f5078cecbde559918f70b4097215ad0006dedf956aca160ffe2319b761f235fda4efb044f5e", 0xad, 0x100000000}], 0x10004, &(0x7f0000000400)={[{'map_files\x00'}, {'!@'}, {'map_files\x00'}, {'map_files\x00'}], [{@smackfsroot}]})
sendfile(r2, r1, 0x0, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
getdents64(r3, &(0x7f0000000440)=""/180, 0xb4)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0))
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r4, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r4, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2fe2, 0x2}, 0xe)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xf23}}, './file0\x00'})

11:27:40 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

11:27:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:27:40 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

11:27:40 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

[ 1262.473956] loop2: detected capacity change from 0 to 264192
[ 1262.475180] loop5: detected capacity change from 0 to 571
[ 1262.485219] nfs: Unknown parameter 'map_files'
11:27:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1262.528278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:40 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:27:40 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

[ 1262.571185] loop2: detected capacity change from 0 to 264192
[ 1262.576934] nfs: Unknown parameter 'map_files'
11:27:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:27:40 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:27:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477af, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x11)
fchdir(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0xa38, 0x4, 0x0, 0x7, 0xca, 0x54, 0x7}, 0xc)
getdents64(r2, &(0x7f0000000180)=""/99, 0x63)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec548b32ac0c86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b759642772d53b61cfae01f80f", 0x44)

[ 1262.677513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1262.787539] loop5: detected capacity change from 0 to 571
[ 1262.822344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1262.907017] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:27:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:27:50 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477af, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:50 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, 0x0, 0x0)

11:27:50 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x5}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:27:50 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:27:50 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:27:50 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:27:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:27:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:27:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1272.303742] loop5: detected capacity change from 0 to 571
[ 1272.306668] loop3: detected capacity change from 0 to 571
[ 1272.320279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1272.326775] Bluetooth: hci7: link tx timeout
[ 1272.327155] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa
11:27:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1272.380735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:27:50 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:27:50 executing program 4:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:27:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:27:50 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b80), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000bc0)={{}, {0x0, 0x62}})
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r4, {0xee01}}, './file0\x00'})
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
write(r0, &(0x7f0000000040)="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", 0xff)

[ 1272.437298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1272.473381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1274.388720] Bluetooth: hci7: command 0x0405 tx timeout
11:28:01 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:01 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:28:01 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, 0x0, 0x0)

11:28:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b1, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:01 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="ec", 0x1}], 0x1, 0x2000000, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x68e146a1)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
fsetxattr(r4, &(0x7f0000000040)=@known='user.incfs.metadata\x00', &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x5, 0x0)

11:28:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:28:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none, 0x7}, 0xe)

[ 1283.668567] loop5: detected capacity change from 0 to 571
11:28:02 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1283.725941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:02 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:28:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:02 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1283.810495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:28:02 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:28:12 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="ec", 0x1}], 0x1, 0x2000000, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x68e146a1)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
fsetxattr(r4, &(0x7f0000000040)=@known='user.incfs.metadata\x00', &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x5, 0x0)

11:28:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:12 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

11:28:12 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11:28:12 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:28:12 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, 0x0, 0x0)

11:28:12 executing program 3:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup2(r3, r4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0x800)
syz_io_uring_submit(0x0, r1, 0x0, 0x100000)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r7, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r7, &(0x7f0000000180)=""/99, 0x63)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r8, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r8, &(0x7f0000000180)=""/99, 0x63)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000280)={0x87, 0x6, 0xffff, "aa4b340aa5dfbf3d01c6d56076a6b0d2d89dde7d59f4ded3cb593b5dc59cd60e5d345088645da73fa3388c471b861bbce376d6943a68dba820783112b207050408bfe6ebfd4e2693cfdb725866507443a921cbd9e61a43fe747d4ca379db1024d5332f420bc1ca30948cf263244ba94b1cc997ad299841120fee67bcb8995b3f335e4793d60639"})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r7, &(0x7f0000000000), r9, 0x1, 0x0, 0x1}, 0x800)
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)

11:28:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:12 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

11:28:12 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1294.090484] loop5: detected capacity change from 0 to 571
11:28:12 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

11:28:12 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1294.149255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:12 executing program 3:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x491e, &(0x7f0000000000)={0x0, 0xcf27, 0x20, 0x1, 0x3b9, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000240), 0x1)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}, 0xe80)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
socket$inet(0x2, 0x800, 0x3)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:28:12 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

[ 1294.324717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1299.814242] kworker/u9:0 (25) used greatest stack depth: 23824 bytes left
11:28:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:21 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="ec", 0x1}], 0x1, 0x2000000, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x68e146a1)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
fsetxattr(r4, &(0x7f0000000040)=@known='user.incfs.metadata\x00', &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x5, 0x0)

11:28:21 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe)

11:28:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:21 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:21 executing program 3:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x3, 0x0, 0x3, 0x3}, 0x3)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYRESHEX=r2], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x2, 0xffffffffffffff7f, 0x0, 0x4, 0x0, 0x0, {0x0, r10}}, 0x10000)

11:28:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

[ 1302.819887] loop5: detected capacity change from 0 to 571
[ 1302.838205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:21 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:21 executing program 3:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x420500, 0x20)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r2, 0x0, 0xffffffffffffffff, 0x200})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={r2, 0x2, r0, 0x6, 0x80000})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
r6 = clone3(&(0x7f00000008c0)={0x302000, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000780), {0x1a}, &(0x7f00000007c0)=""/67, 0x43, &(0x7f0000000840)=""/26, &(0x7f0000000880)=[r3, r3, r3, r3], 0x4, {r1}}, 0x58)
fstat(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r8}}]})
r9 = getpid()
pidfd_open(r9, 0x0)
getresuid(&(0x7f00000009c0)=<r10=>0x0, &(0x7f0000000a00), &(0x7f0000000a40))
sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="c9575a1471db9077b5b74e5fafa5c512c5054682ebd799c24a30f518e1bd6dc141d4fc578aa8b3253df3ca88c9b229defcec867738bc902fd4f06db1541824cd10f9039981863657e9f17387b47089e787008b064db81457284285b9165b4a92539f9db77f2fa325c75d7243ade9cb8a220af3b5c959e398c4436f2f40ffa9ccb138d87394b10eb4c1f28412af1dc8b38ceb5be72221dde2eb06b4d279aa68132298eebf6c0eac30f10f68f139a10478ccfcd4cd2a4f62fcd523b831d5988511905433b39eba60622f8e8ec0892249d95c4f665f27f11a58cc13291d504b354a812cfe73", 0xe4}, {&(0x7f0000000280)="a19078b541e3e8511518663dc5cc0b9372b2ab85e302d4e8e6266d7b810ec5c0ec38c6de0a643b93beeeafed95ebb88ef0767c27b7a7c4ed5cb2b5939015b9eded592e680fe3ed4e8528af45fe105a476d5ea147976a5c361f56fe565af58e5876e4238ff85fdb3816e708a97926cff2da60ecc31d571636b7427cbb0cfe01184177c1671046a2bcf4e86fe519b29deededf415fc20dd17e97f9d8c79a0a3c8443b5d0a301f07e42b4666ec426cf2879e09e4a7b076020b0374a6f3b0183fd", 0xbf}, {&(0x7f0000000400)="738715a7abceb32e11ffd1f460857a5a398c94af542574ab4a17364200b65b873dea182d9c5a14f0a2bf25f4bef16a2475cfe92e3f36b97c66373b458d320c26ee2e7305be2dc3f8601a7f5935ffd48daea564ee36a96c49214b7a4dc45d436c10a8527afb0548b681257fe2cb6c0ec2cde50b3467ff28d0df6534be28ea8f345c189cc22f957b2e113420dec3423c00a1cbed9c4463", 0x96}, {&(0x7f00000004c0)="254ab742949caa0e8bbc9e60565f33b947ed5c065d1b08354d6a0c7fbf026d411d1a55b646a792af4c73c31d28fbbc89ffa6e397c362716cda48ceb464fdc9e5c76fc166c22bd2a9c9297536b07a847f4f00579a6c59332382f819144b52ae690746ac058062d111d23077e9073837d67689ba985441cf1c2d9e71f13e2252cbc97e0198864cd8cc7d397e7bdf477e9effe19026997b9ef66c2a17d7690c4dc91553d60373b25ca8877f07f6f2c2a5d84d595d22701d12dac1a71e6dd2505ce720868d0565f0e3f59fde06f3af75681eee75caafc1336725417dea000d969de934c33a422e9b9c508e6e2d7e405c77373e8d26", 0xf3}, {&(0x7f00000005c0)="a25d7968e8f77917a82c85925f9d64d2b4b6e2aed5ee597be119b8f1554ab4474830f28e9087477ccdae3a55b21df296e2e640b1a69f3dadb15ad709d3e4a7bd24ba66f338b07adbb15019145fd0841d90da7bbd361c398cac0fe3d7c909d321cc19413485ab560679dbd9458eaf10507cc31be1d3522a335b57e32e159fe0e04f952f2946aea14ab5f2e2748ad2d9cb03362c73402de6269138e47c1bef76658d388f8a0afc13d81f4539091e15694e4c41f75da95a", 0xb6}, {&(0x7f0000000680)="11f0e47c4fe312fdd8b0e79fb82d3d32e1d9d05776af07919af06853ec2000615bb914e71380bf2a6f8a4f332b675ac07f543175800b4870513d6e1a4514fe385c0e28812bad52116c3abcae6437bdc2ae72841b58e5a7a5d1d07f2715bb7277c2abdec85e72f2805a1bd1e47f5aa39d2c9406b6b38e2157f082", 0x7a}], 0x6, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee00}}}], 0x78, 0x8090}, 0x2)
fcntl$setown(r4, 0x8, 0x0)

11:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1303.011846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:21 executing program 6:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

[ 1303.119119] loop5: detected capacity change from 0 to 571
[ 1303.158782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1303.389139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x9ef}], 0x1)
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x9, 0x40}}, './file0\x00'})
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1000, 0x40, &(0x7f0000001400))
getdents(r0, &(0x7f0000000280)=""/143, 0x8f)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
r3 = syz_io_uring_setup(0x2538c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

11:28:31 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000200)=""/25, 0x19}], 0x3)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r3, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r1)

11:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

11:28:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:31 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:28:31 executing program 6:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

[ 1313.100868] loop3: detected capacity change from 0 to 512
[ 1313.102429] loop5: detected capacity change from 0 to 571
[ 1313.118886] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
11:28:31 executing program 6:
r0 = syz_io_uring_setup(0x5390, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:31 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x9ef}], 0x1)
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x9, 0x40}}, './file0\x00'})
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1000, 0x40, &(0x7f0000001400))
getdents(r0, &(0x7f0000000280)=""/143, 0x8f)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
r3 = syz_io_uring_setup(0x2538c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

[ 1313.161117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:31 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x9ef}], 0x1)
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x9, 0x40}}, './file0\x00'})
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1000, 0x40, &(0x7f0000001400))
getdents(r0, &(0x7f0000000280)=""/143, 0x8f)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
r3 = syz_io_uring_setup(0x2538c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

11:28:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x9ef}], 0x1)
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x9, 0x40}}, './file0\x00'})
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1000, 0x40, &(0x7f0000001400))
getdents(r0, &(0x7f0000000280)=""/143, 0x8f)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
r3 = syz_io_uring_setup(0x2538c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

[ 1313.341464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:31 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:31 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

[ 1313.447183] loop5: detected capacity change from 0 to 571
11:28:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1313.495214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:31 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:31 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b000000", 0x58, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0028a72b847f4afb7adca6e19bb5d9003d2ca40ca4e3cc63af8d799347786c52cc84df1d58d4846ee698557b87216fcd2e0826e49cf63d716c472bfd8b800c8cff5b244e6d5c06463b"])

11:28:31 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001640)=ANY=[], 0x90}, 0x40010001)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x52, 0xecf, 0x869, 0x7f, 0x6})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}])
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(r1, 0x2, &(0x7f00000029c0)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000002880)="9be8485cacda66110c8b12eea41271fc0635aac8edd2d27fa051b41645f08dd2fe5c635d9ecb6e61831618726f47087154c187eb306675d12d678b93b98f9bafa6e342841a11aa9c05503effac437c4e6bfff40d3491c07358741677fcce922c847ecbacc92ab7c449cd64657a37229c288763e18b656f682e05f34b94423a4e3ca1260ce3f1", 0x86, 0x800, 0x0, 0x1}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x2, 0xba78, r3, &(0x7f0000002940)="de2b8261caf9399e9e86ae7cfbb82d1be63d1fa73716b8fc54bb3ef20910a0673952a8d645e91ce65d1ac34db08e", 0x2e, 0x9, 0x0, 0x1}])
openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/schedstat\x00', 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0)
fork()
r5 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

[ 1313.650563] loop3: detected capacity change from 0 to 64
[ 1313.657198] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[ 1313.683948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1313.746636] loop7: detected capacity change from 0 to 512
[ 1313.781866] EXT4-fs (loop7): unsupported inode size: 0
[ 1313.782931] EXT4-fs (loop7): blocksize: 1024
11:28:41 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:28:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:28:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:41 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r0, &(0x7f0000000180)=""/99, 0x63)
r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = eventfd(0x0)
close(r2)
close_range(r1, 0xffffffffffffffff, 0x0)

11:28:41 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:28:41 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001640)=ANY=[], 0x90}, 0x40010001)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x52, 0xecf, 0x869, 0x7f, 0x6})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}])
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(r1, 0x2, &(0x7f00000029c0)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000002880)="9be8485cacda66110c8b12eea41271fc0635aac8edd2d27fa051b41645f08dd2fe5c635d9ecb6e61831618726f47087154c187eb306675d12d678b93b98f9bafa6e342841a11aa9c05503effac437c4e6bfff40d3491c07358741677fcce922c847ecbacc92ab7c449cd64657a37229c288763e18b656f682e05f34b94423a4e3ca1260ce3f1", 0x86, 0x800, 0x0, 0x1}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x2, 0xba78, r3, &(0x7f0000002940)="de2b8261caf9399e9e86ae7cfbb82d1be63d1fa73716b8fc54bb3ef20910a0673952a8d645e91ce65d1ac34db08e", 0x2e, 0x9, 0x0, 0x1}])
openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/schedstat\x00', 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0)
fork()
r5 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

