0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r2, 0x1, 0x31, 0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r3, 0x1, 0x31, 0x0, &(0x7f0000000140)) write$binfmt_aout(r3, &(0x7f0000001500)=ANY=[@ANYBLOB="cc00010889010000470200000920000015030000b84200000000000000000000add0906c06ba571e983a7362ad294e2064748bd19653ad3fa6f4160f95798d55e3568dd1904ab9e74faed9e454b4eb6c9dc3ee0d4e506acaa8"], 0x59) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r4], 0x1, {r0}}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r5) 03:34:07 executing program 5: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 03:34:07 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xfffeffff, 0x4) 03:34:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x0, 0x0, 0x0) 03:34:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) 03:34:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="c484a026d325f724803a5ccbd9735b951f025176ed9b00fe93ed0c4015e21d8c0e2573e593cbbb3f248185471b4a418ed91305a47f968098780c13895833f9ab8d6d3bc8cdba8781b662ee7de9242f418f4a2a2faa90f42019082f0024cbcd0af68c2d04e7c84da0a63d2a9c064590b073a4976d5cbd32e12f93d90bc089a50aad6a8560f8e57c5a91a06d6480f030b1eac6667531748690fcb25dbeee3fe94aee3d3e163bd4343b2ff1c73783f78ef48e", 0xb1}, {&(0x7f0000000140)="9c6c5dd5ca6ca434b1770299a97192eae2f69326fbc4478a4dbfe03ab1835eb1ad8a573645c74f7f0c29ea953621242a5c10235cf3b927b8201db43573eb862075e0af2f9b1393a9c55a9e451b179a4468a42b655767db88d0220e2a4ac99d123ff439167d90e6daa28730e8e508a265ee9dd874a596a6da91f5713502ec8f07dd55e88397bb3f82faee392b9a59ad671b0c7768a9a4099ab2ef823c8ff54e9ec0e5714828d1116d249d6d8ce42f7fad0c966326fa286c6429e1cd0afce0df4a", 0xc0}, {&(0x7f0000000200)="5d8b22f2a020fbab2af0a759a968ae564623e52096479c2b5d598f4fd45720f15465fbe33a87099e70cc06ca64561cacf1fc7afd254bc3f0343de3fd7e3443a5b399e1f203006276324d4921fb5a59b632d262fe03634d497d79528d44abe5d2afa372fbe8bb2ab12db73814ef8529bc2383feff00bf1de44ab1b8fec5b34f950c83886d5561e6d81cd5ecea9f2589cc", 0x90}, {&(0x7f00000002c0)="71c1c9ca5bb4b25233f3900dc6398bf99b4dcd0a485070c762d31e9ac73946702ffdf46c3c8129c2e83f33721d36dd8d999dac98127ea7d04872c0963c8d32abbfcc8cd449e9c81a593d06a6e08478b4bbd569baa046c1301c22c4b80af182859deae17f328d8f35a56c480c95f61306688246466edc2f70c673155702b4df106a0dea6289853ef64cd940e847ce52366e78c94047b8cb94571d8edfa1a7b75478cc5fb64a2ebbf73574f44a3cc6f92b7b21f119cde6c16ae7e44781e34cf1c47ef8499013", 0xc5}, {&(0x7f00000003c0)="b67db88d3be6c6ac6ebe8c0858f6e8ffb3852a2840644f10d77bd8ecdc9cf41dad46640cbab8d6e1bdee40a868d387f0cf399ae88bc5fe4ac0f04df0da6745b0ac860b835f9795f0fa2238cc640525443c16e92433c1fed383e80cad45fad4ce790f5d75d00c0095ef3c27de0273a24eed455056cf11f00546b9ba61ce866a2ef0bd5370c5d7a0c65584272a196401625fc2e2310c37eb543d8bf777e4ea0f5e435b16fecf8782685f407212671896319b940921813a8cbae1f977b77c70c9bf77a3c9fdda99701e9364fc238d24deeb5e67e5b851f0735cd120674b7dd7ae19321802ff", 0xe4}, {&(0x7f00000004c0)="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", 0x7b3}], 0x6}}], 0x1, 0x0) 03:34:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:34:07 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x43) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) fcntl$setstatus(r0, 0x4, 0x6000) write$P9_RLINK(r1, &(0x7f0000000200)={0x7}, 0x7) 03:34:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xff) 03:34:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 03:34:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xbe, &(0x7f0000000300)=""/190}, &(0x7f00000003c0)="7e72227ff447", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:08 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 03:34:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x13, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 03:34:08 executing program 6: set_mempolicy(0x1, &(0x7f0000000080)=0x200000000008, 0x531) 03:34:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 03:34:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 364.239216] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 364.254159] mac80211_hwsim hwsim10 wlan1: left promiscuous mode 03:34:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 03:34:08 executing program 1: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) 03:34:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, @local, 0x0, 0x9}) 03:34:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) 03:34:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b3b, &(0x7f0000000080)={0x0, 0x0}) 03:34:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r2, 0x1, 0x31, 0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r3, 0x1, 0x31, 0x0, &(0x7f0000000140)) write$binfmt_aout(r3, &(0x7f0000001500)=ANY=[@ANYBLOB="cc00010889010000470200000920000015030000b84200000000000000000000add0906c06ba571e983a7362ad294e2064748bd19653ad3fa6f4160f95798d55e3568dd1904ab9e74faed9e454b4eb6c9dc3ee0d4e506acaa8"], 0x59) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r4], 0x1, {r0}}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r5) 03:34:08 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x43) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) fcntl$setstatus(r0, 0x4, 0x6000) write$P9_RLINK(r1, &(0x7f0000000200)={0x7}, 0x7) 03:34:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 364.777250] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 364.787161] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 364.794190] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 364.806062] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 03:34:08 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000000)={'wlan1\x00'}) 03:34:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@fat=@nocase}]}) 03:34:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 03:34:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 03:34:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 364.948564] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 364.950381] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 365.000198] No source specified [ 365.008242] No source specified [ 365.052718] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 365.072790] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 03:34:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 03:34:09 executing program 1: prctl$PR_SET_NAME(0x4c, 0x0) 03:34:09 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000008cc0), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 03:34:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) membarrier(0x40, 0x0) 03:34:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 03:34:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 03:34:09 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x43) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) fcntl$setstatus(r0, 0x4, 0x6000) write$P9_RLINK(r1, &(0x7f0000000200)={0x7}, 0x7) 03:34:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r2, 0x1, 0x31, 0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r3, 0x1, 0x31, 0x0, &(0x7f0000000140)) write$binfmt_aout(r3, &(0x7f0000001500)=ANY=[@ANYBLOB="cc00010889010000470200000920000015030000b84200000000000000000000add0906c06ba571e983a7362ad294e2064748bd19653ad3fa6f4160f95798d55e3568dd1904ab9e74faed9e454b4eb6c9dc3ee0d4e506acaa8"], 0x59) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r4], 0x1, {r0}}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r5) 03:34:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) vmsplice(r0, &(0x7f0000002e80)=[{0x0}, {&(0x7f00000019c0)='r', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 365.737574] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 365.747420] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 365.749425] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 365.761519] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 03:34:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) 03:34:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x69, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:34:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 03:34:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f00000000c0), 0x4) [ 366.009488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:34:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f00000001c0)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 03:34:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 03:34:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:34:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) 03:34:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r2, 0x1, 0x31, 0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r3, 0x1, 0x31, 0x0, &(0x7f0000000140)) write$binfmt_aout(r3, &(0x7f0000001500)=ANY=[@ANYBLOB="cc00010889010000470200000920000015030000b84200000000000000000000add0906c06ba571e983a7362ad294e2064748bd19653ad3fa6f4160f95798d55e3568dd1904ab9e74faed9e454b4eb6c9dc3ee0d4e506acaa8"], 0x59) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r4], 0x1, {r0}}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r5) 03:34:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 03:34:10 executing program 5: getuid() 03:34:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 03:34:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 03:34:10 executing program 2: io_uring_setup(0x0, 0x0) 03:34:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 03:34:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x80280}) 03:34:10 executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 03:34:10 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) 03:34:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 03:34:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:34:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) flock(r0, 0x1) 03:34:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 03:34:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x28}) 03:34:10 executing program 5: get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 03:34:10 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 03:34:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000280)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xeb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x81, 0x3, "f9a7daf86662e406a141e01de51bc84ea1af4998aea0dfce12cef5b0bad009a7d3d6fb4c8481604d2429307cf08b14cbee2643b0da36b37c3720bef28fb3023ac2d09babee7f276d340452fa54418a2aaf72f32dc150a4f9d8e6e5ca508b6f827b99bca0d560e355fef31ca855f6ae62bcc40f264a60c58b9598451c55"}, @TIPC_NLA_NODE_ID={0xe1d, 0x3, "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"}]}]}, 0xec4}}, 0x0) [ 366.804644] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:34:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 03:34:10 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 03:34:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:34:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000300)=0xffff7fff, 0x4) 03:34:11 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)={{0x10b}}, 0x20) 03:34:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setregid(0x0, 0xee01) 03:34:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 03:34:11 executing program 4: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x20000000000002ae, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1fa}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) 03:34:11 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x541b, 0x0) 03:34:11 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}}}, 0x6) 03:34:11 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 03:34:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) [ 367.032618] hpet: Lost 1 RTC interrupts 03:34:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, 0x0, 0x0) 03:34:11 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x111, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 03:34:11 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 03:34:11 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@empty, 0x0, r2}) 03:34:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}}, 0x0) 03:34:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 03:34:11 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 03:34:11 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) r3 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='/dev/sg#\x00', 0x0, r2) dup3(r2, r0, 0x0) 03:34:11 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00f9"], 0x34}], 0x1}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) 03:34:11 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 03:34:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 03:34:11 executing program 0: setresuid(0x0, 0xee01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002740)={0x1, &(0x7f00000026c0)=[{}]}) 03:34:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x20, 0x4) 03:34:11 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000001700)=ANY=[]) 03:34:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 03:34:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 03:34:11 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDSIGACCEPT(r0, 0x541b, 0x7ffffffff000) 03:34:11 executing program 2: r0 = io_uring_setup(0x5885, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) 03:34:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100), 0x4) 03:34:11 executing program 6: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1d, &(0x7f0000000140), 0x0) 03:34:11 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:34:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 03:34:11 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2022, 0x0) 03:34:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 03:34:11 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 03:34:11 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 03:34:11 executing program 5: clone3(&(0x7f0000000300)={0x40020100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2c}, &(0x7f00000000c0)=""/208, 0xd0, &(0x7f00000001c0)=""/239, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) epoll_create(0xffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000015c0)=@xdp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001640)=""/44, 0x2c}, {&(0x7f0000001680)=""/71, 0x47}, {&(0x7f0000001700)=""/152, 0x98}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/57, 0x39}, {0x0}], 0x6}, 0x10000) 03:34:11 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:34:11 executing program 6: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000000c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5450, 0x0) 03:34:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)) 03:34:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 03:34:11 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 03:34:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4a, 0x0, &(0x7f00000018c0)) 03:34:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x244342, 0x0) signalfd(r0, &(0x7f0000001a40), 0x8) 03:34:11 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(r0, 0x0, 0x0) 03:34:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$null(0xffffffffffffff9c, 0x0, 0x125e80, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) rt_sigpending(0x0, 0x0) 03:34:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1) 03:34:11 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:34:11 executing program 4: epoll_create(0x93) 03:34:11 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 03:34:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 03:34:11 executing program 1: syz_io_uring_setup(0x7948, &(0x7f000000b340)={0x0, 0x0, 0x4}, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f000000b400)) 03:34:11 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 03:34:11 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x6f, [@local]}, @timestamp_prespec={0x44, 0x4, 0x5b}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:34:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002680)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002580)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x0, [{@dev}, {@dev}]}]}}}], 0x28}, 0x0) 03:34:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xce, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff5e52989c7e3208"], 0x0) 03:34:12 executing program 7: clone3(&(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[0x0], 0x4000}, 0x58) 03:34:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) read(r0, &(0x7f0000000000), 0x2000) 03:34:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) 03:34:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:34:12 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "8037566c4b2ae6a23eed9d22fc9fddf7f3cd24c1d710ed7e945e21c24493b14aef439ef849026794ab9b37a236f2dfb4a6d574769b8d4fee110c6008ccac4951147b14276bb9436a1c8adb2754b752cd1c352306809505b035c2c87431bbbd28af3d6dc0176efe560bb1ef07ffd4e61f8780d041ffa0badfd8c4e984c1f6a229c136f2049a83e84be9bdfdfdc83d66a4b30e564562311ad09af09276f99d1170c7e0a89ca77643315d5e2a9ab8e058a7b360ba4cf9b39711012cf42f0f2eb57e"}, 0xc4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) close(r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7c3f779a) 03:34:12 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000008cc0), 0x4000, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000ab80)={0x77359400}) openat$ttyS3(0xffffffffffffff9c, &(0x7f000000ac40), 0xc00, 0x0) 03:34:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 03:34:13 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0b07000000000000000001"], 0x1c}}, 0x0) 03:34:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgsnd(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03"], 0x8, 0x0) 03:34:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x10, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) 03:34:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:34:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0x9]}, 0x0, 0x8) 03:34:13 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x8) 03:34:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 03:34:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 369.253342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0xfcb5, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000005002000010000000c000500000000000000000009001f0070687930"], 0x34}}, 0x0) 03:34:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 03:34:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:34:13 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5e9", 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00'}) 03:34:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x3}) 03:34:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="f1", 0x1}], 0x1, 0x0) 03:34:13 executing program 3: clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 03:34:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 03:34:13 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 03:34:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) [ 369.593952] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.602323] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:34:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:13 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x286840, 0x0) syz_io_uring_setup(0x625b, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 03:34:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:34:13 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b41, &(0x7f0000000000)) 03:34:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="8e332547a9acf23fb405a6472dc2854d", 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="f74a9c2c4baac4923c3b8bd81be47cfa", 0x10) 03:34:13 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 03:34:13 executing program 3: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:34:13 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) utimes(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={{0x0, 0xea60}}) 03:34:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 03:34:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:34:14 executing program 6: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) close(r0) syz_open_procfs(0x0, 0x0) 03:34:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fallocate(r0, 0x44, 0x0, 0x7) 03:34:14 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 03:34:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0f7aca43d96518cc51a3c5068e85b74ab1274cb99f7dd9bb3e42e6013ea33671", "7d3e6a2a8ba1ccab0471348164eed046669f86b6aad313215cdf8c7e8adea5c09e0cdf128cb263376fad2a6c53cc76a6", "0baf855ae67db8af764ddb734edde72bb5b5327c178df669912afd58", {"0ad21d78a8ad7b629076004102aac881", "d89baf2c2ad0b8e3e7c82aea8904d924"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/192, 0xc0}], 0x1) 03:34:14 executing program 3: mount_setattr(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000880)={0x0, 0x0, 0x40000}, 0x20) 03:34:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 03:34:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee01, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) 03:34:14 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:14 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 03:34:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000140), 0x4) 03:34:14 executing program 4: syz_mount_image$nfs(0x0, &(0x7f0000001dc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x5, 0x0, 0x0) 03:34:14 executing program 2: socket$inet6(0xa, 0x2, 0x400) 03:34:14 executing program 3: prctl$PR_SET_NAME(0x34, &(0x7f0000000340)='sha224-neon\x00') 03:34:14 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@nop, @mptcp=@mp_join={0x1d, 0x3}, @fastopen={0x22, 0x3, '@'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x4b52, &(0x7f0000000080)) 03:34:14 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@nop, @mptcp=@mp_join={0x1d, 0x3}, @fastopen={0x22, 0x3, '@'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:14 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0x0) 03:34:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000740)={0x38, r2, 0xcea008a6e34dc1cb, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 03:34:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @dev}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 03:34:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x1b, 0x0, 0x0, 0x8, &(0x7f0000000240)) 03:34:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000b40)={&(0x7f0000000b00), 0xc, 0xffffffffffffffff}, 0x0) 03:34:14 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:14 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@nop, @mptcp=@mp_join={0x1d, 0x3}, @fastopen={0x22, 0x3, '@'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:14 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:14 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(0xffffffffffffffff) 03:34:14 