11:28:41 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x7f3e, &(0x7f0000000000)={0x0, 0x1e4b, 0x2, 0x1, 0x19}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000400)=""/140, 0x8c}], 0x3)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000500)={0x5, 0x7, 0x0, 0xe2ee, 0x1, [{0xfffffffffffffffb, 0xffffffffffffffff, 0x8, '\x00', 0x80}]})

11:28:41 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

[ 1323.279801] loop4: detected capacity change from 0 to 64
[ 1323.287884] loop5: detected capacity change from 0 to 571
[ 1323.307547] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:28:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1323.348566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:28:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc102, 0x0)
write(r1, &(0x7f00000001c0)="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", 0x1000)

11:28:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1323.522412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:51 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x8}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3)

11:28:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:28:51 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:28:51 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:51 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

11:28:51 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11:28:51 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x1c, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r7=>0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3, 0x80010, r0, 0x10000000)
syz_io_uring_submit(0x0, r8, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x4000}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac0f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d84446c61524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9faac44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483606d1adc06cbc507380769d127557ee3fd661eb1de8470ed0d870000000ac88e3ed900000000000000010010000080000000e15cb0fa60f112f155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86ad5fdcc8d5d29972e7bbee34dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a3fc1d843fde3d272e162fa30e3307e1afdc00000000007502ab9cf99b8711100100005a0c0000dc0acc25165a6643ec30c42bc00e4b94c40da6103d8409d01471b0d21e703f331dbe40d13402c97552900264ee5f43ae09743d2d8359819e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef99cdc3f7c232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9fa76cc812b17279f7fd65d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878ab65f9f3212cd7fee5dfc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb9306000000000000002ed87c2ffbae74f34361fb3cd7c734a39724003df6e9765293f411501ad1f8a90101c525c29e54173c6e633edf30ce98c9338d522a50b3ebf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97317a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f2641f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3000000000000000000000000000000bb4071768aaae2e8cb2d8b701dbfe590faee3b1c243706e23cb5074d1ea55e1a17f0b23381467d1aeb2fd3a9000000000000000000000000305d1441fd648348c98a83520c649d3a6f15a4670651efc41530ec8811905b5ed7fa6b16bdb69e5ac79dfedd98283a70bcc0b526d7ac941dd3d79aadff04ac7c79f12d7970cdffe13e83c6b52076a90d0a4c7433a410e9dbde"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000000)=[r0, r0, r0], 0x3, 0x0, 0x1}, 0x78f20c00)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:28:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1332.930873] loop5: detected capacity change from 0 to 571
11:28:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1332.961023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1332.980871] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1332.981828] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1332.987581] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1332.988152] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1332.991607] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1332.992164] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1332.995728] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:28:51 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:28:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:28:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:28:51 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ba, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:28:51 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

[ 1333.166108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:28:51 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4c26, &(0x7f0000000000)={0x0, 0x5325, 0x4, 0x0, 0x100, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))

11:28:51 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x8}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3)

11:28:51 executing program 6:
syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

[ 1333.286186] loop5: detected capacity change from 0 to 571
[ 1333.318697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1333.330837] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1333.331573] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1333.332188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1333.333791] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1333.334901] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1333.336265] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1333.337919] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1333.382265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1335.316486] Bluetooth: hci0: command 0x0406 tx timeout
[ 1335.380471] Bluetooth: hci7: command 0x0405 tx timeout
[ 1335.381606] Bluetooth: hci6: command 0x0406 tx timeout
[ 1335.382923] Bluetooth: hci4: command 0x0406 tx timeout
[ 1335.384080] Bluetooth: hci5: command 0x0406 tx timeout
[ 1335.385242] Bluetooth: hci2: command 0x0406 tx timeout
[ 1335.386409] Bluetooth: hci1: command 0x0406 tx timeout
[ 1337.428868] Bluetooth: hci7: command 0x0405 tx timeout
11:29:01 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477bb, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:01 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4c26, &(0x7f0000000000)={0x0, 0x5325, 0x4, 0x0, 0x100, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))

11:29:01 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac0f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d84446c61524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9faac44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483606d1adc06cbc507380769d127557ee3fd661eb1de8470ed0d870000000ac88e3ed900000000000000010010000080000000e15cb0fa60f112f155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86ad5fdcc8d5d29972e7bbee34dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a3fc1d843fde3d272e162fa30e3307e1afdc00000000007502ab9cf99b8711100100005a0c0000dc0acc25165a6643ec30c42bc00e4b94c40da6103d8409d01471b0d21e703f331dbe40d13402c97552900264ee5f43ae09743d2d8359819e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef99cdc3f7c232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9fa76cc812b17279f7fd65d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878ab65f9f3212cd7fee5dfc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb9306000000000000002ed87c2ffbae74f34361fb3cd7c734a39724003df6e9765293f411501ad1f8a90101c525c29e54173c6e633edf30ce98c9338d522a50b3ebf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97317a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f2641f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3000000000000000000000000000000bb4071768aaae2e8cb2d8b701dbfe590faee3b1c243706e23cb5074d1ea55e1a17f0b23381467d1aeb2fd3a9000000000000000000000000305d1441fd648348c98a83520c649d3a6f15a4670651efc41530ec8811905b5ed7fa6b16bdb69e5ac79dfedd98283a70bcc0b526d7ac941dd3d79aadff04ac7c79f12d7970cdffe13e83c6b52076a90d0a4c7433a410e9dbde"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

11:29:01 executing program 6:
syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

11:29:01 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x8}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3)

11:29:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)

11:29:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

[ 1342.862918] loop5: detected capacity change from 0 to 571
[ 1342.924541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:01 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:01 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4c26, &(0x7f0000000000)={0x0, 0x5325, 0x4, 0x0, 0x100, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180))

11:29:01 executing program 6:
syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1)

11:29:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:29:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477bc, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1343.064146] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1343.067666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1343.070462] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1343.074099] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1343.085975] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1343.087334] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1343.088820] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1343.098280] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:29:01 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r7=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac0f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d84446c61524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9faac44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483606d1adc06cbc507380769d127557ee3fd661eb1de8470ed0d870000000ac88e3ed900000000000000010010000080000000e15cb0fa60f112f155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86ad5fdcc8d5d29972e7bbee34dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a3fc1d843fde3d272e162fa30e3307e1afdc00000000007502ab9cf99b8711100100005a0c0000dc0acc25165a6643ec30c42bc00e4b94c40da6103d8409d01471b0d21e703f331dbe40d13402c97552900264ee5f43ae09743d2d8359819e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef99cdc3f7c232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9fa76cc812b17279f7fd65d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878ab65f9f3212cd7fee5dfc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb9306000000000000002ed87c2ffbae74f34361fb3cd7c734a39724003df6e9765293f411501ad1f8a90101c525c29e54173c6e633edf30ce98c9338d522a50b3ebf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97317a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f2641f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3000000000000000000000000000000bb4071768aaae2e8cb2d8b701dbfe590faee3b1c243706e23cb5074d1ea55e1a17f0b23381467d1aeb2fd3a9000000000000000000000000305d1441fd648348c98a83520c649d3a6f15a4670651efc41530ec8811905b5ed7fa6b16bdb69e5ac79dfedd98283a70bcc0b526d7ac941dd3d79aadff04ac7c79f12d7970cdffe13e83c6b52076a90d0a4c7433a410e9dbde"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1343.175324] loop5: detected capacity change from 0 to 571
11:29:01 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

[ 1343.240037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1343.362769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1344.981466] Bluetooth: hci0: command 0x0406 tx timeout
[ 1345.108600] Bluetooth: hci7: command 0x0405 tx timeout
[ 1345.109677] Bluetooth: hci6: command 0x0406 tx timeout
[ 1345.110686] Bluetooth: hci4: command 0x0406 tx timeout
[ 1345.111999] Bluetooth: hci5: command 0x0406 tx timeout
[ 1345.113011] Bluetooth: hci2: command 0x0406 tx timeout
[ 1345.114137] Bluetooth: hci1: command 0x0406 tx timeout
[ 1347.156499] Bluetooth: hci7: command 0x0405 tx timeout
11:29:11 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x7b8f, &(0x7f0000000000)={0x0, 0x30a6, 0x1, 0x3, 0x2f, 0x0, r0}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740))
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000380)={@remote}, 0x14)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x7ff, {}, 0xfffffffc, 0x2, 0x1, {0x0, r1, r9}}, 0xffffffe0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:11 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:11 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})

11:29:11 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r7=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11:29:11 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

11:29:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477bd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1353.450087] loop5: detected capacity change from 0 to 571
[ 1353.477153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:11 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r7=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477be, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1353.562749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:29:11 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

[ 1353.611709] Bluetooth: hci0: Opcode 0x0c1a failed: -4
11:29:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

[ 1353.616624] Bluetooth: hci1: Opcode 0x0c1a failed: -4
11:29:11 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r7=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000012005232c5631a1d434f42f8ca6687aacaf5d7eb630080743b56b9bf4c6651c3acf892efcc9e6878d11a5d78000000226f3d17103ea23501b5dad13754c00ea648501359a29af75a551c5e3b60b89ad6ac9500"/161, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000010000000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000060002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1353.628651] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1353.638752] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1353.645582] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1353.646683] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1353.661590] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:29:12 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x7b8f, &(0x7f0000000000)={0x0, 0x30a6, 0x1, 0x3, 0x2f, 0x0, r0}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740))
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000380)={@remote}, 0x14)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x7ff, {}, 0xfffffffc, 0x2, 0x1, {0x0, r1, r9}}, 0xffffffe0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1353.710309] loop5: detected capacity change from 0 to 571
11:29:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:12 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

[ 1353.750384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:12 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

[ 1353.907734] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1353.911530] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1353.920681] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1353.921300] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1353.923041] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1353.923623] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1353.924313] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1353.938986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1355.860478] Bluetooth: hci0: command 0x0406 tx timeout
[ 1355.926478] Bluetooth: hci7: command 0x0405 tx timeout
[ 1355.927465] Bluetooth: hci6: command 0x0406 tx timeout
[ 1355.928465] Bluetooth: hci4: command 0x0406 tx timeout
[ 1355.929439] Bluetooth: hci2: command 0x0406 tx timeout
[ 1355.930412] Bluetooth: hci5: command 0x0406 tx timeout
[ 1355.931337] Bluetooth: hci1: command 0x0406 tx timeout
[ 1357.974477] Bluetooth: hci7: command 0x0405 tx timeout
11:29:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477bf, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:21 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740))
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:21 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

11:29:21 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x7b8f, &(0x7f0000000000)={0x0, 0x30a6, 0x1, 0x3, 0x2f, 0x0, r0}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740))
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000380)={@remote}, 0x14)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000000c0)={@mcast1}, 0x14)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x7ff, {}, 0xfffffffc, 0x2, 0x1, {0x0, r1, r9}}, 0xffffffe0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:21 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

11:29:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x0)

11:29:21 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1363.327125] loop5: detected capacity change from 0 to 571
[ 1363.365654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1363.466991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1364.138685] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1364.140015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1364.145701] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1364.148096] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1364.152036] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1364.154497] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1364.159321] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1365.396507] Bluetooth: hci0: command 0x0406 tx timeout
[ 1366.166227] Bluetooth: hci1: command 0x0406 tx timeout
[ 1366.167335] Bluetooth: hci7: command 0x0405 tx timeout
[ 1366.167396] Bluetooth: hci6: command 0x0406 tx timeout
[ 1366.167413] Bluetooth: hci4: command 0x0406 tx timeout
[ 1366.167429] Bluetooth: hci5: command 0x0406 tx timeout
[ 1366.167445] Bluetooth: hci2: command 0x0406 tx timeout
11:29:32 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:32 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0)

11:29:32 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6})
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:32 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:32 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

11:29:32 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

[ 1373.869995] loop5: detected capacity change from 0 to 571
11:29:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

[ 1373.933132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:32 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:29:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

11:29:32 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1374.016247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:29:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c1, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:32 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

11:29:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

11:29:32 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)

[ 1374.117405] loop5: detected capacity change from 0 to 571
[ 1374.145879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1374.215059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1374.683726] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1374.684639] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1374.685634] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1374.687279] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1374.688212] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1374.689867] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1374.690770] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1375.893451] Bluetooth: hci0: command 0x0406 tx timeout
[ 1376.724474] Bluetooth: hci7: command 0x0405 tx timeout
[ 1376.724606] Bluetooth: hci6: command 0x0406 tx timeout
[ 1376.724970] Bluetooth: hci4: command 0x0406 tx timeout
[ 1376.726040] Bluetooth: hci5: command 0x0406 tx timeout
[ 1376.726502] Bluetooth: hci2: command 0x0406 tx timeout
[ 1376.726523] Bluetooth: hci1: command 0x0406 tx timeout
11:29:47 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

11:29:47 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:47 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

11:29:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:47 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})

11:29:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:47 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1389.740335] loop5: detected capacity change from 0 to 571
11:29:48 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1389.773287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

11:29:48 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1389.840148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:29:48 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1389.931546] loop5: detected capacity change from 0 to 571
11:29:48 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1389.994643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1390.117789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1390.524480] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1390.525814] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1390.527990] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1390.529245] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1390.530924] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1390.532303] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1390.537609] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1391.700457] Bluetooth: hci0: command 0x0406 tx timeout
[ 1392.532465] Bluetooth: hci6: command 0x0406 tx timeout
[ 1392.532984] Bluetooth: hci4: command 0x0406 tx timeout
[ 1392.533471] Bluetooth: hci5: command 0x0406 tx timeout
[ 1392.533536] Bluetooth: hci2: command 0x0406 tx timeout
[ 1392.533928] Bluetooth: hci1: command 0x0406 tx timeout
[ 1392.596434] Bluetooth: hci7: command 0x0405 tx timeout
11:29:57 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r3, r4+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:29:57 executing program 4:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:29:57 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:57 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})

11:29:57 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:29:57 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1399.357400] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1399.358139] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1399.361031] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1399.364679] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1399.366449] loop5: detected capacity change from 0 to 571
[ 1399.368499] Bluetooth: hci4: Opcode 0x0c1a failed: -4
11:29:57 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1399.378039] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1399.381285] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:29:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1399.408699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:29:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:29:57 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r6, &(0x7f0000000180)=""/99, 0x63)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})

11:29:57 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:57 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:29:57 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r3, r4+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
close_range(r0, 0xffffffffffffffff, 0x0)

11:29:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1399.501624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:29:57 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1399.583447] loop5: detected capacity change from 0 to 571
[ 1399.605906] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1399.606026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1399.607208] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1399.620181] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1399.623605] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1399.628576] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1399.630067] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1399.632274] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1399.679745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1401.556468] Bluetooth: hci0: command 0x0406 tx timeout
[ 1401.620418] Bluetooth: hci1: command 0x0406 tx timeout
[ 1401.684573] Bluetooth: hci7: command 0x0405 tx timeout
[ 1401.684641] Bluetooth: hci6: command 0x0406 tx timeout
[ 1401.685418] Bluetooth: hci4: command 0x0406 tx timeout
[ 1401.686457] Bluetooth: hci5: command 0x0406 tx timeout
[ 1401.687141] Bluetooth: hci2: command 0x0406 tx timeout
11:30:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:07 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:07 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:07 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

11:30:07 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000400)=""/123, 0x7b}], 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:07 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r3, r4+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:30:07 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

[ 1409.508519] loop5: detected capacity change from 0 to 571
11:30:07 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:30:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1409.550844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:30:07 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r3, r4+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

[ 1409.631571] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1409.632180] Bluetooth: hci1: Opcode 0x0c1a failed: -4
11:30:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:07 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1409.653136] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1409.654056] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1409.657952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1409.660900] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1409.670086] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1409.675095] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:30:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:30:08 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCCONS(r1, 0x541d)

[ 1409.774916] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1409.776223] loop5: detected capacity change from 0 to 571
[ 1409.793947] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1409.800641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1409.806429] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1409.809333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1409.812699] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1409.817888] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1409.818468] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1409.873232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1411.733175] Bluetooth: hci0: command 0x0406 tx timeout
[ 1411.796398] Bluetooth: hci1: command 0x0406 tx timeout
[ 1411.860443] Bluetooth: hci7: command 0x0405 tx timeout
[ 1411.860496] Bluetooth: hci6: command 0x0406 tx timeout
[ 1411.861014] Bluetooth: hci4: command 0x0406 tx timeout
[ 1411.862067] Bluetooth: hci5: command 0x0406 tx timeout
[ 1411.862535] Bluetooth: hci2: command 0x0406 tx timeout
11:30:16 executing program 6:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r3, r4+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r5, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r5, &(0x7f0000000180)=""/99, 0x63)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11:30:16 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:16 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:16 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCCONS(r1, 0x541d)

11:30:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

11:30:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
write(r0, &(0x7f0000000140)="b3cec6a5733cc5f7a1fec86bcdd800c6552230eabb892f802e8e0bef48fb84b2c8f1dc13636df0d850d8193c1b5f92d01c07b761642772d5295fb9ba01b80f9945139d55", 0x44)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCCONS(r1, 0x541d)

[ 1418.425679] loop5: detected capacity change from 0 to 571
[ 1418.459672] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1418.460985] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1418.463217] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:30:16 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
syz_io_uring_setup(0x4152, &(0x7f0000000000)={0x0, 0x80e, 0x20, 0x2, 0x230, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1418.465233] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1418.466211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1418.467155] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1418.468776] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1418.470851] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:30:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11:30:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

11:30:16 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 1)

11:30:16 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:16 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477c9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1418.583129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:30:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 1)

[ 1418.628146] FAULT_INJECTION: forcing a failure.
[ 1418.628146] name failslab, interval 1, probability 0, space 0, times 0
[ 1418.630155] CPU: 1 UID: 0 PID: 11161 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1418.630185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1418.630197] Call Trace:
[ 1418.630206]  <TASK>
[ 1418.630219]  dump_stack_lvl+0xfa/0x120
[ 1418.630298]  should_fail_ex+0x4d7/0x5e0
[ 1418.630341]  should_failslab+0xc2/0x120
[ 1418.630378]  __kvmalloc_node_noprof+0x11f/0x770
[ 1418.630400]  ? get_pid_task+0x29/0x250
[ 1418.630428]  ? io_rsrc_data_alloc+0x30/0xc0
[ 1418.630450]  ? get_pid_task+0xfd/0x250
[ 1418.630479]  ? io_rsrc_data_alloc+0x30/0xc0
[ 1418.630500]  io_rsrc_data_alloc+0x30/0xc0
[ 1418.630524]  io_alloc_file_tables+0x2c/0xc0
[ 1418.630553]  io_sqe_files_register+0x186/0x8f0
[ 1418.630580]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1418.630613]  ? __pfx_io_sqe_files_register+0x10/0x10
[ 1418.630641]  ? trace_contention_end+0xca/0x110
[ 1418.630678]  __io_uring_register+0x1207/0x2190
[ 1418.630701]  ? __pfx___mutex_lock+0x10/0x10
[ 1418.630720]  ? __fget_files+0x203/0x3b0
[ 1418.630744]  ? __pfx___io_uring_register+0x10/0x10
[ 1418.630770]  ? __fget_files+0x20d/0x3b0
[ 1418.630801]  __x64_sys_io_uring_register+0x162/0x270
[ 1418.630828]  do_syscall_64+0xbf/0x390
[ 1418.630851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1418.630874] RIP: 0033:0x7f8bafe8cb19
[ 1418.630891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1418.630911] RSP: 002b:00007f8bad402188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1418.630932] RAX: ffffffffffffffda RBX: 00007f8baff9ff60 RCX: 00007f8bafe8cb19
[ 1418.630947] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 0000000000000003
[ 1418.630960] RBP: 00007f8bad4021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1418.630972] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1418.630985] R13: 00007ffe74b6088f R14: 00007f8bad402300 R15: 0000000000022000
[ 1418.631014]  </TASK>
[ 1418.689092] FAULT_INJECTION: forcing a failure.
[ 1418.689092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1418.690092] CPU: 0 UID: 0 PID: 11167 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1418.690138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1418.690155] Call Trace:
[ 1418.690164]  <TASK>
[ 1418.690175]  dump_stack_lvl+0xfa/0x120
[ 1418.690230]  should_fail_ex+0x4d7/0x5e0
[ 1418.690265]  _copy_from_user+0x30/0xd0
[ 1418.690298]  copy_msghdr_from_user+0x88/0x150
[ 1418.690329]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1418.690350]  ? lock_acquire+0x15e/0x2f0
[ 1418.690369]  ___sys_sendmsg+0xdc/0x1b0
[ 1418.690386]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1418.690405]  ? proc_fail_nth_write+0x97/0x220
[ 1418.690423]  ? lock_acquire+0x15e/0x2f0
[ 1418.690438]  ? __fget_files+0x34/0x3b0
[ 1418.690451]  ? find_held_lock+0x2b/0x80
[ 1418.690463]  ? __fget_files+0x203/0x3b0
[ 1418.690475]  ? lock_release+0xc8/0x290
[ 1418.690493]  ? __fget_files+0x20d/0x3b0
[ 1418.690510]  __sys_sendmsg+0x150/0x200
[ 1418.690526]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1418.690544]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1418.690561]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1418.690582]  ? ksys_write+0x1a3/0x240
[ 1418.690596]  ? __pfx_ksys_write+0x10/0x10
[ 1418.690614]  do_syscall_64+0xbf/0x390
[ 1418.690628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1418.690641] RIP: 0033:0x7fb3c308cb19
[ 1418.690650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1418.690661] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1418.690673] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1418.690682] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1418.690689] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1418.690696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1418.690702] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1418.690718]  </TASK>
[ 1418.706019] loop5: detected capacity change from 0 to 571
[ 1418.728538] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1418.731251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1418.740060] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1418.744318] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1418.756013] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1418.769596] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1418.770142] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1418.771895] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1418.801236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1420.692474] Bluetooth: hci0: command 0x0406 tx timeout
[ 1420.756454] Bluetooth: hci5: command 0x0406 tx timeout
[ 1420.757496] Bluetooth: hci2: command 0x0406 tx timeout
[ 1420.757527] Bluetooth: hci1: command 0x0406 tx timeout
[ 1420.820494] Bluetooth: hci7: command 0x0405 tx timeout
[ 1420.820541] Bluetooth: hci6: command 0x0406 tx timeout
[ 1420.821554] Bluetooth: hci4: command 0x0406 tx timeout
11:30:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:30:25 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:25 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r6, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 2)

11:30:25 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 2)

11:30:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ca, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:25 executing program 0:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:30:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1427.115498] loop5: detected capacity change from 0 to 571
[ 1427.146967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1427.157107] FAULT_INJECTION: forcing a failure.
[ 1427.157107] name failslab, interval 1, probability 0, space 0, times 0
[ 1427.158122] CPU: 0 UID: 0 PID: 11193 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1427.158162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1427.158180] Call Trace:
[ 1427.158189]  <TASK>
[ 1427.158200]  dump_stack_lvl+0xfa/0x120
[ 1427.158254]  should_fail_ex+0x4d7/0x5e0
[ 1427.158288]  should_failslab+0xc2/0x120
[ 1427.158330]  kmem_cache_alloc_node_noprof+0x87/0x6b0
[ 1427.158357]  ? __alloc_skb+0x2ab/0x370
[ 1427.158377]  ? __alloc_skb+0x2ab/0x370
[ 1427.158391]  ? __pfx_netlink_insert+0x10/0x10
[ 1427.158408]  __alloc_skb+0x2ab/0x370
[ 1427.158423]  ? __pfx___alloc_skb+0x10/0x10
[ 1427.158438]  ? netlink_autobind.isra.0+0x158/0x370
[ 1427.158460]  netlink_alloc_large_skb+0x69/0x150
[ 1427.158478]  netlink_sendmsg+0x66d/0xd80
[ 1427.158498]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1427.158522]  ____sys_sendmsg+0xa67/0xc20
[ 1427.158535]  ? copy_msghdr_from_user+0xfb/0x150
[ 1427.158551]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1427.158568]  ? lock_acquire+0x15e/0x2f0
[ 1427.158589]  ___sys_sendmsg+0x10f/0x1b0
[ 1427.158613]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1427.158636]  ? proc_fail_nth_write+0x97/0x220
[ 1427.158657]  ? lock_acquire+0x15e/0x2f0
[ 1427.158673]  ? __fget_files+0x34/0x3b0
[ 1427.158686]  ? find_held_lock+0x2b/0x80
[ 1427.158698]  ? __fget_files+0x203/0x3b0
[ 1427.158713]  ? lock_release+0xc8/0x290
[ 1427.158736]  ? __fget_files+0x20d/0x3b0
[ 1427.158753]  __sys_sendmsg+0x150/0x200
[ 1427.158769]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1427.158790]  ? __pfx_ksys_write+0x10/0x10
[ 1427.158809]  do_syscall_64+0xbf/0x390
[ 1427.158823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.158836] RIP: 0033:0x7fb3c308cb19
[ 1427.158846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1427.158858] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1427.158869] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1427.158878] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1427.158884] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1427.158891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1427.158898] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1427.158913]  </TASK>
[ 1427.189748] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1427.190332] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1427.191024] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:30:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1)

[ 1427.201642] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1427.202265] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1427.203103] Bluetooth: hci6: Opcode 0x0c1a failed: -4
11:30:25 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 3)

[ 1427.211277] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:30:25 executing program 0:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1427.247718] FAULT_INJECTION: forcing a failure.
[ 1427.247718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1427.248819] CPU: 0 UID: 0 PID: 11201 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1427.248836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1427.248844] Call Trace:
[ 1427.248848]  <TASK>
[ 1427.248852]  dump_stack_lvl+0xfa/0x120
[ 1427.248878]  should_fail_ex+0x4d7/0x5e0
[ 1427.248893]  _copy_from_user+0x30/0xd0
[ 1427.248907]  copy_msghdr_from_user+0x88/0x150
[ 1427.248926]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1427.248947]  ? lock_acquire+0x15e/0x2f0
[ 1427.248966]  ___sys_sendmsg+0xdc/0x1b0
[ 1427.248982]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1427.249001]  ? proc_fail_nth_write+0x97/0x220
[ 1427.249019]  ? lock_acquire+0x15e/0x2f0
[ 1427.249034]  ? __fget_files+0x34/0x3b0
[ 1427.249047]  ? find_held_lock+0x2b/0x80
[ 1427.249060]  ? __fget_files+0x203/0x3b0
[ 1427.249072]  ? lock_release+0xc8/0x290
[ 1427.249089]  ? __fget_files+0x20d/0x3b0
[ 1427.249106]  __sys_sendmsg+0x150/0x200
[ 1427.249122]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1427.249140]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1427.249157]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1427.249173]  ? ksys_write+0x1a3/0x240
[ 1427.249187]  ? __pfx_ksys_write+0x10/0x10
[ 1427.249205]  do_syscall_64+0xbf/0x390
[ 1427.249219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.249231] RIP: 0033:0x7f5676e97b19
[ 1427.249241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1427.249252] RSP: 002b:00007f567440d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1427.249264] RAX: ffffffffffffffda RBX: 00007f5676faaf60 RCX: 00007f5676e97b19
[ 1427.249272] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1427.249279] RBP: 00007f567440d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1427.249286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1427.249293] R13: 00007ffc314b3d6f R14: 00007f567440d300 R15: 0000000000022000
[ 1427.249308]  </TASK>
11:30:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477cb, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1427.298868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:30:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 1)

11:30:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 3)

11:30:25 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:25 executing program 0:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:30:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 4)