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:34:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, 0x0, 0x0) 03:34:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) 03:34:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) 03:34:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 03:34:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xb, 0x1e, 0x122}) 03:34:14 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@nop, @mptcp=@mp_join={0x1d, 0x3}, @fastopen={0x22, 0x3, '@'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}], 0x2, 0x0) 03:34:15 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) r0 = fork() ptrace(0x10, r0) ptrace$peek(0x2, r0, &(0x7f0000000040)) fork() 03:34:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xf}}) 03:34:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xb, 0x1e, 0x122}) 03:34:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:15 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:15 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:15 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$HCIINQUIRY(r0, 0x400448de, 0x0) 03:34:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) 03:34:15 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2335143fbb6ce45a67"], 0xd) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x68e146a1) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x1e8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:34:15 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) clock_gettime(0x0, 0x0) close_range(r1, r0, 0x0) 03:34:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xb, 0x1e, 0x122}) 03:34:15 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:15 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:34:15 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 03:34:15 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 03:34:15 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:16 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 03:34:16 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 03:34:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xb, 0x1e, 0x122}) 03:34:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={0x0, 0x18}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:34:16 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 03:34:16 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 372.299429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 372.381839] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 374.941446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.944333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.947100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.952948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.959264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.014239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.016806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.018256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.024324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.026858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.079003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.081926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.087001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.090516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.103968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.976705] Bluetooth: hci0: command tx timeout [ 377.106626] Bluetooth: hci2: command tx timeout [ 377.170731] Bluetooth: hci7: command tx timeout [ 379.025737] Bluetooth: hci0: command tx timeout [ 379.152781] Bluetooth: hci2: command tx timeout [ 379.217705] Bluetooth: hci7: command tx timeout [ 381.072832] Bluetooth: hci0: command tx timeout [ 381.204072] Bluetooth: hci2: command tx timeout [ 381.265647] Bluetooth: hci7: command tx timeout [ 383.120676] Bluetooth: hci0: command tx timeout [ 383.249754] Bluetooth: hci2: command tx timeout [ 383.313143] Bluetooth: hci7: command tx timeout [ 388.701777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.702876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.767160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.767813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.024655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.025280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.046701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.047274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.074238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.075016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.097994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.098539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:34:33 executing program 4: modify_ldt$read_default(0x2, 0xfffffffffffffffc, 0x0) 03:34:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 03:34:33 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:34:33 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:34:33 executing program 5: socket$inet6(0xa, 0x1, 0x1) 03:34:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000040)={@private2}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 03:34:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x73) 03:34:33 executing program 7: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:33 executing program 2: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) fork() 03:34:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x30}}, 0x0) 03:34:33 executing program 4: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:34:33 executing program 7: clock_gettime(0x6, &(0x7f0000000100)) 03:34:33 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 03:34:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKIOMIN(r0, 0x1260, &(0x7f00000029c0)) [ 389.412684] No source specified [ 389.414126] No source specified 03:34:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4) 03:34:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) close(r0) 03:34:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 03:34:33 executing program 4: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) acct(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:33 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x66002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) sendfile(r0, r0, 0x0, 0x38000000000000) 03:34:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0xa, 0x0, 0x0) 03:34:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x17) 03:34:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 389.551217] Process accounting resumed 03:34:33 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 389.592569] Process accounting resumed 03:34:33 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, 0x0, 0xeffd) 03:34:33 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 03:34:33 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) getegid() 03:34:33 executing program 0: ioprio_set$pid(0x2, 0x0, 0x4007) ioprio_get$pid(0x3, 0x0) 03:34:33 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)={0x0, 0x989680}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003dc0)) 03:34:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) 03:34:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 03:34:34 executing program 0: getrandom(0xffffffffffffffff, 0x0, 0x0) 03:34:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mlockall(0x7) 03:34:34 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) getegid() 03:34:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4) 03:34:34 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff04, 0x0) 03:34:34 executing program 6: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000008cc0), 0x0, 0x0) 03:34:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f00000000c0)="9194c8bb42b55ec30a27add64c6161012e6f4aae649009f5a9612a7673cad0478070bc1a744c6cf255ea62ebd6f2e585e235fc99f2c60b65203a467419675782ddffa3cbc1079e9dd12ced8d1eabda39f67677e3d11deb212b8b5a5c745316d1cb889d9fa65d6e55e2f540c2e61788b338af75ac90ce57e3185fa406f4fb99edcd55ca68c565e5", 0x87}, {&(0x7f0000000280)="82f670d5e2a093a58090381b", 0xc}], 0x2) 03:34:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x1300) 03:34:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 03:34:35 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x9, 0x0, 0x0) 03:34:35 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1ffd, 0x0) 03:34:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r0, 0x8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c40)) 03:34:35 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0xee00}}) 03:34:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) getegid() 03:34:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4) 03:34:35 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000040)=[r0, 0xffffffffffffffff], 0x2) 03:34:35 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) 03:34:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_yield() 03:34:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1'}, 0x4) 03:34:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 03:34:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r0, 0x8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c40)) 03:34:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4) 03:34:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) getegid() 03:34:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5410, 0x0) 03:34:35 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) 03:34:35 executing program 2: syz_mount_image$msdos(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@fat=@errors_remount}, {@fat=@usefree}]}) 03:34:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)='$', 0x1}], 0x1) 03:34:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r0, 0x8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c40)) 03:34:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) [ 391.864318] No source specified [ 391.881535] No source specified 03:34:36 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) 03:34:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 03:34:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x80000) 03:34:36 executing program 6: r0 = eventfd(0x102000c) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:34:36 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) 03:34:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r0, 0x8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c40)) 03:34:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) 03:34:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x4b44, &(0x7f0000000080)) 03:34:36 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) 03:34:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc018930a, 0x0) 03:34:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) 03:34:36 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x6f, [@remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:34:36 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) modify_ldt$write2(0x11, 0x0, 0x0) 03:34:36 executing program 6: r0 = eventfd(0x102000c) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:34:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400c0c0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) 03:34:36 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x20000}}}, 0x10040) 03:34:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x3, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/249, 0xf9) 03:34:36 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000680)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 03:34:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) 03:34:36 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 03:34:36 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x41009432, &(0x7f0000000000)) 03:34:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) 03:34:36 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) 03:34:36 executing program 6: r0 = eventfd(0x102000c) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:34:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f0000000340)={{0x1}}) 03:34:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="da", 0x1}], 0x1}}], 0x2, 0x400c880) 03:34:36 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'trylock', ' ', 'mem'}, 0xc) 03:34:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) 03:34:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x285f, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:34:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:34:37 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000740)=0x8, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:37 executing program 6: r0 = eventfd(0x102000c) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:34:37 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) 03:34:37 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4) 03:34:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x0, 0x300) 03:34:37 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 03:34:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/188, 0xbc, 0x0) 03:34:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="da", 0x1}], 0x1}}], 0x2, 0x400c880) 03:34:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') pread64(r0, &(0x7f0000000040)=""/201, 0xc9, 0x800) 03:34:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='9', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) 03:34:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xd, 0x0, 0x0, 0x0, @binary="d9655b64d43e12ec9e"}]}, 0x20}], 0x1}, 0x0) 03:34:37 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe0000000}, {0x0, 0x0, 0x8}}}}}, 0x0) 03:34:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="da", 0x1}], 0x1}}], 0x2, 0x400c880) 03:34:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x0, 0x0}) 03:34:37 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:34:37 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) 03:34:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x3}, 0x0) 03:34:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="da", 0x1}], 0x1}}], 0x2, 0x400c880) 03:34:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:34:37 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000480)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @initial, @broadcast}, @a_msdu}, 0x18) 03:34:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x17, 0xeb8, &(0x7f00000001c0)}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 03:34:37 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) 03:34:37 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:34:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x9, 0x0, 0x0) [ 393.892963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:38 executing program 3: clone3(&(0x7f0000005880)={0xe5028100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 03:34:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x34, 0x15, 0x1, 0x0, 0x0, "", [@nested={0x23, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8dfd178807e9c14f81b3770fc6fd57eb68e153abc10dc3", @generic]}]}, 0x34}], 0x1}, 0x0) 03:34:38 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0xfff) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) dup(r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0xfffffff8, 0x4) fcntl$getflags(0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1121202e2f66696c65300aa4de03440c2f26588fa3407bffb3f935e6e2f87aa09dcc5e72b221c0a98a5b0003b22e8fd516d0acabed131bea40828c4a259a9988486a1bb4214e3b8ddd7f36a0d9a26c3db88d10bb4c631361e6242869157bca58153ffe1ab42545b1c668b752db8b88ee2230b58d7d207f2412a6c29e9067032b0abd9db7b16fcb010a9995b169a2496dccc2b371e5876dd978938439625db2344bf6465ae233e0592db0e19ac74d85a941dc67887f5efdc9ea593c59d6e1414fb25482ba12a1377ac0bfaa7b409c72fcc8848f404826ba3776aa67a2a7fcea5e92140029d87e509d"], 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:38 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:34:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) [ 394.080958] 9pnet_virtio: no channels available for device ./file0 [ 394.095472] 9pnet_virtio: no channels available for device ./file0 [ 394.098077] audit: type=1326 audit(2000000078.228:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22981 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 03:34:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) io_setup(0x6, &(0x7f0000000040)=0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 03:34:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 03:34:38 executing program 6: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/84) [ 394.214655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:38 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:34:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x34]}}}}]}) 03:34:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000500), 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1}, 0x0) 03:34:38 executing program 3: clone3(&(0x7f0000005880)={0xe5028100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 394.428541] tmpfs: Bad value for 'mpol' [ 394.436943] tmpfs: Bad value for 'mpol' 03:34:38 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="89f8401d77c339b22e94b5da6e9ced925d1ee2e250732c83ba677dd3eb48d12652c865fc714c5b9bd170adb1bd3bcd", 0x77}], 0x1) 03:34:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x81}}, 0xe8) 03:34:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x42, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) [ 394.547448] ieee802154 phy0 wpan0: encryption failed: -90 03:34:38 executing program 7: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r0, 0x2, &(0x7f0000003400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000001180)="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", 0x401}]) 03:34:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5336, &(0x7f00000000c0)) 03:34:38 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3305) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) [ 394.710786] random: crng reseeded on system resumption [ 394.732075] Restarting kernel threads ... [ 394.739457] Done restarting kernel threads. [ 394.748573] random: crng reseeded on system resumption [ 394.925274] audit: type=1326 audit(2000000079.054:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22981 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 03:34:39 executing program 2: set_tid_address(0x0) 03:34:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 03:34:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x42, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:34:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x33, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 03:34:39 executing program 3: clone3(&(0x7f0000005880)={0xe5028100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000500), 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1}, 0x0) 03:34:39 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3305) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) 03:34:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0xfff) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) dup(r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0xfffffff8, 0x4) fcntl$getflags(0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1121202e2f66696c65300aa4de03440c2f26588fa3407bffb3f935e6e2f87aa09dcc5e72b221c0a98a5b0003b22e8fd516d0acabed131bea40828c4a259a9988486a1bb4214e3b8ddd7f36a0d9a26c3db88d10bb4c631361e6242869157bca58153ffe1ab42545b1c668b752db8b88ee2230b58d7d207f2412a6c29e9067032b0abd9db7b16fcb010a9995b169a2496dccc2b371e5876dd978938439625db2344bf6465ae233e0592db0e19ac74d85a941dc67887f5efdc9ea593c59d6e1414fb25482ba12a1377ac0bfaa7b409c72fcc8848f404826ba3776aa67a2a7fcea5e92140029d87e509d"], 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 395.361769] random: crng reseeded on system resumption [ 395.374936] Restarting kernel threads ... [ 395.378054] Done restarting kernel threads. 03:34:40 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:34:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/92, &(0x7f00000001c0)=0x5c) 03:34:40 executing program 4: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) close(r0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000080)) 03:34:40 executing program 3: clone3(&(0x7f0000005880)={0xe5028100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x42, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:34:40 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3305) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) 03:34:40 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000500), 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1}, 0x0) 03:34:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0xfff) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) dup(r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0xfffffff8, 0x4) fcntl$getflags(0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1121202e2f66696c65300aa4de03440c2f26588fa3407bffb3f935e6e2f87aa09dcc5e72b221c0a98a5b0003b22e8fd516d0acabed131bea40828c4a259a9988486a1bb4214e3b8ddd7f36a0d9a26c3db88d10bb4c631361e6242869157bca58153ffe1ab42545b1c668b752db8b88ee2230b58d7d207f2412a6c29e9067032b0abd9db7b16fcb010a9995b169a2496dccc2b371e5876dd978938439625db2344bf6465ae233e0592db0e19ac74d85a941dc67887f5efdc9ea593c59d6e1414fb25482ba12a1377ac0bfaa7b409c72fcc8848f404826ba3776aa67a2a7fcea5e92140029d87e509d"], 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 396.297948] ALSA: seq fatal error: cannot create timer (-22) [ 396.301174] random: crng reseeded on system resumption [ 396.314658] Restarting kernel threads ... [ 396.315448] Done restarting kernel threads. [ 396.340382] ALSA: seq fatal error: cannot create timer (-22) 03:34:40 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 03:34:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000040)=""/9, 0x9) 03:34:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x42, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:34:40 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3305) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) 03:34:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) [ 396.509345] random: crng reseeded on system resumption [ 396.523716] Restarting kernel threads ... [ 396.527716] Done restarting kernel threads. 