[ 1427.369295] FAULT_INJECTION: forcing a failure.
[ 1427.369295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1427.370432] CPU: 0 UID: 0 PID: 11210 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1427.370449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1427.370457] Call Trace:
[ 1427.370461]  <TASK>
[ 1427.370466]  dump_stack_lvl+0xfa/0x120
[ 1427.370492]  should_fail_ex+0x4d7/0x5e0
[ 1427.370508]  _copy_from_user+0x30/0xd0
[ 1427.370522]  move_addr_to_kernel.part.0+0x40/0x120
[ 1427.370537]  __sys_connect+0xd4/0x1a0
[ 1427.370551]  ? __pfx___sys_connect+0x10/0x10
[ 1427.370568]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1427.370585]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1427.370601]  ? ksys_write+0x1a3/0x240
[ 1427.370616]  ? __pfx_ksys_write+0x10/0x10
[ 1427.370632]  __x64_sys_connect+0x73/0xb0
[ 1427.370647]  do_syscall_64+0xbf/0x390
[ 1427.370662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.370675] RIP: 0033:0x7f95f001eb19
[ 1427.370684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1427.370695] RSP: 002b:00007f95ed594188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1427.370707] RAX: ffffffffffffffda RBX: 00007f95f0131f60 RCX: 00007f95f001eb19
[ 1427.370715] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004
[ 1427.370722] RBP: 00007f95ed5941d0 R08: 0000000000000000 R09: 0000000000000000
[ 1427.370729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1427.370736] R13: 00007ffe3407148f R14: 00007f95ed594300 R15: 0000000000022000
[ 1427.370751]  </TASK>
[ 1427.381236] FAULT_INJECTION: forcing a failure.
[ 1427.381236] name failslab, interval 1, probability 0, space 0, times 0
[ 1427.387119] CPU: 1 UID: 0 PID: 11208 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1427.387149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1427.387162] Call Trace:
[ 1427.387170]  <TASK>
[ 1427.387179]  dump_stack_lvl+0xfa/0x120
[ 1427.387221]  should_fail_ex+0x4d7/0x5e0
[ 1427.387248]  should_failslab+0xc2/0x120
[ 1427.387277]  __kmalloc_noprof+0xcd/0x680
[ 1427.387310]  ? io_alloc_file_tables+0x66/0xc0
[ 1427.387342]  io_alloc_file_tables+0x66/0xc0
[ 1427.387378]  io_sqe_files_register+0x186/0x8f0
[ 1427.387404]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1427.387439]  ? __pfx_io_sqe_files_register+0x10/0x10
[ 1427.387467]  ? trace_contention_end+0xca/0x110
[ 1427.387503]  __io_uring_register+0x1207/0x2190
[ 1427.387527]  ? __pfx___mutex_lock+0x10/0x10
[ 1427.387546]  ? __fget_files+0x203/0x3b0
[ 1427.387570]  ? __pfx___io_uring_register+0x10/0x10
[ 1427.387596]  ? __fget_files+0x20d/0x3b0
[ 1427.387627]  __x64_sys_io_uring_register+0x162/0x270
[ 1427.387654]  do_syscall_64+0xbf/0x390
[ 1427.387678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.387701] RIP: 0033:0x7f8bafe8cb19
[ 1427.387718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1427.387739] RSP: 002b:00007f8bad402188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1427.387760] RAX: ffffffffffffffda RBX: 00007f8baff9ff60 RCX: 00007f8bafe8cb19
[ 1427.387774] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 0000000000000003
[ 1427.387787] RBP: 00007f8bad4021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1427.387800] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1427.387813] R13: 00007ffe74b6088f R14: 00007f8bad402300 R15: 0000000000022000
[ 1427.387842]  </TASK>
[ 1427.477490] loop5: detected capacity change from 0 to 571
[ 1427.517779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1427.531960] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1427.533585] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1427.534861] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1427.539794] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1427.542514] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1427.546881] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1427.549124] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1427.594485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1429.460463] Bluetooth: hci0: command 0x0406 tx timeout
[ 1429.588500] Bluetooth: hci7: command 0x0405 tx timeout
[ 1429.589564] Bluetooth: hci6: command 0x0406 tx timeout
[ 1429.589650] Bluetooth: hci4: command 0x0406 tx timeout
[ 1429.590602] Bluetooth: hci5: command 0x0406 tx timeout
[ 1429.591301] Bluetooth: hci2: command 0x0406 tx timeout
[ 1429.592395] Bluetooth: hci1: command 0x0406 tx timeout
11:30:35 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 4)

11:30:35 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 2)

11:30:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477cc, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2)

11:30:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 5)

11:30:35 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:35 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1437.169617] loop5: detected capacity change from 0 to 571
[ 1437.172098] FAULT_INJECTION: forcing a failure.
[ 1437.172098] name failslab, interval 1, probability 0, space 0, times 0
[ 1437.173711] CPU: 0 UID: 0 PID: 11242 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1437.173740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1437.173752] Call Trace:
[ 1437.173759]  <TASK>
[ 1437.173767]  dump_stack_lvl+0xfa/0x120
[ 1437.173806]  should_fail_ex+0x4d7/0x5e0
[ 1437.173832]  should_failslab+0xc2/0x120
[ 1437.173859]  kmem_cache_alloc_node_noprof+0x87/0x6b0
[ 1437.173895]  ? __alloc_skb+0x2ab/0x370
[ 1437.173928]  ? __alloc_skb+0x2ab/0x370
[ 1437.173952]  ? __pfx_netlink_insert+0x10/0x10
[ 1437.173981]  __alloc_skb+0x2ab/0x370
[ 1437.174008]  ? __pfx___alloc_skb+0x10/0x10
[ 1437.174034]  ? netlink_autobind.isra.0+0x158/0x370
[ 1437.174073]  netlink_alloc_large_skb+0x69/0x150
[ 1437.174106]  netlink_sendmsg+0x66d/0xd80
[ 1437.174141]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1437.174183]  ____sys_sendmsg+0xa67/0xc20
[ 1437.174206]  ? copy_msghdr_from_user+0xfb/0x150
[ 1437.174235]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1437.174264]  ? lock_acquire+0x15e/0x2f0
[ 1437.174297]  ___sys_sendmsg+0x10f/0x1b0
[ 1437.174327]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1437.174367]  ? proc_fail_nth_write+0x97/0x220
[ 1437.174399]  ? lock_acquire+0x15e/0x2f0
[ 1437.174426]  ? __fget_files+0x34/0x3b0
[ 1437.174449]  ? find_held_lock+0x2b/0x80
[ 1437.174470]  ? __fget_files+0x203/0x3b0
[ 1437.174492]  ? lock_release+0xc8/0x290
[ 1437.174523]  ? __fget_files+0x20d/0x3b0
[ 1437.174554]  __sys_sendmsg+0x150/0x200
[ 1437.174583]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1437.174620]  ? __pfx_ksys_write+0x10/0x10
[ 1437.174653]  do_syscall_64+0xbf/0x390
[ 1437.174677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1437.174699] RIP: 0033:0x7f5676e97b19
[ 1437.174715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1437.174735] RSP: 002b:00007f567440d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1437.174757] RAX: ffffffffffffffda RBX: 00007f5676faaf60 RCX: 00007f5676e97b19
[ 1437.174772] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
11:30:35 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1437.174786] RBP: 00007f567440d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1437.174800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1437.174813] R13: 00007ffc314b3d6f R14: 00007f567440d300 R15: 0000000000022000
[ 1437.174841]  </TASK>
[ 1437.226731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:30:35 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 5)

11:30:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3)

[ 1437.264489] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1437.270653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1437.274579] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:30:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 6)

[ 1437.281199] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1437.284908] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1437.289585] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1437.293836] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1437.305095] FAULT_INJECTION: forcing a failure.
[ 1437.305095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1437.306898] CPU: 1 UID: 0 PID: 11251 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1437.306929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1437.306942] Call Trace:
[ 1437.306949]  <TASK>
[ 1437.306957]  dump_stack_lvl+0xfa/0x120
[ 1437.306998]  should_fail_ex+0x4d7/0x5e0
[ 1437.307025]  _copy_from_user+0x30/0xd0
[ 1437.307049]  io_sqe_files_register+0x239/0x8f0
[ 1437.307076]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1437.307110]  ? __pfx_io_sqe_files_register+0x10/0x10
[ 1437.307139]  ? trace_contention_end+0xca/0x110
[ 1437.307175]  __io_uring_register+0x1207/0x2190
[ 1437.307199]  ? __pfx___mutex_lock+0x10/0x10
[ 1437.307218]  ? __fget_files+0x203/0x3b0
[ 1437.307243]  ? __pfx___io_uring_register+0x10/0x10
[ 1437.307269]  ? __fget_files+0x20d/0x3b0
[ 1437.307300]  __x64_sys_io_uring_register+0x162/0x270
[ 1437.307327]  do_syscall_64+0xbf/0x390
[ 1437.307358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1437.307381] RIP: 0033:0x7f8bafe8cb19
[ 1437.307398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1437.307419] RSP: 002b:00007f8bad402188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1437.307440] RAX: ffffffffffffffda RBX: 00007f8baff9ff60 RCX: 00007f8bafe8cb19
[ 1437.307455] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 0000000000000003
[ 1437.307468] RBP: 00007f8bad4021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1437.307481] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1437.307493] R13: 00007ffe74b6088f R14: 00007f8bad402300 R15: 0000000000022000
[ 1437.307522]  </TASK>
[ 1437.373089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:30:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477cd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 3)

11:30:35 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
getdents64(0xffffffffffffffff, &(0x7f0000003c80)=""/87, 0x17)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1437.409130] FAULT_INJECTION: forcing a failure.
[ 1437.409130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1437.411294] CPU: 1 UID: 0 PID: 11257 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1437.411342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1437.411369] Call Trace:
[ 1437.411380]  <TASK>
[ 1437.411393]  dump_stack_lvl+0xfa/0x120
[ 1437.411457]  should_fail_ex+0x4d7/0x5e0
[ 1437.411498]  _copy_from_iter+0x1dc/0x1660
[ 1437.411536]  ? lock_acquire+0x15e/0x2f0
[ 1437.411572]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1437.411595]  ? find_held_lock+0x2b/0x80
[ 1437.411619]  ? __pfx__copy_from_iter+0x10/0x10
[ 1437.411638]  ? lock_release+0xc8/0x290
[ 1437.411671]  ? __virt_addr_valid+0x100/0x5d0
[ 1437.411694]  ? __check_object_size+0x57b/0x880
[ 1437.411721]  netlink_sendmsg+0x800/0xd80
[ 1437.411759]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1437.411802]  ____sys_sendmsg+0xa67/0xc20
[ 1437.411826]  ? copy_msghdr_from_user+0xfb/0x150
[ 1437.411856]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1437.411886]  ? lock_acquire+0x15e/0x2f0
[ 1437.411918]  ___sys_sendmsg+0x10f/0x1b0
[ 1437.411949]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1437.411983]  ? proc_fail_nth_write+0x97/0x220
[ 1437.412015]  ? lock_acquire+0x15e/0x2f0
[ 1437.412043]  ? __fget_files+0x34/0x3b0
[ 1437.412066]  ? find_held_lock+0x2b/0x80
[ 1437.412088]  ? __fget_files+0x203/0x3b0
[ 1437.412110]  ? lock_release+0xc8/0x290
[ 1437.412143]  ? __fget_files+0x20d/0x3b0
[ 1437.412174]  __sys_sendmsg+0x150/0x200
[ 1437.412204]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1437.412242]  ? __pfx_ksys_write+0x10/0x10
[ 1437.412276]  do_syscall_64+0xbf/0x390
[ 1437.412301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1437.412323] RIP: 0033:0x7fb3c308cb19
[ 1437.412340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1437.412361] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1437.412382] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1437.412396] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1437.412409] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1437.412422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1437.412435] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1437.412462]  </TASK>
11:30:35 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 6)

[ 1437.531070] FAULT_INJECTION: forcing a failure.
[ 1437.531070] name failslab, interval 1, probability 0, space 0, times 0
[ 1437.533071] CPU: 1 UID: 0 PID: 11267 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1437.533102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1437.533114] Call Trace:
[ 1437.533121]  <TASK>
[ 1437.533130]  dump_stack_lvl+0xfa/0x120
[ 1437.533171]  should_fail_ex+0x4d7/0x5e0
[ 1437.533198]  should_failslab+0xc2/0x120
[ 1437.533227]  __kmalloc_noprof+0xcd/0x680
[ 1437.533257]  ? lock_release+0xc8/0x290
[ 1437.533288]  ? io_cache_alloc_new+0x3e/0xc0
[ 1437.533317]  io_cache_alloc_new+0x3e/0xc0
[ 1437.533340]  io_rsrc_node_alloc+0x22e/0x2b0
[ 1437.533373]  io_sqe_files_register+0x2ba/0x8f0
[ 1437.533399]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1437.533432]  ? __pfx_io_sqe_files_register+0x10/0x10
[ 1437.533460]  ? trace_contention_end+0xca/0x110
[ 1437.533508]  __io_uring_register+0x1207/0x2190
[ 1437.533531]  ? __pfx___mutex_lock+0x10/0x10
[ 1437.533551]  ? __fget_files+0x203/0x3b0
[ 1437.533575]  ? __pfx___io_uring_register+0x10/0x10
[ 1437.533601]  ? __fget_files+0x20d/0x3b0
[ 1437.533632]  __x64_sys_io_uring_register+0x162/0x270
[ 1437.533659]  do_syscall_64+0xbf/0x390
[ 1437.533682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1437.533705] RIP: 0033:0x7f8bafe8cb19
[ 1437.533722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1437.533743] RSP: 002b:00007f8bad402188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1437.533765] RAX: ffffffffffffffda RBX: 00007f8baff9ff60 RCX: 00007f8bafe8cb19
[ 1437.533779] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 0000000000000003
[ 1437.533792] RBP: 00007f8bad4021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1437.533805] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1437.533818] R13: 00007ffe74b6088f R14: 00007f8bad402300 R15: 0000000000022000
[ 1437.533847]  </TASK>
[ 1437.589842] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1437.590808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1437.592042] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1437.593216] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1437.594176] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1437.595017] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1437.596027] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1439.572517] Bluetooth: hci0: command 0x0406 tx timeout
[ 1439.636509] Bluetooth: hci7: command 0x0405 tx timeout
[ 1439.637524] Bluetooth: hci6: command 0x0406 tx timeout
[ 1439.638480] Bluetooth: hci4: command 0x0406 tx timeout
[ 1439.639449] Bluetooth: hci5: command 0x0406 tx timeout
[ 1439.640340] Bluetooth: hci2: command 0x0406 tx timeout
[ 1439.641306] Bluetooth: hci1: command 0x0406 tx timeout
[ 1441.684594] Bluetooth: hci7: command 0x0405 tx timeout
11:30:44 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:44 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 4)

11:30:44 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477ce, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:44 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 7)

11:30:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4)

11:30:44 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000003a80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x5, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/183, 0xb7}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/5, 0x5}], 0x1, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/107, 0x6b}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/214, 0xd6}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/81, 0x51}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/149, 0x95}, {&(0x7f0000003980)=""/42, 0x2a}], 0x3, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x40000102, &(0x7f0000003c40)={r4, r5+10000000})
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:44 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 7)

11:30:44 executing program 0:
r0 = syz_io_uring_setup(0x530c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1446.191093] loop5: detected capacity change from 0 to 571
[ 1446.214640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1446.219457] FAULT_INJECTION: forcing a failure.
[ 1446.219457] name failslab, interval 1, probability 0, space 0, times 0
[ 1446.221433] CPU: 0 UID: 0 PID: 11295 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1446.221466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1446.221479] Call Trace:
[ 1446.221487]  <TASK>
[ 1446.221496]  dump_stack_lvl+0xfa/0x120
[ 1446.221540]  should_fail_ex+0x4d7/0x5e0
[ 1446.221583]  should_failslab+0xc2/0x120
[ 1446.221614]  __kmalloc_noprof+0xcd/0x680
[ 1446.221649]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 1446.221691]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1446.221727]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 1446.221774]  genl_family_rcv_msg_doit+0xab/0x2f0
[ 1446.221813]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1446.221852]  ? trace_cap_capable+0x156/0x1b0
[ 1446.221881]  ? cap_capable+0x9c/0x240
[ 1446.221908]  ? security_capable+0x2f/0x90
[ 1446.221931]  ? ns_capable+0xe2/0x120
[ 1446.221957]  genl_rcv_msg+0x532/0x7e0
[ 1446.221983]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1446.222005]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1446.222038]  ? __pfx_nl80211_set_qos_map+0x10/0x10
[ 1446.222071]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1446.222099]  ? __lock_acquire+0x694/0x1b70
[ 1446.222135]  netlink_rcv_skb+0x147/0x430
[ 1446.222170]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1446.222194]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1446.222242]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1446.222279]  genl_rcv+0x28/0x40
[ 1446.222313]  netlink_unicast+0x5a7/0x870
[ 1446.222357]  ? __pfx_netlink_unicast+0x10/0x10
[ 1446.222404]  netlink_sendmsg+0x8a3/0xd80
[ 1446.222444]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1446.222491]  ____sys_sendmsg+0xa67/0xc20
[ 1446.222517]  ? copy_msghdr_from_user+0xfb/0x150
[ 1446.222549]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1446.222581]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1446.222614]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1446.222649]  ___sys_sendmsg+0x10f/0x1b0
[ 1446.222682]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1446.222715]  ? irqentry_exit+0x3b/0x90
[ 1446.222767]  ? __rcu_read_unlock+0xea/0x4b0
[ 1446.222804]  ? __fget_files+0x20d/0x3b0
[ 1446.222840]  __sys_sendmsg+0x150/0x200
[ 1446.222872]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1446.222914]  ? __pfx_ksys_write+0x10/0x10
[ 1446.222952]  do_syscall_64+0xbf/0x390
[ 1446.222977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.223001] RIP: 0033:0x7fb3c308cb19
[ 1446.223019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1446.223041] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1446.223063] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1446.223079] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1446.223093] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1446.223107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1446.223120] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1446.223151]  </TASK>
[ 1446.282530] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1446.284810] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1446.287552] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1446.288696] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1446.291103] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1446.292380] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1446.296524] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1446.339129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1448.276494] Bluetooth: hci0: command 0x0406 tx timeout
[ 1448.340476] Bluetooth: hci7: command 0x0405 tx timeout
[ 1448.340972] Bluetooth: hci6: command 0x0406 tx timeout
[ 1448.341451] Bluetooth: hci4: command 0x0406 tx timeout
[ 1448.341867] Bluetooth: hci5: command 0x0406 tx timeout
[ 1448.342311] Bluetooth: hci2: command 0x0406 tx timeout
[ 1448.342783] Bluetooth: hci1: command 0x0406 tx timeout
11:30:54 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72", 0x2}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:30:54 executing program 0:
r0 = syz_io_uring_setup(0x530c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 5)

11:30:54 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:30:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5)

11:30:54 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) (fail_nth: 8)

11:30:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477cf, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:30:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 8)

[ 1456.264951] loop5: detected capacity change from 0 to 571
[ 1456.291726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1456.303212] FAULT_INJECTION: forcing a failure.
[ 1456.303212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1456.304289] CPU: 0 UID: 0 PID: 11323 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1456.304307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1456.304317] Call Trace:
[ 1456.304321]  <TASK>
[ 1456.304326]  dump_stack_lvl+0xfa/0x120
[ 1456.304376]  should_fail_ex+0x4d7/0x5e0
[ 1456.304396]  _copy_to_user+0x32/0xd0
[ 1456.304410]  simple_read_from_buffer+0xe0/0x180
[ 1456.304433]  proc_fail_nth_read+0x18a/0x240
[ 1456.304450]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1456.304467]  ? security_file_permission+0x22/0x90
[ 1456.304485]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1456.304501]  vfs_read+0x1eb/0xc70
[ 1456.304519]  ? __pfx_vfs_read+0x10/0x10
[ 1456.304533]  ? lock_release+0xc8/0x290
[ 1456.304554]  ? __fget_files+0x20d/0x3b0
[ 1456.304573]  ksys_read+0x121/0x240
[ 1456.304587]  ? __pfx_ksys_read+0x10/0x10
[ 1456.304601]  ? fput+0x6a/0x100
[ 1456.304620]  do_syscall_64+0xbf/0x390
[ 1456.304635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1456.304648] RIP: 0033:0x7f8bafe3f69c
[ 1456.304658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1456.304670] RSP: 002b:00007f8bad402170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1456.304682] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bafe3f69c
[ 1456.304690] RDX: 000000000000000f RSI: 00007f8bad4021e0 RDI: 0000000000000005
[ 1456.304698] RBP: 00007f8bad4021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1456.304705] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1456.304712] R13: 00007ffe74b6088f R14: 00007f8bad402300 R15: 0000000000022000
[ 1456.304728]  </TASK>
11:30:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 9)

11:30:54 executing program 0:
r0 = syz_io_uring_setup(0x530c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1456.358435] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1456.359044] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1456.359769] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1456.360305] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1456.366696] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1456.367230] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1456.374322] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:30:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6)

[ 1456.403387] FAULT_INJECTION: forcing a failure.
[ 1456.403387] name failslab, interval 1, probability 0, space 0, times 0
[ 1456.404431] CPU: 0 UID: 0 PID: 11328 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1456.404449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1456.404456] Call Trace:
[ 1456.404460]  <TASK>
[ 1456.404464]  dump_stack_lvl+0xfa/0x120
[ 1456.404489]  should_fail_ex+0x4d7/0x5e0
[ 1456.404505]  should_failslab+0xc2/0x120
[ 1456.404521]  __kmalloc_cache_noprof+0x81/0x6b0
[ 1456.404539]  ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10
[ 1456.404554]  ? nl80211_set_qos_map+0x19a/0x730
[ 1456.404571]  ? __nla_parse+0x42/0x60
[ 1456.404585]  ? nl80211_set_qos_map+0x19a/0x730
[ 1456.404602]  nl80211_set_qos_map+0x19a/0x730
[ 1456.404622]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 1456.404644]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1456.404663]  ? trace_cap_capable+0x156/0x1b0
[ 1456.404682]  ? security_capable+0x2f/0x90
[ 1456.404694]  ? ns_capable+0xe2/0x120
[ 1456.404708]  genl_rcv_msg+0x532/0x7e0
[ 1456.404720]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1456.404732]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1456.404748]  ? __pfx_nl80211_set_qos_map+0x10/0x10
[ 1456.404765]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1456.404783]  ? __lock_acquire+0x694/0x1b70
[ 1456.404802]  netlink_rcv_skb+0x147/0x430
[ 1456.404819]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1456.404831]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1456.404855]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1456.404874]  genl_rcv+0x28/0x40
[ 1456.404891]  netlink_unicast+0x5a7/0x870
[ 1456.404911]  ? __pfx_netlink_unicast+0x10/0x10
[ 1456.404934]  netlink_sendmsg+0x8a3/0xd80
[ 1456.404954]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1456.404978]  ____sys_sendmsg+0xa67/0xc20
[ 1456.404991]  ? copy_msghdr_from_user+0xfb/0x150
[ 1456.405008]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1456.405024]  ? lock_acquire+0x15e/0x2f0
[ 1456.405042]  ___sys_sendmsg+0x10f/0x1b0
[ 1456.405058]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1456.405077]  ? proc_fail_nth_write+0x97/0x220
[ 1456.405096]  ? lock_acquire+0x15e/0x2f0
[ 1456.405111]  ? __fget_files+0x34/0x3b0
[ 1456.405124]  ? find_held_lock+0x2b/0x80
[ 1456.405136]  ? __fget_files+0x203/0x3b0
[ 1456.405148]  ? lock_release+0xc8/0x290
[ 1456.405166]  ? __fget_files+0x20d/0x3b0
[ 1456.405184]  __sys_sendmsg+0x150/0x200
[ 1456.405200]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1456.405221]  ? __pfx_ksys_write+0x10/0x10
[ 1456.405240]  do_syscall_64+0xbf/0x390
[ 1456.405255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1456.405268] RIP: 0033:0x7fb3c308cb19
[ 1456.405277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1456.405289] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1456.405300] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1456.405309] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1456.405315] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1456.405323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1456.405329] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1456.405349]  </TASK>
11:30:54 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:30:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 6)

11:30:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1456.473271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:30:54 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1456.510936] loop5: detected capacity change from 0 to 571
[ 1456.518993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1456.530275] FAULT_INJECTION: forcing a failure.
[ 1456.530275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1456.532072] CPU: 1 UID: 0 PID: 11333 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1456.532102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1456.532115] Call Trace:
[ 1456.532122]  <TASK>
[ 1456.532131]  dump_stack_lvl+0xfa/0x120
[ 1456.532173]  should_fail_ex+0x4d7/0x5e0
[ 1456.532200]  _copy_from_iter+0x1dc/0x1660
[ 1456.532224]  ? lock_acquire+0x15e/0x2f0
[ 1456.532255]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1456.532278]  ? find_held_lock+0x2b/0x80
[ 1456.532303]  ? __pfx__copy_from_iter+0x10/0x10
[ 1456.532323]  ? lock_release+0xc8/0x290
[ 1456.532362]  ? __virt_addr_valid+0x100/0x5d0
[ 1456.532385]  ? __check_object_size+0x57b/0x880
[ 1456.532413]  netlink_sendmsg+0x800/0xd80
[ 1456.532452]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1456.532495]  ____sys_sendmsg+0xa67/0xc20
[ 1456.532519]  ? copy_msghdr_from_user+0xfb/0x150
[ 1456.532549]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1456.532580]  ? lock_acquire+0x15e/0x2f0
[ 1456.532612]  ___sys_sendmsg+0x10f/0x1b0
[ 1456.532644]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1456.532679]  ? proc_fail_nth_write+0x97/0x220
[ 1456.532711]  ? lock_acquire+0x15e/0x2f0
[ 1456.532740]  ? __fget_files+0x34/0x3b0
[ 1456.532767]  ? find_held_lock+0x2b/0x80
[ 1456.532789]  ? __fget_files+0x203/0x3b0
[ 1456.532811]  ? lock_release+0xc8/0x290
[ 1456.532844]  ? __fget_files+0x20d/0x3b0
[ 1456.532876]  __sys_sendmsg+0x150/0x200
[ 1456.532905]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1456.532944]  ? __pfx_ksys_write+0x10/0x10
[ 1456.532979]  do_syscall_64+0xbf/0x390
[ 1456.533004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1456.533026] RIP: 0033:0x7f5676e97b19
[ 1456.533043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1456.533064] RSP: 002b:00007f567440d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1456.533085] RAX: ffffffffffffffda RBX: 00007f5676faaf60 RCX: 00007f5676e97b19
[ 1456.533100] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1456.533114] RBP: 00007f567440d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1456.533128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1456.533141] R13: 00007ffc314b3d6f R14: 00007f567440d300 R15: 0000000000022000
[ 1456.533169]  </TASK>
11:30:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 10)

[ 1456.615665] FAULT_INJECTION: forcing a failure.
[ 1456.615665] name failslab, interval 1, probability 0, space 0, times 0
[ 1456.617517] CPU: 1 UID: 0 PID: 11341 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1456.617567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1456.617586] Call Trace:
[ 1456.617594]  <TASK>
[ 1456.617602]  dump_stack_lvl+0xfa/0x120
[ 1456.617654]  should_fail_ex+0x4d7/0x5e0
[ 1456.617681]  should_failslab+0xc2/0x120
[ 1456.617713]  __kmalloc_cache_noprof+0x81/0x6b0
[ 1456.617749]  ? __hci_conn_add+0x139/0x1cf0
[ 1456.617772]  ? ida_alloc_range+0x61a/0x880
[ 1456.617798]  ? __hci_conn_add+0x139/0x1cf0
[ 1456.617820]  __hci_conn_add+0x139/0x1cf0
[ 1456.617850]  ? __pfx___hci_conn_add+0x10/0x10
[ 1456.617872]  ? find_held_lock+0x2b/0x80
[ 1456.617895]  ? hci_connect_acl+0x29d/0x6d0
[ 1456.617922]  ? lock_release+0xc8/0x290
[ 1456.617956]  hci_connect_acl+0x2f8/0x6d0
[ 1456.617988]  l2cap_chan_connect+0x605/0x1ec0
[ 1456.618018]  ? __local_bh_enable_ip+0xa1/0x110
[ 1456.618048]  l2cap_sock_connect+0x3f0/0x720
[ 1456.618076]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 1456.618104]  ? selinux_netlbl_socket_connect+0x32/0x40
[ 1456.618139]  ? __local_bh_enable_ip+0xa1/0x110
[ 1456.618166]  ? selinux_socket_connect+0x71/0x90
[ 1456.618204]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 1456.618230]  __sys_connect_file+0x14b/0x1b0
[ 1456.618260]  __sys_connect+0x161/0x1a0
[ 1456.618286]  ? __pfx___sys_connect+0x10/0x10
[ 1456.618317]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1456.618354]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1456.618384]  ? ksys_write+0x1a3/0x240
[ 1456.618409]  ? __pfx_ksys_write+0x10/0x10
[ 1456.618440]  __x64_sys_connect+0x73/0xb0
[ 1456.618467]  do_syscall_64+0xbf/0x390
[ 1456.618492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1456.618514] RIP: 0033:0x7f95f001eb19
[ 1456.618531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1456.618551] RSP: 002b:00007f95ed594188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1456.618573] RAX: ffffffffffffffda RBX: 00007f95f0131f60 RCX: 00007f95f001eb19
[ 1456.618587] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004
[ 1456.618601] RBP: 00007f95ed5941d0 R08: 0000000000000000 R09: 0000000000000000
[ 1456.618614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1456.618627] R13: 00007ffe3407148f R14: 00007f95ed594300 R15: 0000000000022000
[ 1456.618656]  </TASK>
[ 1456.684103] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1456.687944] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1456.694991] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1456.697041] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1456.699155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1456.705834] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1456.709006] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1456.711984] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1458.708529] Bluetooth: hci6: command 0x0406 tx timeout
[ 1458.709591] Bluetooth: hci4: command 0x0406 tx timeout
[ 1458.710587] Bluetooth: hci5: command 0x0406 tx timeout
[ 1458.711560] Bluetooth: hci2: command 0x0406 tx timeout
[ 1458.712532] Bluetooth: hci1: command 0x0406 tx timeout
[ 1458.713508] Bluetooth: hci0: command 0x0406 tx timeout
[ 1458.772475] Bluetooth: hci7: command 0x0405 tx timeout
11:31:03 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:03 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72", 0x2}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 11)