03:34:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:34:41 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x94872, 0xffffffffffffffff, 0x0) 03:34:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:34:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 03:34:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00'}) 03:34:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, 0x14) 03:34:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000500), 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1}, 0x0) 03:34:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0xfff) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) dup(r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0xfffffff8, 0x4) fcntl$getflags(0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1121202e2f66696c65300aa4de03440c2f26588fa3407bffb3f935e6e2f87aa09dcc5e72b221c0a98a5b0003b22e8fd516d0acabed131bea40828c4a259a9988486a1bb4214e3b8ddd7f36a0d9a26c3db88d10bb4c631361e6242869157bca58153ffe1ab42545b1c668b752db8b88ee2230b58d7d207f2412a6c29e9067032b0abd9db7b16fcb010a9995b169a2496dccc2b371e5876dd978938439625db2344bf6465ae233e0592db0e19ac74d85a941dc67887f5efdc9ea593c59d6e1414fb25482ba12a1377ac0bfaa7b409c72fcc8848f404826ba3776aa67a2a7fcea5e92140029d87e509d"], 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:41 executing program 2: ioperm(0x0, 0x1f, 0x0) 03:34:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) 03:34:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00'}) 03:34:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:34:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:34:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 03:34:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00'}) 03:34:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:34:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)={0x13, 0x32, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x33fe0}], 0x1}, 0x0) 03:34:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:34:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:34:42 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00'}) 03:34:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 03:34:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 03:34:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:34:42 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{}]}, 0x10) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_io_uring_complete(r1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:34:42 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r1) r2 = dup2(r0, r0) r3 = getpid() pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 03:34:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 03:34:42 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x400, 0x0) 03:34:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:34:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 03:34:42 executing program 6: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4f4441) 03:34:42 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000001c00), 0x8ea40, 0x0) [ 398.470383] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 398.472447] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 03:34:43 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) syz_open_dev$vcsa(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r1], 0x2) 03:34:43 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) chmod(&(0x7f0000000600)='./file0\x00', 0x0) 03:34:43 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x114, &(0x7f0000000000)) 03:34:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 03:34:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 03:34:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xd) 03:34:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "5c79f3b2d138b7260f5a3d050609c0dd4410f16e35c396a4a789b775008c2895012061de7328553f2386996cd1f69d1592f7813f71b1f2089e08fe1b60ea859504c931f85dfdf7e2692beed5f79a2d1c"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:34:43 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 03:34:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="230e202e9b3c"], 0x82f) 03:34:43 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000873000/0x2000)=nil, 0x5) 03:34:43 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x31, 0x3a]}}}}]}) 03:34:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 03:34:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "5c79f3b2d138b7260f5a3d050609c0dd4410f16e35c396a4a789b775008c2895012061de7328553f2386996cd1f69d1592f7813f71b1f2089e08fe1b60ea859504c931f85dfdf7e2692beed5f79a2d1c"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:34:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x200, 0x8) 03:34:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 399.437213] tmpfs: Bad value for 'mpol' [ 399.440830] tmpfs: Bad value for 'mpol' 03:34:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20}, 0x0) 03:34:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0x15, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) 03:34:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 03:34:43 executing program 5: syz_mount_image$tmpfs(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@size={'size', 0x3d, [0x25]}}]}) 03:34:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) 03:34:43 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) chmod(&(0x7f0000000600)='./file0\x00', 0x0) 03:34:43 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0) 03:34:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "5c79f3b2d138b7260f5a3d050609c0dd4410f16e35c396a4a789b775008c2895012061de7328553f2386996cd1f69d1592f7813f71b1f2089e08fe1b60ea859504c931f85dfdf7e2692beed5f79a2d1c"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:34:43 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 03:34:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/35) 03:34:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 03:34:44 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f00000023c0)) 03:34:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "5c79f3b2d138b7260f5a3d050609c0dd4410f16e35c396a4a789b775008c2895012061de7328553f2386996cd1f69d1592f7813f71b1f2089e08fe1b60ea859504c931f85dfdf7e2692beed5f79a2d1c"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:34:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair(0x28, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200), 0x4) syz_open_dev$mouse(0x0, 0x7, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) dup2(r2, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "57884cebb5d440167593b9ba2264fc47a3b2ad418d94b4fa17b8dcef81c0b811897898b67433296d5d6e8ca5f18a09d57dec53a100a13b604491c75056ee33dbee44d763348e55686eb1eb4b9cf7dd35"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe2(&(0x7f0000000640), 0x80000) 03:34:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/35) 03:34:44 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:44 executing program 0: syz_io_uring_setup(0x1df6, &(0x7f0000002040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 03:34:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 03:34:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x2f8afcf3, 0x25, 0xffffffffffffffff}) 03:34:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/35) 03:34:44 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:44 executing program 0: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, 0x0, 0x0) 03:34:44 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) 03:34:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) 03:34:44 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) chmod(&(0x7f0000000600)='./file0\x00', 0x0) 03:34:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 03:34:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 03:34:44 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) epoll_create(0x7fe) 03:34:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/35) 03:34:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:34:44 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) 03:34:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) [ 400.641834] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 400.642993] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 400.643870] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 400.644551] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 400.645467] blk_print_req_error: 317 callbacks suppressed [ 400.645479] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 400.650552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.651463] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.652297] buffer_io_error: 318 callbacks suppressed [ 400.652306] Buffer I/O error on dev sr0, logical block 0, async page read [ 400.654111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.654863] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.657037] Buffer I/O error on dev sr0, logical block 1, async page read [ 400.660455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.661173] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.662136] Buffer I/O error on dev sr0, logical block 2, async page read [ 400.664386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.665110] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.665956] Buffer I/O error on dev sr0, logical block 3, async page read [ 400.667937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.668659] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.669483] Buffer I/O error on dev sr0, logical block 4, async page read [ 400.671070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.671776] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.672624] Buffer I/O error on dev sr0, logical block 5, async page read [ 400.674071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.674780] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.675621] Buffer I/O error on dev sr0, logical block 6, async page read [ 400.676968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.677673] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.678480] Buffer I/O error on dev sr0, logical block 7, async page read [ 400.682252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.683055] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.683888] Buffer I/O error on dev sr0, logical block 0, async page read [ 400.685228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.685987] Buffer I/O error on dev sr0, logical block 1, async page read [ 400.687422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.689282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.690516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.692130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.693352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.694708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.711371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.713300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.715393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.719130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.722989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.730544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.734911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 400.736059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:34:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\r', 0xfdef}], 0x1, 0x0, 0x0, 0x0) 03:34:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 03:34:44 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 03:34:44 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'mem'}, 0xc) 03:34:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001300)=""/160, 0xa0, 0x4) 03:34:44 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) chmod(&(0x7f0000000600)='./file0\x00', 0x0) 03:34:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) 03:34:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() gettid() syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x40) ioctl$SG_SET_DEBUG(r1, 0x227e, 0x0) fork() getpgid(r0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000001740)='./file0\x00', 0x0) 03:34:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) 03:34:45 executing program 2: syz_open_dev$sg(&(0x7f0000000180), 0x0, 0xc2a83) 03:34:45 executing program 1: syz_io_uring_setup(0xb72, &(0x7f0000009940), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000099c0), &(0x7f0000009a00)) 03:34:45 executing program 7: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0xffffffffad307777, 0x0, 0xfffffffffffffff9, 0x1, 0x2, 0x91, 0x2, 0x48, 0x81, 0x6, 0x0, 0x7, 0x81, 0xfffffffffffff035, 0x400, 0x0, 0x0, 0x5, 0x3, 0x10001, 0xfff, 0x7ff}) 03:34:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 03:34:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\r', 0xfdef}], 0x1, 0x0, 0x0, 0x0) 03:37:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 03:37:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 03:37:09 executing program 7: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0) 03:37:09 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='\xb3^@}\xf5%!)],#{@$(-/[\\\x00') 03:37:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 03:37:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 03:37:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\r', 0xfdef}], 0x1, 0x0, 0x0, 0x0) 03:37:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x0) 03:37:09 executing program 7: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000600)) 03:37:09 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:37:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:37:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\r', 0xfdef}], 0x1, 0x0, 0x0, 0x0) 03:37:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x48}}, 0x0) 03:37:09 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/102400, 0x19000) 03:37:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80004507, 0x0) 03:37:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="ebafe58181ff732e66617400028001000440000004f8010ae500aa0a3b7a286d6e5294b89f06e08557306db829284eed49b00c7cada5b789ce219a80d8eae54826994cd5", 0x44}, {&(0x7f0000000080)="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", 0x139, 0xb00}], 0x1001, &(0x7f0000001440)=ANY=[]) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfe, 0x0, 0x419}}}, 0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04040a00000000083a61147300"], 0xd) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x40040) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x404000, 0x94) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x1, @any, 0x81}}}, 0xb) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKIOMIN(r3, 0x5452, &(0x7f00000029c0)) openat$incfs(r3, &(0x7f0000000300)='.pending_reads\x00', 0x10000, 0x3) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 03:37:09 executing program 1: syz_genetlink_get_family_id$nbd(0xfffffffffffffffc, 0xffffffffffffffff) [ 401.406761] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 401.412577] Bluetooth: hci3: connection err: -111 03:37:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x8, 0x0, &(0x7f0000000240)) 03:37:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/255, &(0x7f0000000100)=0xff) 03:37:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) [ 401.466806] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 401.468461] Bluetooth: hci3: connection err: -111 03:37:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 03:37:09 executing program 4: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 03:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) 03:37:09 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 03:37:09 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={0x1}, 0x20) 03:37:09 executing program 7: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000003340), 0x48) 03:37:09 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x6) 03:37:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x48}}, 0x0) 03:37:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x0, 0x0) 03:37:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 03:37:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)='!', 0x1}, {&(0x7f0000000180)="1fa2007b1596987e1b7c34cfb68eeb663b1b50e6ff9a7d5edbdc1425fe32530c8557a356d0cabe593328d38482e181390f47ee66c23ec087ba9111963e201a0b2608a852c674418d6260e7df860003cb97787f8a85cdfbd99c2d71a76272923e66235d1b636bd85a1461e5d5e4ec431063619eb1d1a5d9d7e7ca306efa1f151155757c", 0x83}, {&(0x7f0000000c00)="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", 0x3bf}], 0x3, 0x4bbe, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 03:37:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x4ec, 0x0, 'client1\x00', 0x0, "535de93c4301f605", "41903d3ab99eca1c96cc931f043b3fd384166bb598ad6406353bb9332342b262"}) 03:37:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x28}}, 0x0) 03:37:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x48}}, 0x0) 03:37:09 executing program 2: clone(0x44000100, &(0x7f0000000040), 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:37:09 executing program 7: syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x58, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "61165b", 0x0, 0x2b, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @loopback]}]}}}}}}}, 0x0) 03:37:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 03:37:09 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x20000000a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)={0x45, 0x7d, 0x0, {0x0, 0x3e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5, '*)\\}*', 0x4, '^*:(', 0x1, '}', 0x1, '{'}}, 0x45) 03:37:09 executing program 4: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 03:37:09 executing program 6: semop(0x0, &(0x7f00000000c0)=[{}], 0x1f4) 03:37:09 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10000, 0x0) statx(0xffffffffffffffff, &(0x7f0000001980)='./file1\x00', 0x4000, 0x10, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x208100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fork() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000001c0)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004c40)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r1}}}], 0x30, 0x100}}, {{0x0, 0x0, &(0x7f0000004e40)}}, {{&(0x7f0000005380)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000066c0), 0x0, 0x86484a723c22cfe4}}, {{&(0x7f0000006700)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000006780)="e3716574b8cc2418a5b0102dcec654daae499e5fb1510cf74e061d62bba1e46dd48816e09cd8d31ec550e168e58e3078f2086bbce6070a0931119f68de7c6df2d2883d3d8f30e6d33711fd4992f06e7eecfe44f761f08526b1297ac1ba40565ce000fbe7460ddab0b011d1", 0x6b}, {&(0x7f0000006800)}], 0x2, &(0x7f00000069c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r1}}}], 0x40}}], 0x6, 0x4008000) 03:37:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 03:37:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x48}}, 0x0) 03:37:10 executing program 7: process_vm_readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 03:37:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) 03:37:10 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x20000000a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)={0x45, 0x7d, 0x0, {0x0, 0x3e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5, '*)\\}*', 0x4, '^*:(', 0x1, '}', 0x1, '{'}}, 0x45) 03:37:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) 03:37:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5424, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "7cacc37b4a9fd591bc7dde22c61ccb0d5b569b"}) 03:37:10 executing program 6: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 03:37:10 executing program 4: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 03:37:10 executing program 3: prctl$PR_SET_IO_FLUSHER(0x4a, 0x0) 03:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x43901, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000aa80) syz_open_dev$ttys(0xc, 0x2, 0x0) 03:37:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4e) 03:37:10 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x20000000a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)={0x45, 0x7d, 0x0, {0x0, 0x3e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5, '*)\\}*', 0x4, '^*:(', 0x1, '}', 0x1, '{'}}, 0x45) 03:37:10 executing program 2: clone(0x44000100, &(0x7f0000000040), 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:37:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc028660f, 0x0) 03:37:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 03:37:10 executing program 6: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 03:37:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)="f5", 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 03:37:10 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x20000000a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)={0x45, 0x7d, 0x0, {0x0, 0x3e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5, '*)\\}*', 0x4, '^*:(', 0x1, '}', 0x1, '{'}}, 0x45) 03:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x43901, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000aa80) syz_open_dev$ttys(0xc, 0x2, 0x0) 03:37:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) 03:37:10 executing program 6: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 03:37:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 03:37:10 executing program 4: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 03:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x43901, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000aa80) syz_open_dev$ttys(0xc, 0x2, 0x0) 03:37:10 executing program 6: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 03:37:10 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) 03:37:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)="f5", 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 03:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x43901, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000aa80) syz_open_dev$ttys(0xc, 0x2, 0x0) 03:37:10 executing program 2: clone(0x44000100, &(0x7f0000000040), 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:37:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 03:37:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000dc0), 0x0, 0x0) 03:37:10 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast=0x20020000, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) [ 402.533381] sit: Dst spoofed 172.30.0.2/4800::ac14:1400 -> 172.20.20.0/2002:0:440c:900:: [ 402.537233] sit: Dst spoofed 172.30.0.2/4800::ac14:1400 -> 172.20.20.0/2002:0:440c:900:: 03:37:10 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010101, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W', 0x0, "944856"}}}}}}, 0x0) 03:37:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$pid(0x0, 0x0) 03:37:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 03:37:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0xffffffff) 03:37:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)="f5", 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 03:37:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x184, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x24, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8}]}, 0x184}}, 0x0) 03:37:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 03:37:10 executing program 6: io_setup(0x7, &(0x7f0000000280)=0x0) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 03:37:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) 03:37:10 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) ioperm(0xd667, 0x4, 0xffffffffffffff01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x8, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r1) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, &(0x7f00000003c0)) 03:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x21) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) 03:37:10 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 03:37:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)="f5", 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 03:37:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:37:10 executing program 2: clone(0x44000100, &(0x7f0000000040), 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:37:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) 03:37:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "a7e987e221795cfdadbb39dc7cf2e00799ceeef28f1cdca9ea953aceb227fcd51aa67ffba49b3c"}, 0x32) 03:37:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) 03:37:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, 0x0, 0x0) 03:37:11 executing program 3: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 03:37:11 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "a7e987e221795cfdadbb39dc7cf2e00799ceeef28f1cdca9ea953aceb227fcd51aa67ffba49b3c"}, 0x32) 03:37:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 03:37:11 executing program 3: ioprio_set$uid(0x3, 0xee00, 0x6000) 03:37:11 executing program 7: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 03:37:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) 03:37:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {}, 0x0, {0x2, 0x0, @local}, 'wlan0\x00'}) 03:37:11 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "a7e987e221795cfdadbb39dc7cf2e00799ceeef28f1cdca9ea953aceb227fcd51aa67ffba49b3c"}, 0x32) 03:37:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) 03:37:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 03:37:11 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 03:37:11 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) ioperm(0xd667, 0x4, 0xffffffffffffff01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x8, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r1) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, &(0x7f00000003c0)) 03:37:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x20040000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:37:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:11 executing program 1: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) creat(0x0, 0x0) 03:37:11 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 03:37:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:37:11 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "a7e987e221795cfdadbb39dc7cf2e00799ceeef28f1cdca9ea953aceb227fcd51aa67ffba49b3c"}, 0x32) 03:37:11 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x81051, r0, 0x0) 03:37:11 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 03:37:11 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:11 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x4fd3, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 03:37:11 executing program 7: r0 = fsopen(&(0x7f0000000900)='ext4\x00', 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:37:11 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) ioperm(0xd667, 0x4, 0xffffffffffffff01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x8, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r1) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, &(0x7f00000003c0)) 03:37:11 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0xb9020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000000c0)=""/33, 0x0}, 0x58) 03:37:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffff88}) 03:37:11 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 03:37:11 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 403.463616] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:37:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000001600)) 03:37:11 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) write(r0, 0x0, 0x0) 03:37:11 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9115}) lseek(r0, 0x0, 0x4) 03:37:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227d, &(0x7f0000000000)) 03:37:11 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:37:11 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0xf, 0x6f, [@broadcast, @broadcast, @remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:37:11 executing program 3: shmctl$SHM_UNLOCK(0x0, 0xc) [ 403.590008] cgroup: fork rejected by pids controller in /syz5 03:37:11 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x0, 0x6}, 0x0, 0x4}) 03:37:11 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:37:11 executing program 2: fsopen(0x0, 0x0) 03:37:11 executing program 7: r0 = gettid() rt_sigqueueinfo(r0, 0x1c, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffb}) 03:37:11 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:11 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:11 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:11 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) ioperm(0xd667, 0x4, 0xffffffffffffff01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x8, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r1) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, &(0x7f00000003c0)) 03:37:11 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:11 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:37:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}}], 0x2, 0x0) 03:37:12 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000004}) epoll_pwait2(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 03:37:12 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:12 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 03:37:12 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 03:37:12 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9115}) lseek(r0, 0x0, 0x4) 03:37:12 executing program 4: syz_emit_ethernet(0x38, &(0x7f0000000880)={@empty, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e024e7", 0x2, 0x0, 0x0, @private2, @dev, {[], "a6fc"}}}}}, 0x0) 03:37:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), 0xffffffffffffffff) 03:37:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 03:37:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 03:37:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, &(0x7f0000000140), 0x4) 03:37:12 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9115}) lseek(r0, 0x0, 0x4) 03:37:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xffffffa4, 0x4) 03:37:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 03:37:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 03:37:12 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:12 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 03:37:12 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 03:37:12 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 03:37:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 03:37:12 executing program 3: msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000001180)={0x1}, 0x8, 0x0) 03:37:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 03:37:12 executing program 5: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 03:37:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 03:37:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 03:37:12 executing program 3: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 03:37:12 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9115}) lseek(r0, 0x0, 0x4) 03:37:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff94}) 03:37:12 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x31) 03:37:12 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 03:37:13 executing program 1: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 03:37:13 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r0, r0, 0x0, 0x1000) 03:37:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xe1bf, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:13 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 404.914210] Process accounting resumed 03:37:13 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80}, 0x0) [ 404.931663] Process accounting resumed 03:37:13 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 03:37:13 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 404.987235] audit: type=1326 audit(2000000233.115:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24232 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d43385b19 code=0x0 03:37:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(r0, 0x0) 03:37:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x894c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:37:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff"], 0x14}], 0x1}, 0x0) 03:37:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 405.087047] audit: type=1326 audit(2000000233.214:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24232 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d43385b19 code=0x0 03:37:13 executing program 1: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 03:37:13 executing program 2: syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) readv(r0, &(0x7f00000023c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {0x0}], 0x2) 03:37:13 executing program 6: io_uring_setup(0x39b0, &(0x7f00000012c0)={0x0, 0x0, 0x6, 0x1}) 03:37:13 executing program 7: io_setup(0x572, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfffffe2b}]) 03:37:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x11}}], 0x18}}], 0x2, 0x0) 03:37:13 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x8a', 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffd1f) fcntl$addseals(r0, 0x409, 0xe) 03:37:13 executing program 0: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:13 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x0) [ 405.378003] audit: type=1400 audit(2000000233.506:51): avc: denied { watch_reads } for pid=24436 comm="syz-executor.7" path="/syzkaller-testdir754827053/syzkaller.Wzk68z/489/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 [ 405.382368] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 405.387026] audit: type=1400 audit(2000000233.512:52): avc: denied { associate } for pid=24436 comm="syz-executor.7" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_sessions_t:s0" [ 405.458897] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 405.459897] Bluetooth: hci3: Injecting HCI hardware error event [ 405.461030] Bluetooth: hci3: hardware error 0x00 03:37:14 executing program 4: r0 = memfd_secret(0x0) finit_module(r0, 0x0, 0x0) 03:37:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082102, &(0x7f0000000000)) 03:37:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x25, &(0x7f0000000280)=""/37}, &(0x7f00000002c0)="46292ffad3f1", 0x0, 0x0, 0x10001, 0x0, &(0x7f0000000380)}) 03:37:14 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x0) 03:37:14 executing program 1: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:14 executing program 0: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:14 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 03:37:14 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x8a', 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffd1f) fcntl$addseals(r0, 0x409, 0xe) 03:37:14 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x0) 03:37:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xc, 0x7, 0x0, {0x3, '*@@'}}, 0xfdef) 03:37:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockname(r0, 0x0, &(0x7f00000000c0)) 03:37:14 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 03:37:14 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) 03:37:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockname(r0, 0x0, &(0x7f00000000c0)) 03:37:14 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x0) 03:37:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xc, 0x7, 0x0, {0x3, '*@@'}}, 0xfdef) 03:37:15 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x8a', 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffd1f) fcntl$addseals(r0, 0x409, 0xe) 03:37:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xbc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:37:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockname(r0, 0x0, &(0x7f00000000c0)) 03:37:15 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 03:37:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000140)=""/134, &(0x7f0000000200)=0xfffffffffffffead) 03:37:15 executing program 0: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xc, 0x7, 0x0, {0x3, '*@@'}}, 0xfdef) 03:37:15 executing program 1: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) kcmp(r0, r0, 0x0, r1, 0xffffffffffffffff) 03:37:15 executing program 7: ppoll(&(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f00000000c0), &(0x7f0000000100), 0xfffffffffffffd00) 03:37:15 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 03:37:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockname(r0, 0x0, &(0x7f00000000c0)) 03:37:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xc, 0x7, 0x0, {0x3, '*@@'}}, 0xfdef) 03:37:15 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="2d3658028f1372602f4d0b350c5d90d516a6b8a58c1f07a858da09331b16a0b33c147a486be26e2cf8a4b9830f773e33977aab3cc81a5fb0c79ddbf29c74", 0x3e}], 0x2) 03:37:15 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 03:37:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xbc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:37:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) [ 407.509074] Bluetooth: hci3: Opcode 0x0c03 failed: -110 03:37:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c00000/0x1000)=nil) 03:37:15 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) 03:37:15 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xdc800, 0x1e, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000011000)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000011100)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000011200)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000011300)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011400)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011500)="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"/288, 0x120, 0xe000}, {&(0x7f0000011700)="22001d0000000000001d00080000000008007809140b2a3a0802000001000001010022001c0000000000001c00080000000008007809140b2a3a080200000100000101012a002c0000000000002c1a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xe800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0021000000000000210a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00270000000000002728230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011a00)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c002c0000000000002c1a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0xf800}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10000}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x10800}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x16000}, {&(0x7f0000012200)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000012400)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000012500)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000012600)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000012700)="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"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000012c00)="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", 0x220, 0xce7e0}, {&(0x7f0000012f00)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000013000)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000013100)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000013200)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000013300)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000013400)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}], 0x0, &(0x7f0000013500)) 03:37:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xbc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:37:15 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(r0, &(0x7f0000000000), r0, 0x0, 0x0, 0x0) 03:37:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, 0x0, 0x46) 03:37:15 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd400080b) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xd400080b) 03:37:15 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x8a', 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffd1f) fcntl$addseals(r0, 0x409, 0xe) [ 407.729601] audit: type=1400 audit(2000000235.857:53): avc: denied { watch_reads } for pid=24745 comm="syz-executor.0" path="/syzkaller-testdir835321370/syzkaller.bdFSN7/205/file0" dev="sda" ino=16080 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 03:37:15 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454c8, 0x0) 03:37:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xbc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:37:15 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @private2}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) 03:37:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='user\x00', r0) 03:37:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@init_itable}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}]}) 03:37:15 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:37:15 executing program 4: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) [ 407.860231] ext2: Bad value for 'resgid' [ 407.860628] ext2: Bad value for 'resgid' [ 407.864279] ext2: Bad value for 'resgid' [ 407.864670] ext2: Bad value for 'resgid' 03:37:16 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts={{0x11}}], 0x18}}], 0x1, 0x0) [ 407.895367] vcan0: tun_chr_ioctl cmd 1074025672 [ 407.895841] vcan0: ignored: set checksum enabled [ 407.957471] vcan0: tun_chr_ioctl cmd 1074025672 [ 407.957877] vcan0: ignored: set checksum enabled 03:37:16 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa41024, &(0x7f00000001c0)=ANY=[]) 03:37:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x17, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:37:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:37:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 03:37:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000180)) 03:37:16 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) inotify_init() syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0) 03:37:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:37:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36383530363930383600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020dbf4655fdbf4655fdbf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) [ 408.098652] audit: type=1326 audit(2000000236.224:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24777 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d43385b19 code=0x0 03:37:16 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 03:37:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') pread64(r0, &(0x7f0000000040)=""/60, 0x3c, 0x0) 03:37:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', '-[.\x00'}) 03:37:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:37:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x5412, 0x0) 03:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:37:16 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_5={0x14, 0x5, {0x5, 0xdd, 0x1}}, 0x0) 03:37:16 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/191, 0xbf) 03:37:16 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x84013, r0, 0x0) 03:37:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 03:37:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchmod(r0, 0x0) 03:37:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 408.925831] audit: type=1326 audit(2000000237.051:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24777 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d43385b19 code=0x0 03:37:17 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 03:37:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, &(0x7f0000000140), 0x4) 03:37:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x5412, 0x0) 03:37:17 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xac1414ad}}, 0x1c, 0x0}}], 0x1, 0x0) 03:37:17 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="12fdad85f18c", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:37:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:37:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:37:17 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) 03:37:17 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40082406, 0x0) 03:37:17 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8a0f91c5c00"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 03:37:17 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x16, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2) 03:37:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x8}) 03:37:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x5412, 0x0) 03:37:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000003d00), &(0x7f0000003d40)) 03:37:17 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) 03:37:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x49, 0x2}, 0xe) 03:37:17 executing program 6: perf_event_open$cgroup(&(0x7f0000001840)={0x6, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5451, 0x0) 03:37:17 executing program 0: setitimer(0x0, 0x0, 0x0) 03:37:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x5412, 0x0) 03:37:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 03:37:17 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4110, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:37:18 executing program 7: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@hide}, {}, {@uid}, {@utf8}]}) 03:37:18 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x200000) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:18 executing program 6: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x0) r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:37:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040), 0x4) 03:37:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:18 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x40086602, 0x0) [ 409.969924] No source specified [ 409.975529] No source specified 03:37:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/92, 0x5c) 03:37:18 executing program 5: r0 = memfd_secret(0x0) openat$cgroup_freezer_state(r0, &(0x7f00000006c0), 0x2, 0x0) 03:37:18 executing program 0: clock_gettime(0x0, 0x0) 03:37:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 03:37:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000a40)=""/253) 03:37:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:37:18 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 03:37:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:18 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getpeername$inet(r0, 0x0, 0x0) 03:37:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 03:37:18 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000000)={0x0, 0x12}) 03:37:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB='journal_ioprio=0x00000000010']) 03:37:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:18 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) [ 410.406533] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 410.413117] EXT4-fs: Invalid journal IO priority (must be 0-7) 03:37:18 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000000)={0x0, 0x12}) 03:37:18 executing program 7: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x14380) 03:37:18 executing program 4: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 03:37:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) 03:37:18 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 03:37:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x401, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0x1100}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) 03:37:18 executing program 1: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) dup2(r1, r0) 03:37:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 03:37:18 executing program 1: r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/112, 0x70}, {0x0}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 03:37:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000040)={@mcast2}, 0x20) 03:37:18 executing program 7: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) 03:37:18 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000000)={0x0, 0x12}) 03:37:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x4044850) 03:37:18 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) 03:37:18 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file1\x00', 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000002000)='./file0\x00', 0x0, 0x0, 0x0, 0x81029, &(0x7f0000002300)) 03:37:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001180)={0x2, &(0x7f0000000000)=[{0x9, 0x20, 0xf7, 0x17}, {0x7fff, 0x76, 0x7, 0x10001}]}) r1 = msgget(0x1, 0x5c2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000100)={{0x0, 0x1f, 0x53, 0x100, 0x9325, 0x0, 0x7, 0x3f, 0x7f, 0x100, 0x2c9e, 0x3, 0x0, 0x0, 0x2}}) msgctl$IPC_RMID(r1, 0x0) r2 = msgget$private(0x0, 0x2) msgctl$IPC_STAT(r2, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x530e) fsetxattr$security_ima(r3, &(0x7f0000001100), &(0x7f0000001140)=@md5={0x1, "204a9a54c48d0469a42cbd31b00af606"}, 0x11, 0x1) 03:37:18 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)) 03:37:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) 03:37:19 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000000)={0x0, 0x12}) 03:37:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 03:37:19 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) 03:37:19 executing program 7: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 03:37:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="9f", 0x1}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0xb, 0x0, 0x8, {0x0, @dev, @dev}}}, @ip_ttl={{0x2b}}], 0xf}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) 03:37:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 03:37:19 executing program 0: quotactl(0x0, 0x0, 0x0, 0x0) 03:37:19 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='nfs\x00', 0x0, 0x0) 03:37:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000003cc0), &(0x7f0000003d00), &(0x7f0000003d40)) 03:37:19 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x1, &(0x7f0000000100)="dfd2af77") 03:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:37:19 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) 03:37:19 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 03:37:19 executing program 7: io_setup(0x9, &(0x7f0000000040)) move_pages(0x0, 0x20000000000000d4, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x0) 03:37:19 executing program 5: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) unshare(0x8000000) [ 411.719586] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2008011487 > max in inode 16069 [ 411.736212] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2008011487 > max in inode 16069 03:37:21 executing program 5: setresgid(0xffffffffffffffff, 0xee01, 0xee00) 03:37:21 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$eventfd(r1, 0x0, 0x0) 03:37:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 03:37:21 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) 03:37:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300), 0x500) 03:37:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 03:37:21 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x1, &(0x7f0000000100)="dfd2af77") 03:37:21 executing program 7: io_setup(0x9, &(0x7f0000000040)) move_pages(0x0, 0x20000000000000d4, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x0) 03:37:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 413.547254] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2008011487 > max in inode 16076 03:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:21 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:21 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x1, &(0x7f0000000100)="dfd2af77") 03:37:21 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) 03:37:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 03:37:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) 03:37:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x2c}}, 0x0) 03:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:21 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 413.750217] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2008011487 > max in inode 16051 03:37:21 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) 03:37:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x1, &(0x7f0000000100)="dfd2af77") 03:37:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "dde14b27ef6eb7113366ba3fb8ef046303f9dc"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1f) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "5b1b9ca02e3538d0f1ccdd3a8f1f0e69831a50"}) 03:37:23 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:23 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) 03:37:23 executing program 7: io_setup(0x9, &(0x7f0000000040)) move_pages(0x0, 0x20000000000000d4, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x0) 03:37:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 03:37:23 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000880)={0x0, 0x41, "861aef72b05ab7129273efd7e40db7a4ecfa18e72b19b244c374b252c3b0d993dc9722855731de9531459adb738ec23f5ce550304c6254b9b0402e6a4f269fc06d"}) 03:37:23 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:23 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) 03:37:23 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) [ 415.122989] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2008011487 > max in inode 16051 03:37:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @none, 0x5}, 0xe) 03:37:23 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x0, 0x0, 0x7}]}}}}}, 0x0) 03:37:23 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:37:23 executing program 4: newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) 03:37:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x9b, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xee00) 03:37:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 03:37:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 03:37:25 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 03:37:25 executing program 6: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, 0x0) 03:37:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x9b, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:25 executing program 7: io_setup(0x9, &(0x7f0000000040)) move_pages(0x0, 0x20000000000000d4, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x0) 03:37:25 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x9b, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000740)={0x30, r2, 0xcea008a6e34dc1cb, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 03:37:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, 0x0) 03:37:25 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000013c0)) 03:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x4, &(0x7f0000000280)={&(0x7f0000000340)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT, @NL80211_ATTR_STA_VLAN, @NL80211_ATTR_STA_PLINK_ACTION, @NL80211_ATTR_STA_LISTEN_INTERVAL]}, 0x64}}, 0x0) 03:37:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 03:37:25 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) vmsplice(r1, &(0x7f0000001740)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 03:37:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x9b, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3943", 0x7}], 0x1) 03:37:27 executing program 6: getcwd(&(0x7f0000000000)=""/199, 0xc7) 03:37:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xd55, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:37:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 03:37:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) syncfs(r0) 03:37:27 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) vmsplice(r1, &(0x7f0000001740)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 03:37:27 executing program 6: r0 = memfd_create(&(0x7f0000001b80)='(\\]@\'\x00', 0x4) fallocate(r0, 0x8, 0x0, 0x1) 03:37:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000200)={0x0, 0x0}, 0x10) 03:37:27 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) 03:37:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 03:37:27 executing program 0: clock_getres(0x6, &(0x7f0000000080)) 03:37:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_expedited', 0x28181, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 03:37:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x58b6, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) 03:37:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 03:37:27 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x22, &(0x7f0000000200)={'trans=tcp,', {}, 0x2c, {[{@nodevmap}]}}) 03:37:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x5, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:37:27 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) vmsplice(r1, &(0x7f0000001740)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 03:37:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:37:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_expedited', 0x28181, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 03:37:27 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 419.653158] Process accounting paused 03:37:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 03:37:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) close(r0) 03:37:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_expedited', 0x28181, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 03:37:27 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1e, &(0x7f0000001480)=[{0x0}], 0x1) 03:37:28 executing program 0: semget$private(0x0, 0x0, 0x0) 03:37:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x61}, {0x6}]}) 03:37:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0xc4) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) 03:37:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:37:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_expedited', 0x28181, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 03:37:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 03:37:28 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) vmsplice(r1, &(0x7f0000001740)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 03:37:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 03:37:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) [ 422.438128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.440463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.443936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.450192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.453268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.476427] Bluetooth: hci3: command tx timeout [ 426.526457] Bluetooth: hci3: command tx timeout [ 428.574737] Bluetooth: hci3: command tx timeout [ 430.624466] Bluetooth: hci3: command tx timeout [ 438.251063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.252223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.302578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.303763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:37:46 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 03:37:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 438.446922] tmpfs: Bad value for 'mpol' 03:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0xfffffffffffffdf4}]}]}, 0x30}}, 0x0) 03:37:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 03:37:46 executing program 4: getsockname(0xffffffffffffffff, 0x0, 0x0) 03:37:46 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c056176653d7374617469633a"]) 03:37:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) [ 438.450527] tmpfs: Bad value for 'mpol' 03:37:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000dec000/0x4000)=nil) 03:37:46 executing program 6: msgctl$IPC_SET(0x0, 0x1, 0x0) 03:37:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/106, 0x6a, 0x81) 03:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0xfffffffffffffdf4}]}]}, 0x30}}, 0x0) 03:37:46 executing program 4: setresgid(0xee01, 0xee00, 0xee01) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:37:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 03:37:46 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 03:37:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 03:37:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0xfffffffffffffdf4}]}]}, 0x30}}, 0x0) 03:37:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 03:37:46 executing program 0: keyctl$setperm(0xe, 0x0, 0x0) 03:37:46 executing program 4: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'wg2\x00'}) 03:37:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000300fcfe75066acf11"], 0x1c}}, 0x0) 03:37:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5414, &(0x7f0000000000)) 03:37:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0xfffffffffffffdf4}]}]}, 0x30}}, 0x0) 03:37:47 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='\x04') 03:37:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 03:37:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 03:37:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 03:37:47 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x40081271, &(0x7f00000029c0)) 03:37:47 executing program 4: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) 03:37:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 03:37:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 03:37:47 executing program 4: add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x32e7, &(0x7f0000003580)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003600), &(0x7f0000003640)) 03:37:47 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, &(0x7f0000000100)={0x0, 0x1000}, 0x4) 03:37:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000300fcfe75066acf11"], 0x1c}}, 0x0) 03:37:47 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) flock(r0, 0x2) 03:37:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01"], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 03:37:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 03:37:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0105303, &(0x7f00000003c0)={{}, 'port1\x00'}) 03:37:47 executing program 0: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) fork() munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:37:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:37:47 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001540)=[{0x10, 0x1, 0x51}], 0x10}}], 0x1, 0x0) 03:37:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000300fcfe75066acf11"], 0x1c}}, 0x0) 03:37:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e) ioctl$SG_IO(r2, 0x2286, 0x0) 03:37:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) 03:37:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140100001100010027bd7000fbcbdf250000000010009e2ccc9d1940ffa63dbf430a00000000ff"], 0x114}}, 0x0) 03:37:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x0]) 03:37:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x4) [ 439.676043] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.683085] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. 03:37:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8932, &(0x7f0000000300)={'wpan1\x00'}) 03:37:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000300fcfe75066acf11"], 0x1c}}, 0x0) 03:37:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 03:37:47 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 03:37:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x2c}}, 0x0) 03:37:47 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) clock_getres(0x0, 0x0) 03:37:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:37:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x25, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 03:37:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@shortname_win95}]}) 03:37:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e00f9ffff7f0000000000000c00000001"], 0x34}], 0x1}, 0x0) 03:37:47 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0xffffffff) 03:37:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in=@remote}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 03:37:47 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8a, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x10, "1833edba8fee337075f9111dd6ec05606cdb34e2126b35a16967bbd55da04e7808bd0e1df721ebfad38a53b67a874fc874791bc9f5abca3392995de2dccc0f0ea9838c77804a13afb338eb338e70b675e5999994e280cc9e2aab666f64be9778729e753b152284ad5999da9596b63e62269e8723138be8994a35a4194544"}, {0x0, 0x1de, "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"}]}}}}}}, 0x0) [ 439.921762] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:37:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1) [ 439.962978] No source specified 03:37:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000680)={'NETMAP\x00'}, &(0x7f00000006c0)=0x1e) [ 439.970989] No source specified 03:37:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x80, 0x4) 03:37:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:37:48 executing program 3: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:37:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x4b65, 0x0) 03:37:48 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8a, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x10, "1833edba8fee337075f9111dd6ec05606cdb34e2126b35a16967bbd55da04e7808bd0e1df721ebfad38a53b67a874fc874791bc9f5abca3392995de2dccc0f0ea9838c77804a13afb338eb338e70b675e5999994e280cc9e2aab666f64be9778729e753b152284ad5999da9596b63e62269e8723138be8994a35a4194544"}, {0x0, 0x1de, "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"}]}}}}}}, 0x0) 03:37:48 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/85, 0x55}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20010000, 0x0) 03:37:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:37:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0) 03:37:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(r0, 0x0, 0x0) r1 = creat(0x0, 0x0) readahead(r1, 0x0, 0x0) r2 = creat(0x0, 0x0) readahead(r2, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 03:37:48 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0xffea, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) 03:37:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001040)={0x0, 0x1, 0xfffffffffffffee9, @random="0931d115cf00"}, 0x10) 03:37:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@polexpire={0xcc, 0x1b, 0x3, 0x0, 0x0, {{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 03:37:48 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8a, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x10, "1833edba8fee337075f9111dd6ec05606cdb34e2126b35a16967bbd55da04e7808bd0e1df721ebfad38a53b67a874fc874791bc9f5abca3392995de2dccc0f0ea9838c77804a13afb338eb338e70b675e5999994e280cc9e2aab666f64be9778729e753b152284ad5999da9596b63e62269e8723138be8994a35a4194544"}, {0x0, 0x1de, "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"}]}}}}}}, 0x0) 03:37:48 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5e9", 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 03:37:48 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 03:37:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x3, 0x0, &(0x7f00000023c0)) 03:37:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 03:37:48 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8a, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x10, "1833edba8fee337075f9111dd6ec05606cdb34e2126b35a16967bbd55da04e7808bd0e1df721ebfad38a53b67a874fc874791bc9f5abca3392995de2dccc0f0ea9838c77804a13afb338eb338e70b675e5999994e280cc9e2aab666f64be9778729e753b152284ad5999da9596b63e62269e8723138be8994a35a4194544"}, {0x0, 