11:31:03 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:03 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d1, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:03 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x3, &(0x7f0000000040)=[r1], 0x1)

11:31:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7)

11:31:03 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 7)

[ 1465.718299] FAULT_INJECTION: forcing a failure.
[ 1465.718299] name failslab, interval 1, probability 0, space 0, times 0
[ 1465.719979] CPU: 1 UID: 0 PID: 11361 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1465.720005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1465.720016] Call Trace:
[ 1465.720022]  <TASK>
[ 1465.720029]  dump_stack_lvl+0xfa/0x120
[ 1465.720067]  should_fail_ex+0x4d7/0x5e0
[ 1465.720090]  should_failslab+0xc2/0x120
[ 1465.720119]  __kmalloc_noprof+0xcd/0x680
[ 1465.720148]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 1465.720182]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1465.720212]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 1465.720250]  genl_family_rcv_msg_doit+0xab/0x2f0
[ 1465.720281]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1465.720312]  ? trace_cap_capable+0x156/0x1b0
[ 1465.720336]  ? cap_capable+0x9c/0x240
[ 1465.720365]  ? security_capable+0x2f/0x90
[ 1465.720384]  ? ns_capable+0xe2/0x120
[ 1465.720405]  genl_rcv_msg+0x532/0x7e0
[ 1465.720426]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1465.720444]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1465.720472]  ? __pfx_nl80211_set_qos_map+0x10/0x10
[ 1465.720499]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1465.720522]  ? __lock_acquire+0x694/0x1b70
[ 1465.720552]  netlink_rcv_skb+0x147/0x430
[ 1465.720581]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1465.720600]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1465.720638]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1465.720669]  genl_rcv+0x28/0x40
[ 1465.720695]  netlink_unicast+0x5a7/0x870
[ 1465.720727]  ? __pfx_netlink_unicast+0x10/0x10
[ 1465.720764]  netlink_sendmsg+0x8a3/0xd80
[ 1465.720796]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1465.720833]  ____sys_sendmsg+0xa67/0xc20
[ 1465.720855]  ? copy_msghdr_from_user+0xfb/0x150
[ 1465.720882]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1465.720908]  ? lock_acquire+0x15e/0x2f0
[ 1465.720936]  ___sys_sendmsg+0x10f/0x1b0
[ 1465.720963]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1465.720993]  ? proc_fail_nth_write+0x97/0x220
[ 1465.721021]  ? lock_acquire+0x15e/0x2f0
[ 1465.721046]  ? __fget_files+0x34/0x3b0
[ 1465.721068]  ? find_held_lock+0x2b/0x80
[ 1465.721091]  ? __fget_files+0x203/0x3b0
[ 1465.721110]  ? lock_release+0xc8/0x290
[ 1465.721138]  ? __fget_files+0x20d/0x3b0
[ 1465.721166]  __sys_sendmsg+0x150/0x200
[ 1465.721192]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1465.721226]  ? __pfx_ksys_write+0x10/0x10
[ 1465.721256]  do_syscall_64+0xbf/0x390
[ 1465.721278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.721297] RIP: 0033:0x7f5676e97b19
[ 1465.721312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1465.721330] RSP: 002b:00007f567440d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1465.721348] RAX: ffffffffffffffda RBX: 00007f5676faaf60 RCX: 00007f5676e97b19
[ 1465.721361] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1465.721372] RBP: 00007f567440d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1465.721384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1465.721394] R13: 00007ffc314b3d6f R14: 00007f567440d300 R15: 0000000000022000
[ 1465.721420]  </TASK>
[ 1465.757598] FAULT_INJECTION: forcing a failure.
[ 1465.757598] name failslab, interval 1, probability 0, space 0, times 0
[ 1465.758972] CPU: 1 UID: 0 PID: 11365 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1465.758996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1465.759006] Call Trace:
[ 1465.759012]  <TASK>
[ 1465.759019]  dump_stack_lvl+0xfa/0x120
[ 1465.759050]  should_fail_ex+0x4d7/0x5e0
[ 1465.759071]  should_failslab+0xc2/0x120
[ 1465.759095]  __kmalloc_cache_noprof+0x81/0x6b0
[ 1465.759123]  ? trace_kmalloc+0x1f/0xb0
[ 1465.759144]  ? ieee80211_set_qos_map+0x58/0x240
[ 1465.759175]  ? ieee80211_set_qos_map+0x58/0x240
[ 1465.759199]  ieee80211_set_qos_map+0x58/0x240
[ 1465.759225]  nl80211_set_qos_map+0x3a4/0x730
[ 1465.759257]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 1465.759289]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1465.759319]  ? trace_cap_capable+0x156/0x1b0
[ 1465.759351]  ? security_capable+0x2f/0x90
[ 1465.759370]  ? ns_capable+0xe2/0x120
[ 1465.759389]  genl_rcv_msg+0x532/0x7e0
[ 1465.759410]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1465.759428]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1465.759452]  ? __pfx_nl80211_set_qos_map+0x10/0x10
[ 1465.759478]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1465.759500]  ? __lock_acquire+0x694/0x1b70
[ 1465.759527]  netlink_rcv_skb+0x147/0x430
[ 1465.759555]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1465.759574]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1465.759612]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1465.759641]  genl_rcv+0x28/0x40
[ 1465.759667]  netlink_unicast+0x5a7/0x870
[ 1465.759698]  ? __pfx_netlink_unicast+0x10/0x10
[ 1465.759735]  netlink_sendmsg+0x8a3/0xd80
[ 1465.759766]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1465.759804]  ____sys_sendmsg+0xa67/0xc20
[ 1465.759823]  ? copy_msghdr_from_user+0xfb/0x150
[ 1465.759848]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1465.759874]  ? lock_acquire+0x15e/0x2f0
[ 1465.759902]  ___sys_sendmsg+0x10f/0x1b0
[ 1465.759928]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1465.759958]  ? proc_fail_nth_write+0x97/0x220
[ 1465.759984]  ? lock_acquire+0x15e/0x2f0
[ 1465.760008]  ? __fget_files+0x34/0x3b0
[ 1465.760027]  ? find_held_lock+0x2b/0x80
[ 1465.760046]  ? __fget_files+0x203/0x3b0
[ 1465.760065]  ? lock_release+0xc8/0x290
[ 1465.760093]  ? __fget_files+0x20d/0x3b0
[ 1465.760121]  __sys_sendmsg+0x150/0x200
[ 1465.760150]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1465.760183]  ? __pfx_ksys_write+0x10/0x10
[ 1465.760212]  do_syscall_64+0xbf/0x390
[ 1465.760232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.760250] RIP: 0033:0x7fb3c308cb19
[ 1465.760264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1465.760281] RSP: 002b:00007fb3c0602188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1465.760298] RAX: ffffffffffffffda RBX: 00007fb3c319ff60 RCX: 00007fb3c308cb19
[ 1465.760311] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 1465.760322] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1465.760333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1465.760344] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1465.760369]  </TASK>
[ 1465.810923] loop5: detected capacity change from 0 to 571
11:31:04 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:04 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x4, &(0x7f0000000040)=[r1], 0x1)

11:31:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8)

[ 1465.869814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1465.876853] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1465.877698] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1465.878719] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1465.879593] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1465.880920] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1465.882660] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1465.884634] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9)

11:31:04 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 8)

11:31:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 12)

11:31:04 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:04 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1466.017013] FAULT_INJECTION: forcing a failure.
[ 1466.017013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1466.018328] CPU: 1 UID: 0 PID: 11381 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1466.018354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1466.018364] Call Trace:
[ 1466.018369]  <TASK>
[ 1466.018375]  dump_stack_lvl+0xfa/0x120
[ 1466.018407]  should_fail_ex+0x4d7/0x5e0
[ 1466.018426]  _copy_to_user+0x32/0xd0
[ 1466.018444]  simple_read_from_buffer+0xe0/0x180
[ 1466.018473]  proc_fail_nth_read+0x18a/0x240
[ 1466.018495]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1466.018515]  ? security_file_permission+0x22/0x90
[ 1466.018537]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1466.018557]  vfs_read+0x1eb/0xc70
[ 1466.018578]  ? __pfx_vfs_read+0x10/0x10
[ 1466.018596]  ? lock_release+0xc8/0x290
[ 1466.018621]  ? __fget_files+0x20d/0x3b0
[ 1466.018645]  ksys_read+0x121/0x240
[ 1466.018662]  ? __pfx_ksys_read+0x10/0x10
[ 1466.018685]  do_syscall_64+0xbf/0x390
[ 1466.018704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.018720] RIP: 0033:0x7f5676e4a69c
[ 1466.018732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1466.018747] RSP: 002b:00007f567440d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1466.018762] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f5676e4a69c
[ 1466.018773] RDX: 000000000000000f RSI: 00007f567440d1e0 RDI: 0000000000000005
[ 1466.018783] RBP: 00007f567440d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1466.018792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1466.018802] R13: 00007ffc314b3d6f R14: 00007f567440d300 R15: 0000000000022000
[ 1466.018823]  </TASK>
[ 1466.049605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1466.050756] FAULT_INJECTION: forcing a failure.
[ 1466.050756] name failslab, interval 1, probability 0, space 0, times 0
[ 1466.052059] CPU: 1 UID: 0 PID: 11384 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1466.052080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1466.052089] Call Trace:
[ 1466.052094]  <TASK>
[ 1466.052100]  dump_stack_lvl+0xfa/0x120
[ 1466.052130]  should_fail_ex+0x4d7/0x5e0
[ 1466.052149]  should_failslab+0xc2/0x120
[ 1466.052170]  __kmalloc_cache_noprof+0x81/0x6b0
[ 1466.052193]  ? lockdep_init_map_type+0x4b/0x240
[ 1466.052217]  ? l2cap_conn_add.part.0+0x64/0xa50
[ 1466.052238]  ? __raw_spin_lock_init+0x3a/0x110
[ 1466.052264]  ? l2cap_conn_add.part.0+0x64/0xa50
[ 1466.052284]  l2cap_conn_add.part.0+0x64/0xa50
[ 1466.052307]  l2cap_chan_connect+0x123e/0x1ec0
[ 1466.052327]  ? __local_bh_enable_ip+0xa1/0x110
[ 1466.052353]  l2cap_sock_connect+0x3f0/0x720
[ 1466.052373]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 1466.052392]  ? selinux_netlbl_socket_connect+0x32/0x40
[ 1466.052417]  ? __local_bh_enable_ip+0xa1/0x110
[ 1466.052435]  ? selinux_socket_connect+0x71/0x90
[ 1466.052462]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 1466.052480]  __sys_connect_file+0x14b/0x1b0
[ 1466.052502]  __sys_connect+0x161/0x1a0
[ 1466.052520]  ? __pfx___sys_connect+0x10/0x10
[ 1466.052542]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1466.052563]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1466.052584]  ? ksys_write+0x1a3/0x240
[ 1466.052603]  ? __pfx_ksys_write+0x10/0x10
[ 1466.052625]  __x64_sys_connect+0x73/0xb0
[ 1466.052644]  do_syscall_64+0xbf/0x390
[ 1466.052662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.052678] RIP: 0033:0x7f95f001eb19
[ 1466.052689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1466.052704] RSP: 002b:00007f95ed594188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1466.052719] RAX: ffffffffffffffda RBX: 00007f95f0131f60 RCX: 00007f95f001eb19
[ 1466.052729] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004
[ 1466.052738] RBP: 00007f95ed5941d0 R08: 0000000000000000 R09: 0000000000000000
[ 1466.052747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1466.052756] R13: 00007ffe3407148f R14: 00007f95ed594300 R15: 0000000000022000
[ 1466.052776]  </TASK>
11:31:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1466.143968] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1466.145472] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1466.146176] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1466.157566] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1466.158311] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1466.161608] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1466.163071] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1466.212958] loop5: detected capacity change from 0 to 571
[ 1466.233889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1466.323047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1468.116486] Bluetooth: hci0: command 0x0406 tx timeout
[ 1468.180512] Bluetooth: hci6: command 0x0406 tx timeout
[ 1468.180578] Bluetooth: hci4: command 0x0406 tx timeout
[ 1468.181886] Bluetooth: hci5: command 0x0406 tx timeout
[ 1468.182683] Bluetooth: hci2: command 0x0406 tx timeout
[ 1468.182728] Bluetooth: hci1: command 0x0406 tx timeout
[ 1468.184282] Bluetooth: hci7: command 0x0405 tx timeout
[ 1470.228424] Bluetooth: hci7: command 0x0405 tx timeout
11:31:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:14 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:14 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72", 0x2}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 9)

11:31:14 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:14 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000040)=[r1], 0x1)

11:31:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0) (fail_nth: 13)