0x1de, "05f27ec00f702b83a2061bb3028b3c5348e45bed9cf260b3407ab6dd3fba57d2399e2d2fb16531976924da0cf90aeb6c66df289e4d4b5f49727a267b6ae412f7eb7206d02c6a5f3ea352ac510b6a2645150a4af35dc75c86567e1f4e8bda1c0f91e32be4db0dd20d59bbd806d6f6d130d9540af64078c265ceda1e4e4d36435389e793a8f315eb0a98d86e683edb19a22b00b69dfa904bf6952c9143a094202fd0ba1f5d76eba309d5d73290f665cb4f6d7c4ef2c4c61eebf05a47a03939f6b8b68811371deb2cd6b6c074ff0d41df535569e66a7db1fe0e4a6e937dbb693a143032958acda4e2a9a0acf1600c25736816353685133b2ff3f3b1721843eb14034ec7551025d83b3cb0a485807019c2e163aaf24a3afb5b84ed92bcc68f3ce9997bed05a42e3a8089108fdcf9e72d13f0ea7efb81e4c58c2d6995dc7a7b3e6de133c0d8bc3357bb618d6e1f47508e3a0596b25a9f96aa5e9aa7ee7ff3bb2c8e61a7ea673f5e657c146160f3b64581c53f55518b2cbab6d5b673d1d68436a3d47071e08f91a3be8d5bb79199b689448d7dd16754a03e13a99eb25e8b5d712d8437f2212178c8ace4a2ebedcf26067b675e4047f6f3be41f83ec8275204b5f7272ee1ec9581df7f560c1f61cf40b2570fe2be17f5ed6b00fd970b572adcbbe39f80a1ce71a3799aa81ffa45411ed071e4c164f8a70ea6979a8e74d43e8bbeee02407824deba128abb7a06a264ab04777a85bac3adeeaab9babb084fcf30e6df7d8178db1c90bf76107d099aec56a124d29fd7de14a42c524d0b71aad9119e0073580cfb0395ad4e7361ce800a76fa8a92188637abfdf4cee7413e2913cbc9d4f13ff814726a0fc12e01a0c3a1827ff87fd74502d70331bf19bc8f173e32709c53ffdd82803c91eb4d3fdb4ddecf8f22103a509a7edddd0207ffd6dd0d039a9c3c78f0d837810b9e514df05fb097c897739a413d147e4025333a210b3b5a01228af9416b2bd100904e51faa12e28fb86280082ece2d5f9a2e424e63db01d77f5aa99ca51bfe902570b95707abf69b7d585ca80576b6c33c4903d4b8b88e2b3f1a1b47b83561ef94aa06f65a66435f0893e6fbdc616a3803075acd44e439ee4fa2f300eccfbcad9d690717c7d4fdc72c632d3ea5e469a41bd845bec9d18a7bfdc3902d16c69e2480ffbedb8630ae6371168898d438116d0dd42671240994e610f8de1e0db48d0d5300a97e5c3a983e48cb654e9ea5fad656b461b945c8a30be6892fbc44ba7063db148294c6c11255f848d3d7ed90465021e19b7d4b7c7590efc0443fb2956b2359864946ef5255d91d4a1d22b4b78cd2c6a38f93b70536bc357f91b84a87c73e4bc3a949a14c181dbc662e04acc98e687d647c223d02564cccff79ae1127e869487fd9cb57ff3396104727c001ff2fefcabf5bdf3fcd731963c0c78eba1d0341918677c2b1bb28e5d1a4fe1fb7177145ff1886997b8ab1a2d17b71f5c5247f623d63c940da48ef5f5f3ddee4703b966cbd76e9bc8a7590abf1246d4a15c02bf34e9dd7ea02ebbe919a39d9efa797b0f79e29d6fc1f6eec8d43952e0ad6cfd93a18c57480977ec9ec5dc9448a48dcaf38a90ec13e7b4f49063620d2f30057b1e2376e94fb680b22c55900769d9d9efd3588bbdbad4257eaf26d2dc9a39816eb1b47680e738df2dc2e4a1158a7ba6264b801dd9a3be81c0ee32821399e79eb5888f5a6bd9bddcf2d264432e3f1d5cacad32fd79caacd947321e2ec54062cb0929d1d515220f01a0b486dd0a48345ff05b899c87d379c2838ed59e7c625437a0fd9d4ef8e61ca393a0c909d64eb50020115a4c5289876675b3b1e813904d274277a5ae43830bc5e1a6a155183a0c3e28419908fa23d2bec105eba08ca83f07ecbbbed66ddf15881011e045ddc62b0dc83684c527290a29106edbbb5819225197745a1a520316262bde5212a90fa7c40f7dc317382c964d15d098f50ca2149f58a4c91a016990369167569635f88e769fbddca8d2d6edcf2872088f93d9d643bb38e25478751dde0cb6c18e5b69ddbb983f8ff6dd9228d12d8fd27182f566c377fb7b8bb5bf676705a57be8d7fc84464b1bf3d576ff35480db13af63ef38bc562ea5f7b27c537bdfea7b7ab6c441967310b48ea8ce9dad75bafb18b2005718b1226f4ed30f5c99e1f14627771a8adcc05cc68d64734576f0f57f7c2245bf7317304ce95e1ed9e49e8517a14c85e5de50dca4eed7066543129ad7598f0f94d8ac4bcc996a4afa3c6f7230a5d1d8dc73106e967b49461dcedb9a64eecbdc968fc42e24eec415244bdb86e892a9d538a9965f766e284e9bbc14058f60a320561eeba325400ac46d125430bc476e354a6cd06237c38b6ca10ea4151799d6ad6549035d4a7ba277204a8b94116a62e8e525152341b80c43a6c0ba7e0ef136f09d5da4e3acbe73fe70a146ff26b66b9278231b7018c689e9c735cf769078917070200656f92dc252d80e8746341416018cc7a98bb751d36fbebb66c24799345a6c58718e582c8d2c4c8079a3f50c6159bac98d79343ce91ee778a8d51977610584663559427d4af05104942749a260242b7a3dfa60148608ec6e67c06803f542b29660fdf9f63108067f5e6b08a80e125593de54d59506a1d722654cdc186c071c4682fa337609ab1046f8e82b0253a72c9880e9c2ea175c9b9ba706a579cbbea7acd110ba5a9668fae9c67e1ae0f453f448a30533b4e237e04932b2eab511e225c9388c5fae918cc5220fc2196566496e41cc6b999cee3329c151794fd6ebf50dfeac6ac4f6d83da6097eafaf3992217cde55812510413d6341fe408e87709cec6dbd5801c8dd12fd304c34eff3c81a57ea2bd421764b212fca85a7df2d51a375b88b37b0fee9353daf76c2eb3d5fd23615ec7a8db605bfa96f6976cb1d2bb7c5f2394531ef88df9567c2f083a6f73959f917f486a9ed3e54d1efb7c6bd91a8d081a8e3f22290d974bc58d33b1ed846e925a7258ca2b4dea58c3a4973bab8553b16c64d93b8a4634bc913bb744332e6e3ec935977a7f94f22114c78645d58032a43d8ddc32108f1413a10cea7e20fa18d088985ff8160fbac0d84add7a9f0892c90947f9eadffec645fcb6358cc9dee654627cef798f4af4ba0cc74b0e531fcc9326fe14a5db2128ef5483a0be9ac14ae945e12c8fd3563f9ca0f0e004269e84058818ac13fe4be5fb772ba87ecbccaf9bcdfe52b9d258e11a15553ceb6a13d536b47765fd3fd7b7bbb5ea712321636d89aebdcefbd328ff5f82d85b4123ded3fdb098928f1a47650e05e902d36bf93eae162420bbbd9500554de53691517676950501112590cb53cdc2813cbecbf2e708a0d5045c5824f94eb8e907c7f79349f6ab3ff5209cef15f2f302f45e514631eb88ffa7a7cd78bdbe49e3d22e558b75d2935e5d6c2984a53b638962ac481837d683e38e24929e55fa8fa78c2ad34b247fdf6737c2089777afa789d45e5cc462d0ae57a04a55fd71ed9ac978bc4c3aa24f8406b45014404f64488f787049c5e955a1c32db61ba5dae360bedb3d7a853c18fb5087d6f66205db03829fef4965e30f36dc53fb367d4f7827a5d6f99dee28422492f93bd19eaa011737eb934f00f7f2fc6e1033e07173ccd34ae7dfe37143574f5b0c3b7fae8897497cccf4643aacb856c2ea97a2f07c85f30ed17adc39c019849741ae8ced6805189be57213f7f51853481875d8a3c8fc283f7412d9024e6fbb1ce5f2f0acfef1bae69ddcc41bf5a8bd531b557c96860b895fb3c71acea6557fdb1ea034c6cf39ed521d41a1eb2b0651dcc9fb3f0fd1c336e0f43cc7d6205164c206b8322aea1a87c35979ae41de7ff13731630ff2f03a533ec57fe3af75ce3488932a9189b90228520eabebbb796c851c8033e40662642bced54df07b6926e27df53e4530b87bef4b3dfb389355c4b05a489ee6b023dd25e1fd3ef8dc2fec5630c733fafdc24c2f5d329fd783438bbf140c8885c658b6c963463fb31b931ef11113ec550961c850740881a12d5b88397cebdf92be4a29872a81f293e84035d102d6e8e288ecf3b09b8d9d478cd48e18d65113066d087e5b55874f86e82da98fb845584c8f5e7ee699639576468cfd2c8918b91bef0b80c91628c0bb9819a5414fe2369ce1a58bf58b331ec1587cbd7a9f96dc35351b1c1f23e36fb817813107620159c793dd9345739ec02faedec127681f5edc2b78a2048e8a510df8378abfe758ce5325e5e33d489c17c6159afdcddc2f60a34e4702e6fa806337608e0dcbe288aab78941c5ed8e7b1d662851ed0a71a288dc9a2a48237b7610475c12342ce81d51355e60ca66fa3f59025aacdd43f77b1c306bea5d16a8197eda7ad3c892736420c9d52aa14541d38f049c7134e11ec72f922fecc1862bb28306de4556d9c153e142979a4eac271aca5876f7761125fd0c663200149987952a8b6fcff821111123b2b06f20b546e8d6507ddb2a17a0ec26c9c05c32c8cd794607b99edc5838c59767a48754fd950b8cfa68506f682be685271867989ac606105782720055bb4e23ca9d3a34b80495f767ad30d47920d8dafd908f05d3b98677c37d1d9add0c5b100adb1c3289a16b4f6c02a1f4deda3cd464d9316e42f010b6e56d6b1ad9ec7c642772883454043c224e6367dfea95dec8ba894d78a5e1ca42f48779b6b01029d4b2c6b5b20c7cf5255225dc046c5e4b2d442598b4092c7a23097728e166d7210ca6ea6e12af2453043a54e758e413a648262b3956701a8fc40b6ec253b2d65d0c5f4aaadc0dc426ea165ca3f6b1225f39926675c030aa6512a687634ea7d858f80a287e2f71cb276daecffb8f0c2d9a97e90b673983fb869bf2e39ccc3b2b8d41302b88aca7d14f1a746242d85844185756b2cd0e7e7e889e753b9d22723e14c90d140c173427634d9c2c118ad7a6cf5491d21b95893f531ce09457c08dbf7925695c0e759f364ffcbe4f7a4924f6c576ff165ce649b26227e786a8e244c111d8b60a6526fa760fd20f622ae5ba70c9b19a438fa8583873f539cf946f42ecefa55c971d92ec44a1f9f0d248a01fd06f05002b69ba4197ce021e89b09bebc52c9e532908d5fca6434139a375f6bd9637c55beded540d30888b65c862b23a6dbe5ed268f026e5eb38f5ec5d5cccc4545e39a78a93ce5884d56d472991cfdecf739597f231dcba7003676c5365a64522f58963f58694d78a4a02e781978e02714d636c14acac7a568b8b3863187deb035b1f701ced0fd8595456f8b9b91b99ac255beff1007a369849e1156db1ae47704b7bfb0e28a69ec952efbd6c25329ce8c9810500f3d1dc7216a39abbbe6e6079e542e5c68ed743187d56b55c2bd381e98e2d1a866a597c543e5d8f38f5110e2b46"}]}}}}}}, 0x0) 03:37:48 executing program 4: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe6, 0x19, 0x9, 0x0, 0x19d2, 0x1433, 0xf06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xbf, 0x70}}]}}]}}, 0x0) 03:37:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) [ 440.384143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.387035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:37:49 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='name') 03:37:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/125, 0x7d) read(r0, &(0x7f0000000080)=""/1, 0x1) 03:37:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 03:37:49 executing program 7: rt_sigsuspend(&(0x7f0000000400)={[0x9]}, 0x8) 03:37:49 executing program 4: keyctl$read(0xb, 0x0, 0x0, 0x0) 03:37:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 03:37:49 executing program 5: kexec_load(0x0, 0xfffffffffffffedd, 0x0, 0x0) 03:37:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @link_local}, 0x10) 03:37:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000001c0)) [ 441.042293] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode 03:37:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(0x0) [ 441.064143] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 441.077715] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode 03:37:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/125, 0x7d) read(r0, &(0x7f0000000080)=""/1, 0x1) [ 441.106540] mac80211_hwsim hwsim30 wlan0: left promiscuous mode 03:37:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/72, 0x48, 0x10001) 03:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7f}]}, 0x1c}}, 0x0) 03:37:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, 0x0, r1) 03:37:49 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xb}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 03:37:49 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) read(0xffffffffffffffff, 0x0, 0x2300) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:37:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/125, 0x7d) read(r0, &(0x7f0000000080)=""/1, 0x1) 03:37:49 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0xc) 03:37:49 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@generic={0x7, 0x3, "95"}, @rr={0x7, 0x3}]}}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0) 03:37:50 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:37:50 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020660b, &(0x7f0000000180)) 03:37:50 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d0", 0x1}], 0x1) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="ab", 0x1}], 0x1, 0x0) 03:37:50 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3) 03:37:50 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x0) 03:37:50 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 03:37:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/125, 0x7d) read(r0, &(0x7f0000000080)=""/1, 0x1) 03:37:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) accept4(r0, 0x0, 0x0, 0x0) 03:37:51 executing program 5: r0 = memfd_create(&(0x7f0000000100)='veth1_macvtap\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 03:37:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) 03:37:51 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020660b, &(0x7f0000000180)) 03:37:51 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}}}}, 0x0) 03:37:51 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d0", 0x1}], 0x1) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="ab", 0x1}], 0x1, 0x0) 03:37:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:51 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.high\x00', 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 03:37:51 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) read(0xffffffffffffffff, 0x0, 0x2300) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:37:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 03:37:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1021085, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x28000, 0x0) 03:37:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:37:51 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 03:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}]}]}, 0x28}}, 0x0) 03:37:51 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d0", 0x1}], 0x1) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="ab", 0x1}], 0x1, 0x0) 03:37:51 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 03:37:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', 0x0, 0x0) 03:37:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140), 0x4) [ 443.664475] 9pnet_virtio: no channels available for device 127.0.0.1 [ 443.673559] 9pnet_virtio: no channels available for device 127.0.0.1 03:37:52 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/crypto\x00', 0x0, 0x0) 03:37:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:37:52 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d0", 0x1}], 0x1) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="ab", 0x1}], 0x1, 0x0) 03:37:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x125001) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) openat$incfs(r0, 0x0, 0x0, 0x0) getuid() chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 03:37:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) 03:37:52 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 03:37:52 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020660b, &(0x7f0000000180)) 03:37:52 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) read(0xffffffffffffffff, 0x0, 0x2300) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 444.340375] 9pnet_virtio: no channels available for device 127.0.0.1 03:37:52 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 03:37:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b66, &(0x7f00000000c0)={0x1753}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 03:37:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0bc5310, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) 03:37:52 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/crypto\x00', 0x0, 0x0) [ 444.484275] 9pnet_virtio: no channels available for device 127.0.0.1 03:37:52 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 03:37:52 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 03:37:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "2ed47e"}) [ 444.652552] 9pnet_virtio: no channels available for device 127.0.0.1 [ 445.443328] Bluetooth: hci0: Opcode 0x0401 failed: -4 03:37:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000004c0)=""/4096) 03:37:53 executing program 5: getpid() getpid() memfd_create(0x0, 0x0) pidfd_open(0x0, 0x0) memfd_create(&(0x7f0000000000)='\x86@\x16\xb5\x8f\xeb\x12\\\x03T\xc0P\xfb\x0e\xcb\xdc\x8c!\x10\x97F\x1b|J\x1e_\x0f\xd1\xa7|\xa4\xfb\"i\xf9\xd5\xa7\x826\xca\x82^q\xb5\x9d<\x85\xdcr\xa3\x82\xb1\xe6\xfb7v\xddC\x9b\x8e\xb1I\xb8J\x92\xf9_k\\\xd4\x85@!\xb7c\xe8t\xf3.\x97\a:\xae_\xe9su\xb0\x8a\x19@\x06lPFc\xe6h\x0e\x1d\xa4\x87\x96\xec\x14\xd7\x99\x86\xa5o\x8a\xd9\xda\xec\xdf\x92\x04\x00\x00\x00\x99e\xfew\xbe-a', 0x0) 03:37:53 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 03:37:53 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = io_uring_setup(0x4516, &(0x7f0000000140)) dup3(r0, r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80000) 03:37:53 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) read(0xffffffffffffffff, 0x0, 0x2300) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:37:53 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020660b, &(0x7f0000000180)) 03:37:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xccb9a74c721aaad6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:53 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/crypto\x00', 0x0, 0x0) 03:37:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}]]}, 0x30}}, 0x0) 03:37:53 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf423f, 0x6, 0x0, 0x0, 0x81, 0x0, 0x1000000000400, 0x0, 0x0, 0x0, 0x3, 0x10001, 0xffd}) 03:37:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fspick(0xffffffffffffffff, 0x0, 0x0) 03:37:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_adv_tx_power={{}, {0x3, 0x3}}}}, 0x8) 03:37:53 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/crypto\x00', 0x0, 0x0) [ 446.001364] Bluetooth: hci5: unexpected event for opcode 0x2007 [ 446.003221] Bluetooth: hci5: unexpected event for opcode 0x2007 03:37:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000019240)=""/102400, &(0x7f00000000c0)=0x19000) 03:37:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsync(r0) 03:37:56 executing program 0: r0 = epoll_create(0x2b) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [ 446.632183] Bluetooth: hci0: command 0x0401 tx timeout 03:37:57 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 03:37:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x801}, 0x14}}, 0x0) 03:37:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0xc, 0x0, 0x0) 03:37:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 03:37:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5446) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x100, 0x0, @empty}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000100)) 03:37:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:37:57 executing program 3: open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x5d) 03:37:57 executing program 0: r0 = eventfd(0x0) signalfd4(r0, &(0x7f0000001ac0), 0x8, 0x0) 03:37:57 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 03:37:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 03:37:57 executing program 6: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:37:57 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffffc000) 03:37:57 executing program 1: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 03:37:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x6, "d8246ba375d1"}}) 03:37:57 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb, 0x8001}) 03:37:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1002000) 03:37:58 executing program 6: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000140)) 03:37:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 03:37:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001600)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}) 03:37:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000), 0x14) 03:37:58 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) 03:37:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x4) 03:37:58 executing program 3: perf_event_open(&(0x7f0000001400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff86d88ffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:58 executing program 5: syz_emit_ethernet(0x2ce, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60c770cc02982c0000000000000000000000000000000000ff0200000000000000000000000000013a0a0001"], 0x0) [ 448.358607] Unsupported ieee802154 address type: 0 [ 448.371722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 448.372716] blk_print_req_error: 15 callbacks suppressed [ 448.372732] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 448.373157] Unsupported ieee802154 address type: 0 [ 448.432453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 448.433307] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:37:58 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f00000002c0)=0x54) 03:37:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) 03:37:58 executing program 5: ioperm(0x3f, 0x6, 0x400) ioperm(0x0, 0x8000, 0x0) 03:37:58 executing program 4: rt_sigaction(0xf, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 03:37:58 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) 03:37:58 executing program 1: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) linkat(r3, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 03:37:58 executing program 3: perf_event_open(&(0x7f0000001400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff86d88ffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:58 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xb) ioprio_set$pid(0x1, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6800) sendfile(r0, r1, 0x0, 0x68e146a1) 03:37:58 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x310) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:37:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x6fc6280b) 03:37:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) 03:37:58 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) 03:37:58 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local, @remote}}}}, 0x0) 03:37:58 executing program 4: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={[{@rodir}]}) 03:37:58 executing program 6: execveat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0) 03:37:58 executing program 3: perf_event_open(&(0x7f0000001400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff86d88ffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 448.855364] No source specified [ 448.862648] No source specified 03:37:59 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local, @remote}}}}, 0x0) 03:37:59 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000001780)) 03:37:59 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) 03:37:59 executing program 3: perf_event_open(&(0x7f0000001400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff86d88ffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x6fc6280b) 03:37:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 03:37:59 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/227, 0xe3}], 0x1) 03:37:59 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local, @remote}}}}, 0x0) 03:37:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 03:37:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x6fc6280b) 03:37:59 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:37:59 executing program 2: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_enter(r0, 0x31bf, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:59 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 03:37:59 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local, @remote}}}}, 0x0) 03:37:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000200)=@ethtool_perm_addr}) 03:37:59 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x45, &(0x7f0000000000)=0x9, 0x4) 03:37:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) 03:37:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) 03:37:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x6fc6280b) 03:37:59 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) 03:37:59 executing program 6: msgctl$IPC_RMID(0x0, 0xff0f0000) [ 449.611002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 449.624686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 03:37:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0x2}) [ 449.636731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.644833] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.652239] Bluetooth: hci0: Opcode 0x0406 failed: -4 03:37:59 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000180)={0xd}) [ 449.665376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 449.681973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.692658] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 449.705013] serio: Serial port ptm0 [ 449.708414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 449.719280] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 449.733253] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 449.744378] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 449.769374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.774161] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 449.791545] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 449.793627] serio: Serial port ptm0 [ 449.853696] Process accounting resumed [ 449.860426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 449.862645] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 449.864462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.865931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.867933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.870626] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 449.872543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 03:38:00 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:38:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setuid(r1) 03:38:00 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffa}) 03:38:00 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 03:38:00 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) sync_file_range(r2, 0x1, 0x0, 0x1) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:00 executing program 2: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_enter(r0, 0x31bf, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) 03:38:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/149) [ 449.937440] serio: Serial port ptm0 03:38:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ec0)={'vlan1\x00', 0x0}) 03:38:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/149) 03:38:00 executing program 5: syz_emit_ethernet(0x6a, &(0x7f0000000500)={@multicast, @random="30db72ef4c7a", @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x17, 0x0, [@private, @loopback, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@private}, {@remote}, {@loopback}]}]}}}}}}, 0x0) 03:38:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x545d, 0x0) 03:38:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) 03:38:00 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mount(&(0x7f0000000080)=@filename='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x209443, 0x0) 03:38:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/149) [ 450.094794] serio: Serial port ptm0 03:38:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$eventfd(r0, &(0x7f00000004c0), 0x8) [ 450.149470] ======================================================= [ 450.149470] WARNING: The mand mount option has been deprecated and [ 450.149470] and is ignored by this kernel. Remove the mand [ 450.149470] option from the mount to silence this warning. [ 450.149470] ======================================================= [ 450.258083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.258727] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.262230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.262788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.263364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.263912] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 450.267687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 03:38:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:38:00 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:38:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x17e}) 03:38:00 executing program 2: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_enter(r0, 0x31bf, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) 03:38:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/149) 03:38:00 executing program 6: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 03:38:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) [ 450.358317] serio: Serial port ptm0 03:38:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x17e}) [ 450.392314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.393000] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.393780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.396590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.397628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.398329] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 450.398892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 03:38:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x40}, [{0x2, 0xffff, 0x3f, 0x7, 0x3f, 0x6, 0x5, 0x1}, {0x0, 0x1f, 0x473, 0x9, 0x40, 0x5, 0x401, 0x5}], "a0115e5c71ed7e885ffca5a6d5b9061eda26f82c0ae2617b288f7b9c5db3c8de1dfebae66229a46783eb5441ff851472ee378733d014c93e14412d88f4ae0aaed5480fe4ed0d4f9eb6cb8aecf8439d23fd1e36deb20598de9aa2f7183196031f2ac9840fbefd75e4c78470634a864f85a6000dd43d3478126336a379ff979064da3ce5a7f6fa9b196eb05dff0be59813dc9b2d142af7e0e6831a1134fb2b1a540ccb1abf1aa83283cfdf2643c4b260533e869cf85fa1c9f282cc93b3bfad", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa6e) 03:38:00 executing program 6: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 03:38:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:38:00 executing program 2: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_enter(r0, 0x31bf, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:38:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x17e}) [ 450.579998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.580938] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.582179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.582809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.584472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 03:38:00 executing program 6: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 450.588009] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 450.590238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 03:38:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) 03:38:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast1}, @vsock={0x28, 0x0, 0x0, @hyper}, @qipcrtr}) 03:38:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) 03:38:00 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:38:00 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r0, 0x0) 03:38:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:38:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:38:00 executing program 6: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 03:38:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x17e}) 03:38:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xd}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 03:38:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:38:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x1f, 0x4) 03:38:00 executing program 2: syz_io_uring_setup(0x44ac, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x160}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r0 = syz_io_uring_setup(0x46e1, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x46e1, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1a400, 0x0) eventfd2(0x1000000, 0x0) io_setup(0x2, &(0x7f0000000080)) syslog(0x2, &(0x7f0000000000)=""/110, 0x6e) 03:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0xb, 0x0, &(0x7f00000018c0)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @mcast2, @local, 0x8, 0x8, 0x2f, 0x100, 0x4, 0x4000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x0, 0x0, &(0x7f0000001140)}) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) preadv2(r1, &(0x7f0000001440)=[{&(0x7f0000001040)=""/113, 0x71}], 0x1, 0xff, 0x0, 0x0) 03:38:01 executing program 5: socket$inet6(0xa, 0xb, 0x0) 03:38:01 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff}) mq_getsetattr(r0, 0x0, 0x0) 03:38:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@loopback, @remote}, 0x8) 03:38:01 executing program 4: r0 = fork() ptrace(0x10, r0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x9e9) wait4(r1, 0x0, 0x80000000, &(0x7f0000000300)) r2 = fork() kcmp(r0, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r3 = fork() ptrace(0x10, r3) wait4(0x0, 0x0, 0x8, &(0x7f00000003c0)) r4 = fork() ptrace(0x10, r4) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$getsig(0x4202, r4, 0x3, &(0x7f0000000140)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0xee00, 0xee01, 0xee01, 0x0, 0x1, 0x100}, 0x0, 0x0, 0x3f, 0x1, 0x4, 0x1, 0xae4, 0x20, 0x5, 0x6cf, 0x0, r2}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6200, 0x0, 0x1fc, 0x0, 0x31c2, 0x0, 0x2}, r2, 0x4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 03:38:01 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}, 0x10) 03:38:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 03:38:01 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x470a, 0x1) 03:38:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/87) 03:38:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x2, @none}]}}}}, 0xf) 03:38:02 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000001000)) 03:38:02 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0xf0, 0x0) 03:38:02 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 03:38:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/87) 03:38:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000280)={0x0, 0x0, "d017e9"}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 03:38:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x2, @none}]}}}}, 0xf) 03:38:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) 03:38:02 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:38:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/87) [ 452.583220] Bluetooth: hci0: command 0x0401 tx timeout [ 452.583993] Bluetooth: hci1: command 0x0c1a tx timeout [ 452.584132] Bluetooth: hci5: command 0x0406 tx timeout [ 452.584165] Bluetooth: hci4: command 0x0406 tx timeout [ 452.647198] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.648346] Bluetooth: hci7: command 0x0405 tx timeout [ 452.649598] Bluetooth: hci2: command 0x0c1a tx timeout 03:38:03 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 03:38:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x2, @none}]}}}}, 0xf) 03:38:03 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)) 03:38:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 03:38:03 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000080)) 03:38:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/87) 03:38:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 03:38:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 03:38:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x35, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:38:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x2, @none}]}}}}, 0xf) 03:38:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) 03:38:03 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="041606"], 0x9) 03:38:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000380)=[{r0}], 0x1, 0x8) 03:38:03 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff"], 0x14}], 0x1}, 0x0) 03:38:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v3, 0x18, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000080)=ANY=[@ANYBLOB="00fb150000ffda5f5a671e964232e8cebb69d9d665"], 0x15, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 03:38:03 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xffffffff, 0xffffffff000}) [ 453.431878] wlan0: mtu greater than device maximum 03:38:03 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) ustat(0x6, &(0x7f0000000040)) 03:38:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="fcdd8b95833c3ce1b2a2dcc026f2f492d813b959318659adc906d6ec4d387f4c03588bdc", 0x24}], 0x1) 03:38:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0) 03:38:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}}) 03:38:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 03:38:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000200)) 03:38:03 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff"], 0x14}], 0x1}, 0x0) 03:38:03 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) 03:38:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}]}, 0x2c}}, 0x0) 03:38:03 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[], [{@uid_eq}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 03:38:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21030000}) 03:38:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 03:38:03 executing program 6: pipe2$9p(0x0, 0x0) 03:38:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 03:38:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x44, &(0x7f0000000040), 0x4) 03:38:04 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff"], 0x14}], 0x1}, 0x0) 03:38:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:38:04 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x0) 03:38:04 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) close(r0) 03:38:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 03:38:04 executing program 1: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1800000) 03:38:04 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff"], 0x14}], 0x1}, 0x0) [ 454.171730] audit: type=1326 audit(2000000284.276:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28263 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 [ 454.631129] Bluetooth: hci0: command 0x0401 tx timeout [ 454.696187] Bluetooth: hci7: command 0x0405 tx timeout [ 454.697234] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.698237] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.996203] audit: type=1326 audit(2000000285.103:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28263 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 03:38:05 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f00000011c0)='./file0\x00', r0, &(0x7f0000001200)='./file0\x00') 03:38:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 03:38:05 executing program 0: io_uring_setup(0x1b09, &(0x7f0000000840)) 03:38:05 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) close(r0) 03:38:05 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x3f55, &(0x7f0000000000)={0x0, 0x7acb, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085504, 0x0) r2 = io_uring_setup(0x864, &(0x7f00000003c0)={0x0, 0xc4e3, 0x8, 0x2, 0x23}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002680)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='statm\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000002740)=[r4, r3, r5, 0xffffffffffffffff, r3], 0x5) syz_io_uring_setup(0x871, &(0x7f0000000280)={0x0, 0x129f, 0x20, 0x1, 0x23d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000028c0)=0xe8) fork() 03:38:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:05 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000140)='*\\&\'\x00') 03:38:05 executing program 6: ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) [ 455.152476] random: crng reseeded on system resumption [ 455.181354] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 455.182972] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 455.184030] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 455.185211] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 455.186371] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 455.188202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.189119] I/O error, dev sr0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.190423] buffer_io_error: 14 callbacks suppressed [ 455.190438] Buffer I/O error on dev sr0, logical block 16, async page read [ 455.193961] audit: type=1326 audit(2000000285.296:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28292 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 [ 455.211271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.212259] I/O error, dev sr0, sector 17 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.213547] Buffer I/O error on dev sr0, logical block 17, async page read 03:38:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x11}, {0x2}, {0x6}]}) [ 455.238795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.239691] I/O error, dev sr0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.240977] Buffer I/O error on dev sr0, logical block 18, async page read [ 455.263575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getpeername(r0, &(0x7f0000000300)=@generic, 0x0) [ 455.264845] I/O error, dev sr0, sector 19 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.266382] Buffer I/O error on dev sr0, logical block 19, async page read [ 455.274653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.275726] I/O error, dev sr0, sector 20 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.277219] Buffer I/O error on dev sr0, logical block 20, async page read [ 455.286413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.287670] I/O error, dev sr0, sector 21 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.288972] Buffer I/O error on dev sr0, logical block 21, async page read [ 455.310427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.311346] I/O error, dev sr0, sector 22 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.312634] Buffer I/O error on dev sr0, logical block 22, async page read [ 455.320691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 455.321665] I/O error, dev sr0, sector 23 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 455.322939] Buffer I/O error on dev sr0, logical block 23, async page read 03:38:06 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x3f55, &(0x7f0000000000)={0x0, 0x7acb, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085504, 0x0) r2 = io_uring_setup(0x864, &(0x7f00000003c0)={0x0, 0xc4e3, 0x8, 0x2, 0x23}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002680)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='statm\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000002740)=[r4, r3, r5, 0xffffffffffffffff, r3], 0x5) syz_io_uring_setup(0x871, &(0x7f0000000280)={0x0, 0x129f, 0x20, 0x1, 0x23d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000028c0)=0xe8) fork() 03:38:06 executing program 7: clock_getres(0x2129626ab6774b83, 0x0) 03:38:06 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/88, 0x58}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/81, 0x51}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/32, 0x20}, {&(0x7f0000000e40)=""/76, 0x4c}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/196, 0xc4}], 0x7, &(0x7f0000001100)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x3, 0x1, &(0x7f0000001240)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0x10200000, &(0x7f0000000000)) 03:38:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000002c0)=0x9, 0x4) 03:38:06 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 03:38:06 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) close(r0) 03:38:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:06 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:06 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0x14) 03:38:06 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40189206, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffa}) [ 456.154426] audit: type=1326 audit(2000000286.261:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28418 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 [ 456.173983] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 456.175543] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 456.176780] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 456.177984] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 456.180442] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 456.183635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.184707] Buffer I/O error on dev sr0, logical block 16, async page read [ 456.201795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.202699] Buffer I/O error on dev sr0, logical block 17, async page read 03:38:06 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x84000441) [ 456.222464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.229412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.236274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.243757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.248317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.261393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.262874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.267328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.268924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.280297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.290251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.297580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.300782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.306516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 456.679158] Bluetooth: hci0: command 0x0401 tx timeout [ 456.744209] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.744262] Bluetooth: hci7: command 0x0405 tx timeout [ 456.745246] Bluetooth: hci2: command 0x0c1a tx timeout 03:38:07 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 03:38:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 03:38:07 executing program 7: r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) r2 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) close(r3) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r3) 03:38:07 executing program 4: timer_create(0x1, 0x0, &(0x7f00000011c0)) 03:38:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:07 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x3f55, &(0x7f0000000000)={0x0, 0x7acb, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085504, 0x0) r2 = io_uring_setup(0x864, &(0x7f00000003c0)={0x0, 0xc4e3, 0x8, 0x2, 0x23}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002680)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='statm\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000002740)=[r4, r3, r5, 0xffffffffffffffff, r3], 0x5) syz_io_uring_setup(0x871, &(0x7f0000000280)={0x0, 0x129f, 0x20, 0x1, 0x23d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000028c0)=0xe8) fork() 03:38:07 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) close(r0) 03:38:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:07 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!\x00') [ 457.127453] audit: type=1326 audit(2000000287.235:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28450 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 03:38:07 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61820100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r4}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r4, 0x1) [ 457.153193] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 457.154621] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 457.155653] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 457.156646] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 457.158868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.164441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 457.170460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.185180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 0: mq_open(&(0x7f00000001c0)='.(\x00', 0x0, 0x0, 0x0) [ 457.198285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.214361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.216534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.224423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.226833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.228485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.238504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.245539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.252487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.260416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.265321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.270594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!