[ 1476.679173] loop5: detected capacity change from 0 to 571
[ 1476.686018] FAULT_INJECTION: forcing a failure.
[ 1476.686018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1476.687232] CPU: 0 UID: 0 PID: 11413 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1476.687253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1476.687262] Call Trace:
[ 1476.687268]  <TASK>
[ 1476.687273]  dump_stack_lvl+0xfa/0x120
[ 1476.687303]  should_fail_ex+0x4d7/0x5e0
[ 1476.687321]  _copy_to_user+0x32/0xd0
[ 1476.687338]  simple_read_from_buffer+0xe0/0x180
[ 1476.687369]  proc_fail_nth_read+0x18a/0x240
[ 1476.687388]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1476.687407]  ? security_file_permission+0x22/0x90
[ 1476.687427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1476.687445]  vfs_read+0x1eb/0xc70
[ 1476.687465]  ? __pfx_vfs_read+0x10/0x10
[ 1476.687482]  ? lock_release+0xc8/0x290
[ 1476.687505]  ? __fget_files+0x20d/0x3b0
[ 1476.687527]  ksys_read+0x121/0x240
[ 1476.687542]  ? __pfx_ksys_read+0x10/0x10
[ 1476.687564]  do_syscall_64+0xbf/0x390
[ 1476.687580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.687596] RIP: 0033:0x7fb3c303f69c
[ 1476.687607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1476.687621] RSP: 002b:00007fb3c0602170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1476.687635] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007fb3c303f69c
[ 1476.687645] RDX: 000000000000000f RSI: 00007fb3c06021e0 RDI: 0000000000000005
[ 1476.687653] RBP: 00007fb3c06021d0 R08: 0000000000000000 R09: 0000000000000000
[ 1476.687662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1476.687670] R13: 00007ffe0ae2c31f R14: 00007fb3c0602300 R15: 0000000000022000
[ 1476.687689]  </TASK>
[ 1476.727767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:31:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:15 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:15 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000040)=[r1], 0x1)

11:31:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:31:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1476.810533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1476.843479] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1476.844224] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1476.847718] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1476.849286] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1476.852898] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1476.856218] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1476.875959] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (fail_nth: 10)

11:31:15 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:15 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x7, &(0x7f0000000040)=[r1], 0x1)

11:31:15 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1477.142588] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1477.143335] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1477.144022] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1477.145125] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1477.146038] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1477.146977] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1477.147960] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1477.148936] FAULT_INJECTION: forcing a failure.
[ 1477.148936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1477.149999] CPU: 0 UID: 0 PID: 11441 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251020 #1 PREEMPT(voluntary) 
[ 1477.150018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1477.150026] Call Trace:
[ 1477.150030]  <TASK>
[ 1477.150035]  dump_stack_lvl+0xfa/0x120
[ 1477.150062]  should_fail_ex+0x4d7/0x5e0
[ 1477.150079]  _copy_to_user+0x32/0xd0
[ 1477.150093]  simple_read_from_buffer+0xe0/0x180
[ 1477.150116]  proc_fail_nth_read+0x18a/0x240
[ 1477.150132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1477.150148]  ? security_file_permission+0x22/0x90
[ 1477.150165]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1477.150181]  vfs_read+0x1eb/0xc70
[ 1477.150198]  ? __pfx_vfs_read+0x10/0x10
[ 1477.150212]  ? lock_release+0xc8/0x290
[ 1477.150232]  ? __fget_files+0x20d/0x3b0
[ 1477.150251]  ksys_read+0x121/0x240
[ 1477.150264]  ? __pfx_ksys_read+0x10/0x10
[ 1477.150282]  do_syscall_64+0xbf/0x390
[ 1477.150296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.150309] RIP: 0033:0x7f95effd169c
[ 1477.150319] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1477.150331] RSP: 002b:00007f95ed594170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1477.150347] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f95effd169c
[ 1477.150356] RDX: 000000000000000f RSI: 00007f95ed5941e0 RDI: 0000000000000003
[ 1477.150364] RBP: 00007f95ed5941d0 R08: 0000000000000000 R09: 0000000000000000
[ 1477.150371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1477.150378] R13: 00007ffe3407148f R14: 00007f95ed594300 R15: 0000000000022000
[ 1477.150394]  </TASK>
[ 1479.125450] Bluetooth: hci0: command 0x0406 tx timeout
[ 1479.188529] Bluetooth: hci7: command 0x0405 tx timeout
[ 1479.188619] Bluetooth: hci6: command 0x0406 tx timeout
[ 1479.189314] Bluetooth: hci4: command 0x0406 tx timeout
[ 1479.190466] Bluetooth: hci5: command 0x0406 tx timeout
[ 1479.191118] Bluetooth: hci2: command 0x0406 tx timeout
[ 1479.192146] Bluetooth: hci1: command 0x0406 tx timeout
[ 1481.236547] Bluetooth: hci7: command 0x0405 tx timeout
11:31:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:31:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:31:23 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:23 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000040)=[r1], 0x1)

11:31:23 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x477d5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:23 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af", 0x3}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

[ 1485.091374] loop5: detected capacity change from 0 to 571
[ 1485.111838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:31:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1485.155913] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1485.156628] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1485.157213] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:31:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1485.162872] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1485.163560] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1485.171524] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1485.174862] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:23 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:23 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x9, &(0x7f0000000040)=[r1], 0x1)

11:31:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48719, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1485.216318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:31:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:31:23 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:23 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000040)=[r1], 0x1)

11:31:23 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1485.364055] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1485.364792] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1485.367653] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1485.368280] Bluetooth: hci5: Opcode 0x0c1a failed: -4
11:31:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1485.373880] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1485.376564] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1485.385233] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1487.316524] Bluetooth: hci0: command 0x0406 tx timeout
[ 1487.380514] Bluetooth: hci6: command 0x0406 tx timeout
[ 1487.381474] Bluetooth: hci4: command 0x0406 tx timeout
[ 1487.382283] Bluetooth: hci5: command 0x0406 tx timeout
[ 1487.383106] Bluetooth: hci2: command 0x0406 tx timeout
[ 1487.383956] Bluetooth: hci1: command 0x0406 tx timeout
[ 1487.444473] Bluetooth: hci7: command 0x0405 tx timeout
[ 1489.492466] Bluetooth: hci7: command 0x0405 tx timeout
11:31:33 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af", 0x3}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:33 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48cff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:33 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:33 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe)

11:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:33 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:33 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xb, &(0x7f0000000040)=[r1], 0x1)

11:31:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1494.759466] loop5: detected capacity change from 0 to 582
11:31:33 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:33 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000040)=[r1], 0x1)

[ 1494.804930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1494.846677] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1494.853758] Bluetooth: hci1: Opcode 0x0c1a failed: -4
11:31:33 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1494.861526] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1494.862303] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1494.872025] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1494.872801] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1494.886035] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:33 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4a877, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1494.915910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:31:33 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1494.960003] loop5: detected capacity change from 0 to 596
[ 1494.977606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1495.028116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.788448] Bluetooth: hci0: command 0x0406 tx timeout
[ 1496.916749] Bluetooth: hci6: command 0x0406 tx timeout
[ 1496.916892] Bluetooth: hci4: command 0x0406 tx timeout
[ 1496.917764] Bluetooth: hci5: command 0x0406 tx timeout
[ 1496.918810] Bluetooth: hci2: command 0x0406 tx timeout
[ 1496.920662] Bluetooth: hci1: command 0x0406 tx timeout
[ 1496.921721] Bluetooth: hci7: command 0x0405 tx timeout
[ 1498.964472] Bluetooth: hci7: command 0x0405 tx timeout
11:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:45 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xd, &(0x7f0000000040)=[r1], 0x1)

11:31:45 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:45 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af", 0x3}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:31:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4a977, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe)

11:31:45 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1507.396102] loop5: detected capacity change from 0 to 596
[ 1507.436716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:31:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1507.455108] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1507.456872] Bluetooth: hci1: Opcode 0x0c1a failed: -4
11:31:45 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1507.463830] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1507.467252] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1507.469068] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1507.473759] Bluetooth: hci6: Opcode 0x0c1a failed: -4
11:31:45 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xe, &(0x7f0000000040)=[r1], 0x1)

11:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1507.483131] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:45 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed}, 0xe)

[ 1507.586733] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:31:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4aa77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:31:45 executing program 0:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1507.687538] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1507.692502] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1507.706534] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1507.718310] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1507.725822] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1507.737719] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1507.742270] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1507.755143] loop5: detected capacity change from 0 to 597
[ 1507.764965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1507.840029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1509.652427] Bluetooth: hci0: command 0x0406 tx timeout
[ 1509.716528] Bluetooth: hci5: command 0x0406 tx timeout
[ 1509.717423] Bluetooth: hci2: command 0x0406 tx timeout
[ 1509.717556] Bluetooth: hci1: command 0x0406 tx timeout
[ 1509.780472] Bluetooth: hci7: command 0x0405 tx timeout
[ 1509.780553] Bluetooth: hci6: command 0x0406 tx timeout
[ 1509.781491] Bluetooth: hci4: command 0x0406 tx timeout
[ 1511.828462] Bluetooth: hci7: command 0x0405 tx timeout
11:31:57 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:57 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0xf, &(0x7f0000000040)=[r1], 0x1)

11:31:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ab77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:31:57 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:57 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:31:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:31:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @fixed}, 0xe)

11:31:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:31:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2b6, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1518.868085] loop5: detected capacity change from 0 to 597
[ 1518.872257] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1518.873619] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1518.883736] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1518.894779] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1518.898998] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1518.909682] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1518.920512] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:31:57 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

[ 1518.922693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:31:57 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/244, 0xf4}, {&(0x7f0000008d40)=""/131, 0x83}, {&(0x7f0000002d40)=""/175, 0xaf}], 0x5, &(0x7f00000073c0)=""/186, 0xba}}], 0x6, 0x10000, 0x0)

11:31:57 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x10, &(0x7f0000000040)=[r1], 0x1)

11:31:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x300, @fixed}, 0xe)

[ 1519.081181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1520.852466] Bluetooth: hci0: command 0x0406 tx timeout
[ 1520.916477] Bluetooth: hci6: command 0x0406 tx timeout
[ 1520.917488] Bluetooth: hci4: command 0x0406 tx timeout
[ 1520.918522] Bluetooth: hci5: command 0x0406 tx timeout
[ 1520.919503] Bluetooth: hci2: command 0x0406 tx timeout
[ 1520.920493] Bluetooth: hci1: command 0x0406 tx timeout
[ 1520.980470] Bluetooth: hci7: command 0x0405 tx timeout
[ 1523.028574] Bluetooth: hci7: command 0x0405 tx timeout
11:32:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ac77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:32:08 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000040)=[r1], 0x1)

11:32:08 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:08 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

11:32:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:08 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1529.927015] loop5: detected capacity change from 0 to 598
11:32:08 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

[ 1529.973957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1529.989128] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1529.990242] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1529.998799] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:32:08 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000040)=[r1], 0x1)

[ 1530.011080] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1530.014805] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1530.018795] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1530.024002] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:32:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe)

[ 1530.091901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:32:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ad77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:08 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:08 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:08 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

11:32:08 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000040)=[r1], 0x1)

[ 1530.262239] loop5: detected capacity change from 0 to 598
[ 1530.289055] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1530.290514] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1530.294969] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1530.296222] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1530.296394] EXT4-fs: failed to create workqueue
[ 1530.298414] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1530.298953] EXT4-fs (loop5): mount failed
[ 1530.302848] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1530.303794] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1530.309545] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1530.421620] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1530.422650] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1530.423806] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1530.425640] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1530.426857] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1530.428151] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1530.429152] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1532.372517] Bluetooth: hci0: command 0x0406 tx timeout
[ 1532.436560] Bluetooth: hci7: command 0x0405 tx timeout
[ 1532.436711] Bluetooth: hci6: command 0x0406 tx timeout
[ 1532.437585] Bluetooth: hci4: command 0x0406 tx timeout
[ 1532.438675] Bluetooth: hci5: command 0x0406 tx timeout
[ 1532.439748] Bluetooth: hci2: command 0x0406 tx timeout
[ 1532.440335] Bluetooth: hci1: command 0x0406 tx timeout
[ 1534.484789] Bluetooth: hci7: command 0x0405 tx timeout
11:32:17 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}, {{&(0x7f0000005080)=@can, 0x80, &(0x7f0000005240)=[{&(0x7f0000005100)=""/108, 0x6c}, {&(0x7f0000005180)=""/173, 0xad}], 0x2, &(0x7f0000005280)=""/118, 0x76}}], 0x5, 0x10000, 0x0)

11:32:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2d6, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:17 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

11:32:17 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f0000000040)=[r1], 0x1)

11:32:17 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ae77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0xe)

11:32:17 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1538.779304] loop5: detected capacity change from 0 to 599
11:32:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:17 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/41, 0x29}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005000)=""/122, 0x7a}}], 0x4, 0x10000, 0x0)

11:32:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1538.845807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:32:17 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x15, &(0x7f0000000040)=[r1], 0x1)

11:32:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:17 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4af77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1539.007490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1539.077404] loop5: detected capacity change from 0 to 599
[ 1539.098885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1539.170176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1539.580560] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1539.581404] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1539.582064] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1539.582825] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1539.583807] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1539.584514] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1539.585321] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1540.758109] Bluetooth: hci0: command 0x0406 tx timeout
[ 1541.588468] Bluetooth: hci7: command 0x0405 tx timeout
[ 1541.588532] Bluetooth: hci6: command 0x0406 tx timeout
[ 1541.589527] Bluetooth: hci4: command 0x0406 tx timeout
[ 1541.590338] Bluetooth: hci5: command 0x0406 tx timeout
[ 1541.591317] Bluetooth: hci2: command 0x0406 tx timeout
[ 1541.592015] Bluetooth: hci1: command 0x0406 tx timeout
11:32:27 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000040)=[r1], 0x1)

11:32:27 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}, {{&(0x7f0000000840), 0x80, &(0x7f0000008f40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/126, 0x7e}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/87, 0x57}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, &(0x7f0000007600)=""/219, 0xdb}}], 0x3, 0x10000, 0x0)

11:32:27 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0xe)

11:32:27 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b077, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:27 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

11:32:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1549.179547] loop5: detected capacity change from 0 to 600
11:32:27 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000040)=[r1], 0x1)

11:32:27 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}], 0x2, 0x10000, 0x0)

11:32:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1549.231271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1549.239262] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1549.240290] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1549.241503] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1549.242067] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1549.242962] Bluetooth: hci4: Opcode 0x0c1a failed: -4
11:32:27 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000040)=[r1], 0x1)

[ 1549.244205] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1549.245195] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:32:27 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:32:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xb602, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1549.394173] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1551.188495] Bluetooth: hci0: command 0x0406 tx timeout
[ 1551.252489] Bluetooth: hci7: command 0x0405 tx timeout
[ 1551.253591] Bluetooth: hci6: command 0x0406 tx timeout
[ 1551.253785] Bluetooth: hci4: command 0x0406 tx timeout
[ 1551.254637] Bluetooth: hci5: command 0x0406 tx timeout
[ 1551.255424] Bluetooth: hci2: command 0x0406 tx timeout
[ 1551.256310] Bluetooth: hci1: command 0x0406 tx timeout
[ 1553.300498] Bluetooth: hci7: command 0x0405 tx timeout
11:32:37 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)

11:32:37 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000040)=[r1], 0x1)

11:32:37 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe)

11:32:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:37 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}], 0x1, 0x10000, 0x0)

11:32:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b177, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:37 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1559.653890] loop5: detected capacity change from 0 to 600
[ 1559.686431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:32:38 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}], 0x1, 0x10000, 0x0)

11:32:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b277, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1559.755783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:32:38 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}], 0x1, 0x10000, 0x0)

11:32:38 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1a, &(0x7f0000000040)=[r1], 0x1)

11:32:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b377, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1559.900085] loop5: detected capacity change from 0 to 601
[ 1559.921466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1559.952848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1560.500721] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1560.502977] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1560.505464] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1560.507938] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1560.509852] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1560.512078] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1560.513980] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1561.749700] Bluetooth: hci0: command 0x0406 tx timeout
[ 1562.516503] Bluetooth: hci2: command 0x0406 tx timeout
[ 1562.516532] Bluetooth: hci1: command 0x0406 tx timeout
[ 1562.516576] Bluetooth: hci7: command 0x0405 tx timeout
[ 1562.517628] Bluetooth: hci6: command 0x0406 tx timeout
[ 1562.518165] Bluetooth: hci4: command 0x0406 tx timeout
[ 1562.519148] Bluetooth: hci5: command 0x0406 tx timeout
11:32:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/55, 0x37}], 0x3, &(0x7f00000007c0)=""/125, 0x7d}}], 0x2, 0x10000, 0x0)

11:32:47 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000040)=[r1], 0x1)

11:32:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:47 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe)

11:32:47 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b477, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xd602, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1568.889223] loop5: detected capacity change from 0 to 602
[ 1568.920293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1568.930859] Bluetooth: hci0: Opcode 0x0c1a failed: -4
11:32:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/125, 0x7d}}], 0x2, 0x10000, 0x0)

[ 1568.937556] Bluetooth: hci1: Opcode 0x0c1a failed: -4
11:32:47 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, &(0x7f0000000040)=[r1], 0x1)

11:32:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1568.940024] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1568.944906] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1568.950846] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1568.953788] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1568.957838] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:32:47 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b577, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1569.033959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:32:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x4}, 0xe)

11:32:47 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:47 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

11:32:47 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1d, &(0x7f0000000040)=[r1], 0x1)

[ 1569.118035] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1569.121508] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1569.134838] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1569.141995] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1569.150963] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1569.154761] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1569.162870] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1571.092513] Bluetooth: hci0: command 0x0406 tx timeout
[ 1571.156451] Bluetooth: hci6: command 0x0406 tx timeout
[ 1571.156939] Bluetooth: hci4: command 0x0406 tx timeout
[ 1571.157395] Bluetooth: hci5: command 0x0406 tx timeout
[ 1571.157904] Bluetooth: hci2: command 0x0406 tx timeout
[ 1571.158498] Bluetooth: hci1: command 0x0406 tx timeout
[ 1571.220415] Bluetooth: hci7: command 0x0405 tx timeout
[ 1573.268590] Bluetooth: hci7: command 0x0405 tx timeout
11:32:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:56 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b677, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:56 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0)

11:32:56 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000040)=[r1], 0x1)

11:32:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x8}, 0xe)

11:32:56 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
clock_gettime(0x5, &(0x7f0000000440))
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:56 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:32:56 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0)

[ 1578.482975] loop5: detected capacity change from 0 to 603
[ 1578.533914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:32:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:32:56 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x21, &(0x7f0000000040)=[r1], 0x1)

[ 1578.569545] Bluetooth: hci0: Opcode 0x0c1a failed: -4
11:32:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1578.586971] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1578.593832] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1578.600518] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1578.616300] Bluetooth: hci4: Opcode 0x0c1a failed: -4
11:32:56 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0)

[ 1578.631528] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1578.641683] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1578.712327] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:32:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b777, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:32:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x300}, 0xe)

11:32:57 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:57 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:32:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1578.926719] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1578.928979] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1578.936105] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1578.940972] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1578.946741] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1578.957820] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1578.961534] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1580.884524] Bluetooth: hci0: command 0x0406 tx timeout
[ 1580.948490] Bluetooth: hci4: command 0x0406 tx timeout
[ 1580.949517] Bluetooth: hci5: command 0x0406 tx timeout
[ 1580.949559] Bluetooth: hci2: command 0x0406 tx timeout
[ 1580.950510] Bluetooth: hci1: command 0x0406 tx timeout
[ 1581.012460] Bluetooth: hci6: command 0x0406 tx timeout
11:33:07 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f00000018c0)=""/102, 0x66}], 0x6, &(0x7f0000000580)=""/119, 0x77}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

11:33:07 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:07 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b877, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:33:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:33:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:33:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:07 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x22, &(0x7f0000000040)=[r1], 0x1)

[ 1589.372898] loop5: detected capacity change from 0 to 604
[ 1589.401284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:33:07 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/119, 0x77}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

[ 1589.466935] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1589.467922] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1589.470676] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1589.471933] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1589.474109] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1589.475239] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1589.478764] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:33:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe)

11:33:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b977, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1589.570070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:33:07 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x23, &(0x7f0000000040)=[r1], 0x1)

11:33:07 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1589.667883] loop5: detected capacity change from 0 to 604
[ 1589.685865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1589.699309] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1589.699951] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1589.701262] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1589.708562] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1589.709137] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1589.713622] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1589.714990] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1589.753699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1591.700453] Bluetooth: hci0: command 0x0406 tx timeout
[ 1591.764501] Bluetooth: hci4: command 0x0406 tx timeout
[ 1591.764531] Bluetooth: hci7: command 0x0405 tx timeout
[ 1591.765015] Bluetooth: hci5: command 0x0406 tx timeout
[ 1591.766072] Bluetooth: hci6: command 0x0406 tx timeout
[ 1591.767558] Bluetooth: hci2: command 0x0406 tx timeout
[ 1591.768384] Bluetooth: hci1: command 0x0406 tx timeout
[ 1593.812508] Bluetooth: hci7: command 0x0405 tx timeout
[ 1595.860446] Bluetooth: hci7: command 0x0405 tx timeout
11:33:16 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:33:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe)

11:33:16 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

11:33:16 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:16 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x24, &(0x7f0000000040)=[r1], 0x1)

11:33:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ba77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1598.280547] loop5: detected capacity change from 0 to 605
11:33:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x4}, 0xe)

11:33:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1598.342179] Bluetooth: hci0: Opcode 0x0c1a failed: -4
11:33:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1598.351663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1598.356216] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1598.356913] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1598.357710] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1598.358316] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1598.359012] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1598.359836] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:33:16 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:16 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x2)

11:33:16 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

11:33:16 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1598.538221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1598.571458] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1598.572113] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1598.572921] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1598.574641] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1598.576200] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1598.577789] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1598.580576] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1598.630677] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1598.631926] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1598.633432] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1598.634765] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1598.636145] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1598.637697] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1598.639106] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1600.596448] Bluetooth: hci0: command 0x0406 tx timeout
[ 1600.662852] Bluetooth: hci7: command 0x0405 tx timeout
[ 1600.663990] Bluetooth: hci6: command 0x0406 tx timeout
[ 1600.665091] Bluetooth: hci4: command 0x0406 tx timeout
[ 1600.666163] Bluetooth: hci5: command 0x0406 tx timeout
[ 1600.667249] Bluetooth: hci2: command 0x0406 tx timeout
[ 1600.667278] Bluetooth: hci1: command 0x0406 tx timeout
11:33:26 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

11:33:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:26 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r3, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:26 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:33:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4bb77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:33:26 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x100000)

11:33:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:33:26 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:33:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1608.128122] loop5: detected capacity change from 0 to 605
11:33:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xb6020000, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[ 1608.148624] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1608.149479] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1608.150040] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1608.151838] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1608.152425] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1608.157011] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1608.161283] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:33:26 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r3], 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x404400, 0x1b2e7}, 0x3)

[ 1608.193604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:33:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:26 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:26 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

11:33:26 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 1608.319111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1608.362711] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1608.367142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1608.370444] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1608.372437] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1608.374719] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1608.376016] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1608.378474] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1610.324518] Bluetooth: hci0: command 0x0406 tx timeout
[ 1610.390437] Bluetooth: hci6: command 0x0406 tx timeout
[ 1610.391300] Bluetooth: hci4: command 0x0406 tx timeout
[ 1610.391457] Bluetooth: hci5: command 0x0406 tx timeout
[ 1610.392150] Bluetooth: hci2: command 0x0406 tx timeout
[ 1610.393075] Bluetooth: hci1: command 0x0406 tx timeout
11:33:36 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

11:33:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:33:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:36 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:36 executing program 6:
r0 = syz_io_uring_setup(0x5390, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4004}, {r1, 0xa603}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x5b15]}, 0x8)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000400)={{0x10b, 0xff, 0x3, 0x3e0, 0x2f5, 0x6, 0x220, 0xffffff61}, "2eab7e2df1c26db016785fa51c14df90bbf6861b58af322576703bf6b119fc599a3410a7bff1a104cbca799176ba648071e457310b9d9540158c13a726c5419ba95000f90cd532c339a5171febfc4f35bd", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x571)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)
io_uring_setup(0x3eac, &(0x7f0000000200)={0x0, 0xcf30, 0x896f749282f180af, 0x0, 0x176, 0x0, r0})

11:33:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4bc77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

11:33:36 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xffff}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

[ 1617.903650] loop5: detected capacity change from 0 to 606
[ 1617.923365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:33:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1617.975950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1617.979115] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1617.979862] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1617.980508] Bluetooth: hci2: Opcode 0x0c1a failed: -4
11:33:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4bd77, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[])
fspick(0xffffffffffffff9c, 0x0, 0x0)

[ 1617.985666] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1617.986876] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1617.988923] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1617.993925] Bluetooth: hci7: Opcode 0x0c1a failed: -4
11:33:36 executing program 6:
r0 = syz_io_uring_setup(0x538d, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)

11:33:36 executing program 0:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000000)=""/230, 0xe6)
getdents64(r1, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

11:33:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

11:33:36 executing program 7:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/230, 0xe6)
getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/99, 0x63)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r2, &(0x7f0000000000)=""/230, 0xe6)
clock_gettime(0x5, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11:33:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "621600e2c66ebcbb"}}]}, 0x30}}, 0x0)

[ 1618.186208] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1618.189131] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1618.189727] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1618.193534] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1618.194092] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1618.200986] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1620.180551] Bluetooth: hci0: command 0x0406 tx timeout
[ 1620.244477] Bluetooth: hci7: command 0x0405 tx timeout
[ 1620.245309] Bluetooth: hci6: command 0x0406 tx timeout
[ 1620.246088] Bluetooth: hci5: command 0x0406 tx timeout
[ 1620.246169] Bluetooth: hci2: command 0x0406 tx timeout
[ 1620.246941] Bluetooth: hci1: command 0x0406 tx timeout
[ 1620.703520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1620.705610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1620.708651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1620.715812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1620.718240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1622.293436] Bluetooth: hci7: command 0x0405 tx timeout
[ 1622.740452] Bluetooth: hci4: command tx timeout
[ 1624.340534] Bluetooth: hci7: command 0x0405 tx timeout
[ 1624.788427] Bluetooth: hci4: command tx timeout
[ 1626.388431] Bluetooth: hci7: command 0x0405 tx timeout
[ 1626.836428] Bluetooth: hci4: command tx timeout
[ 1628.885437] Bluetooth: hci4: command tx timeout
[ 1635.565795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1635.567264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1635.628286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1635.629765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1645.328199] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff88800d330800 (size 128):
  comm "syz-executor.3", pid 11289, jiffies 4296113123
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc f1da05aa):
    __kmalloc_cache_noprof+0x445/0x6b0
    ida_alloc_range+0x737/0x880
    hci_connect_acl+0x2c7/0x6d0
    l2cap_chan_connect+0x605/0x1ec0
    l2cap_sock_connect+0x3f0/0x720
    __sys_connect_file+0x14b/0x1b0
    __sys_connect+0x161/0x1a0
    __x64_sys_connect+0x73/0xb0
    do_syscall_64+0xbf/0x390
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: leak checking failed

VM DIAGNOSIS:
11:34:08  Registers:
info registers vcpu 0
RAX=000000000075dda7 RBX=0000000000000000 RCX=ffffffff84c47bd7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814cbdd0 RBP=dffffc0000000000 RSP=ffffffff85c07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff86645550 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84c468ce RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e53f9000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdfb429ff8 CR3=000000001fd3b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000005000000050000000200000000
XMM02=746e696820636578650a0a0100010101 XMM03=650d00736465657320636578650a0073
XMM04=78651100657a696d696e696d20636578 XMM05=00737472617473657220726f74756365
XMM06=206365786509006e6567206365786508 XMM07=69646e616320636578650e007a7a7566
XMM08=65657320636578650a0073746e696820 XMM09=7a696d696e696d20636578650d007364
XMM10=7473657220726f747563657865110065 XMM11=09006e65672063657865080073747261
XMM12=20636578650e007a7a75662063657865 XMM13=20636578650b006574616469646e6163
XMM14=616d7320636578650a00656761697274 XMM15=00006c61746f7420636578650a006873
info registers vcpu 1
RAX=000000000091b253 RBX=0000000000000001 RCX=ffffffff84c47bd7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814cbdd0 RBP=dffffc0000000000 RSP=ffff8880096efe58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff86645550 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84c468ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e54f9000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6285243d68 CR3=000000001fc5c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2938323120657a697328203030383033 XMM03=3120646970202c22332e726f74756365
XMM04=202020200a2e2e2e2e2e2e2e2e2e2e2e XMM05=30302030302030302030302030302030
XMM06=203030203030202020200a3a29736574 XMM07=642078656820200a3332313331313639
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000