\x00') 03:38:07 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x3f55, &(0x7f0000000000)={0x0, 0x7acb, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085504, 0x0) r2 = io_uring_setup(0x864, &(0x7f00000003c0)={0x0, 0xc4e3, 0x8, 0x2, 0x23}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002680)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='statm\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000002740)=[r4, r3, r5, 0xffffffffffffffff, r3], 0x5) syz_io_uring_setup(0x871, &(0x7f0000000280)={0x0, 0x129f, 0x20, 0x1, 0x23d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000028c0)=0xe8) fork() 03:38:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x1) setuid(r2) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0xd) 03:38:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) 03:38:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) close(r0) 03:38:07 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!\x00') [ 457.524610] audit: type=1401 audit(2000000287.632:61): op=fscreate invalid_context="1844674407370" [ 457.534214] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 457.535632] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 457.536767] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 457.537750] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 457.539446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.545962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.551801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.560998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.564535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.571271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!\x00') [ 457.583625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.603605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.607476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.617543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.625648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) close(r0) [ 457.636752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x1) setuid(r2) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0xd) [ 457.638776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.639934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.641291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.651546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.654322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.656982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.662352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.669970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 457.829035] audit: type=1401 audit(2000000287.934:62): op=fscreate invalid_context="1844674407370" 03:38:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f00000016c0), &(0x7f0000000180)=0x8) 03:38:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) close(r0) 03:38:08 executing program 3: r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hugetlbfs\x00', &(0x7f0000000080)='%^+\x00', 0x0) close(r0) 03:38:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8001) 03:38:08 executing program 5: io_setup(0x400, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0) io_destroy(r0) 03:38:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x1) setuid(r2) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0xd) 03:38:08 executing program 2: clock_gettime(0x2, &(0x7f0000000000)) [ 458.070185] audit: type=1401 audit(2000000288.177:63): op=fscreate invalid_context="1844674407370" 03:38:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) close(r0) 03:38:08 executing program 3: r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hugetlbfs\x00', &(0x7f0000000080)='%^+\x00', 0x0) close(r0) 03:38:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 03:38:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x1) setuid(r2) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0xd) 03:38:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0) 03:38:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) dup2(r1, r0) [ 458.240472] audit: type=1401 audit(2000000288.349:64): op=fscreate invalid_context="1844674407370" 03:38:08 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="3a31e426b161", 0x0, 0xabf6, 0x10024, 0x0, 0x0}) 03:38:08 executing program 3: r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hugetlbfs\x00', &(0x7f0000000080)='%^+\x00', 0x0) close(r0) 03:38:08 executing program 7: rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='.\x00') 03:38:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000002540)={0x1f, 0xffffffffffffffff, 0x2}, 0x4c) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 03:38:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 03:38:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r1, 0xb01, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) 03:38:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x448480, 0x0) ioprio_get$pid(0x2, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 03:38:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, 0x0, 0x0) 03:38:08 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:38:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 03:38:08 executing program 3: r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hugetlbfs\x00', &(0x7f0000000080)='%^+\x00', 0x0) close(r0) 03:38:08 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev/'], &(0x7f0000000040)='./file0\x00', 0x0, 0x1001, 0x0) 03:38:08 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:38:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f01"], 0x22) 03:38:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 03:38:08 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x313243a2}) [ 458.706619] Bluetooth: hci3: unexpected subevent 0x01 length: 30 > 18 [ 458.716304] Bluetooth: hci3: unexpected subevent 0x01 length: 30 > 18 [ 458.717596] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection 03:38:08 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/245, 0xf5}], 0x1) 03:38:08 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:38:08 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000140), 0x8) 03:38:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 03:38:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 03:38:08 executing program 4: gettid() 03:38:08 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$BLKIOMIN(r0, 0x1269, &(0x7f00000029c0)) 03:38:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f01"], 0x22) [ 458.832237] Bluetooth: hci3: unexpected subevent 0x01 length: 30 > 18 [ 458.833659] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection 03:38:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f01"], 0x22) 03:38:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$snapshot(r0, &(0x7f00000003c0)=""/4096, 0x1000) [ 458.920961] Bluetooth: hci3: unexpected subevent 0x01 length: 30 > 18 [ 458.922143] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection 03:38:09 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x178}}, 0x0) 03:38:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0x0, "3b06f2dfef146060"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 03:38:09 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:38:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 03:38:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, r0, r2) 03:38:09 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f01"], 0x22) 03:38:09 executing program 1: prctl$PR_SET_NAME(0xf, 0x0) [ 459.074222] Bluetooth: hci3: unexpected subevent 0x01 length: 30 > 18 [ 459.075317] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection 03:38:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x13) 03:38:09 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:38:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000001cc0), r0) 03:38:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$tcp_mem(r0, &(0x7f0000000080)={0x100000000000000}, 0x48) 03:38:09 executing program 7: truncate(0x0, 0xfffffffffffffffd) 03:38:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 03:38:09 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x82, @none}, 0xe) 03:38:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323134393739343100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000e0f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006b1710a600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000006f20934800000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332313439373934312f66696c65302f66696c653000000000000000000000000000000000000000000000afa6093f00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009270a1b300000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000743fdfdf00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2efb56f000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) 03:38:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:38:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2016000, 0x0) 03:38:09 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 03:38:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 03:38:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x37, {0x0, @udp_ip4_spec={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ether_spec={@multicast, @multicast}}}}) 03:38:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x8) 03:38:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}}, 0x0) 03:38:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) 03:38:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) fork() mq_notify(0xffffffffffffffff, 0x0) 03:38:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1) r1 = io_uring_setup(0x6b01, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000}) io_uring_register$IORING_REGISTER_FILES(r1, 0x9, 0x0, 0x2) fcntl$setstatus(r1, 0x4, 0x4400) 03:38:09 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) 03:38:09 executing program 4: setgroups(0x6, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) 03:38:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2000000) 03:38:09 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 03:38:09 executing program 3: memfd_create(&(0x7f0000000200)='##\x00', 0x2) 03:38:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) fork() mq_notify(0xffffffffffffffff, 0x0) 03:38:09 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xff}}, {0x0, 0x0, 0x8}}}}}, 0x0) 03:38:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @empty}, 0xc) 03:38:09 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) 03:38:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5412, 0xf0ff1f00000000) 03:38:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 03:38:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, 0x0, 0x0) 03:38:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x4b68) 03:38:09 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 03:38:09 executing program 2: ioprio_set$pid(0x3, 0xffffffffffffffff, 0x0) 03:38:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 03:38:10 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\xfbn\x1e&\xf7(44\x8d\xc0\x01\xef\xe4\xea,U\xbd\xab\x01\x9ac\xf6\xd6\xff\xab\x1e\xd9\xf8\x99\x05s$\xd74\xf1\xa7\xe8.\xe2\xd1H\xac\x81\f\xf0\x19\xd4;y\xe5O\xe4\xab\xbbO\v\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) lseek(r0, 0x0, 0x4) 03:38:10 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 03:38:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$selinux_attr(r0, 0x0, 0x0) 03:38:10 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) pidfd_send_signal(r0, 0x0, 0x0, 0x4) 03:38:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) fork() mq_notify(0xffffffffffffffff, 0x0) 03:38:10 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 7: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @loopback}}}}}}, 0x0) 03:38:10 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="fdf972025159", @broadcast, @val={@void, {0x8906}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local}}}}, 0x0) 03:38:10 executing program 2: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x22, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:38:10 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 03:38:10 executing program 7: timer_settime(0x0, 0x0, 0xfffffffffffffffc, 0x0) 03:38:10 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 03:38:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) [ 460.093735] tmpfs: Bad value for 'mpol' [ 460.100647] tmpfs: Bad value for 'mpol' 03:38:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf04a, 0xffffffffffffffff}) 03:38:10 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="fdf972025159", @broadcast, @val={@void, {0x8906}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local}}}}, 0x0) 03:38:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1, &(0x7f0000001600)=[@hoplimit_2292={{0x14}}], 0x18}}, {{&(0x7f0000001700)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x17, 0x0}}], 0x2, 0x0) 03:38:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 03:38:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) fork() mq_notify(0xffffffffffffffff, 0x0) 03:38:10 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, 0x0, 0x68e146a1) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:10 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) getgid() 03:38:10 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) truncate(&(0x7f00000001c0)='./file0\x00', 0x3) 03:38:10 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="fdf972025159", @broadcast, @val={@void, {0x8906}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local}}}}, 0x0) 03:38:10 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="fdf972025159", @broadcast, @val={@void, {0x8906}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local}}}}, 0x0) 03:38:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 03:38:10 executing program 6: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}}, @in6=@private2, {@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@multicast1, @in=@broadcast}}}}, 0x128}}, 0x0) 03:38:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 03:38:10 executing program 7: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x10, 0x10, 0x3, 0x17, 0x3, 0xc09, 0x0, 0x18, 0x1}) 03:38:10 executing program 6: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 03:38:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x6180}], 0x1, 0x0, 0x0, 0x0) 03:38:10 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) dup(r0) 03:38:10 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x541c, &(0x7f00000005c0)) 03:38:10 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:10 executing program 0: time(0xffffffffffffffff) [ 460.775096] Bluetooth: hci3: command 0x0c1a tx timeout 03:38:10 executing program 7: setresuid(0xee01, 0xee00, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:38:10 executing program 1: r0 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 03:38:10 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000000)) 03:38:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5413, &(0x7f0000000000)) 03:38:10 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:38:11 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 03:38:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 03:38:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/8250_core', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 03:38:11 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0xffffffffffffff17) 03:38:11 executing program 5: perf_event_open(&(0x7f00000016c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000040), 0x3, 0x0) 03:38:11 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:11 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) 03:38:11 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 03:38:11 executing program 1: msgsnd(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 03:38:11 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa426f000) 03:38:11 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x0) 03:38:11 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000d40)="cc", 0x1) 03:38:11 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) getitimer(0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0xea60}}, &(0x7f0000000080)) 03:38:11 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa426f000) 03:38:11 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 03:38:11 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 03:38:11 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:11 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x40, 0x0, 0xc) 03:38:11 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 03:38:11 executing program 5: open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) 03:38:11 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa426f000) 03:38:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fsetxattr$security_ima(r0, &(0x7f0000000140), 0x0, 0x0, 0x0) 03:38:11 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') write$P9_RLCREATE(r0, &(0x7f0000001640)={0xa}, 0x18) 03:38:11 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "5c594261d4e73f29119005b8e925e3cd2c60ecf563bcb2b46d9c2846bc49b5cbc58a1af9c8056047f37dc86a16e70438ac8ae823ad0c7bdb3c86feab7eafa3a0ddc8f31ee45e8c6e"}, 0xa0) [ 461.508492] ./file0: Can't lookup blockdev 03:38:11 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa426f000) 03:38:11 executing program 5: keyctl$negate(0xd, 0x0, 0x0, 0x0) 03:38:11 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) sync_file_range(r1, 0x0, 0x0, 0x0) 03:38:11 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:11 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)) 03:38:11 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 03:38:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541c, 0xfffdfffdffffffff) 03:38:11 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 03:38:11 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:12 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 03:38:12 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 03:38:12 executing program 3: kexec_load(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x100000000000, 0x1000000}], 0x0) 03:38:12 executing program 5: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:38:12 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') utimensat(r0, 0x0, 0x0, 0x0) 03:38:12 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:12 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') utimensat(r0, 0x0, 0x0, 0x0) 03:38:12 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x2) 03:38:12 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:38:12 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 462.503265] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 462.504400] Bluetooth: hci4: Injecting HCI hardware error event [ 462.506364] Bluetooth: hci4: hardware error 0x00 03:38:12 executing program 3: mount$9p_fd(0xedc000000000, 0x0, 0x0, 0x0, 0x0) 03:38:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x18, 0x43, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 03:38:12 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') utimensat(r0, 0x0, 0x0, 0x0) 03:38:12 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x2) [ 462.591232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b64, 0xf0ff1f00000000) 03:38:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:38:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000100), 0x4) 03:38:12 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chmod(&(0x7f0000000180)='./file0\x00', 0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) fchmodat(r0, &(0x7f00000044c0)='./file0\x00', 0x0) 03:38:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9, 0x0, 0x5}], "a0115e5c71ed7e885ffca5a6d5b9061eda26f82c0ae2617b288f7b9c5db3c8de1dfebae66229a46783eb5441ff851472ee378733d014c93e14412d88f4ae0aaed5480fe4ed0d4f9eb6cb8aecf8439d23fd1e36deb20598de9aa2f718319603", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d7) 03:38:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001440), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 03:38:12 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x2) 03:38:12 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') utimensat(r0, 0x0, 0x0, 0x0) 03:38:12 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0) read(r0, 0x0, 0x0) 03:38:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/61) 03:38:12 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x8, 0xf0}, 0x20) 03:38:12 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) 03:38:12 executing program 0: io_uring_setup(0x44d2, &(0x7f0000000c40)={0x0, 0xf52b}) 03:38:12 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x2) 03:38:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:38:12 executing program 4: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 03:38:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 03:38:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x895e, &(0x7f0000000040)={@remote}) 03:38:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syncfs(r0) 03:38:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x0) 03:38:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:38:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getsa={0x28, 0x12, 0xffff, 0x0, 0x0, {@in=@multicast1}}, 0x28}}, 0x0) 03:38:13 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 03:38:13 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 463.029730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 463.034539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:38:13 executing program 6: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x16) mlock(&(0x7f0000870000/0x3000)=nil, 0x3000) 03:38:13 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/231, 0xe7, 0x80000000) 03:38:13 executing program 3: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000000), 0x0) 03:38:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) keyctl$read(0xb, r2, 0x0, 0x0) 03:38:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:38:13 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) fchown(r0, 0x0, r2) 03:38:13 executing program 6: sync() fork() sync() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:13 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 03:38:13 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:38:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:38:13 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x10, 0x0, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@pad1, @pad1, @generic]}]}}}}}, 0x0) 03:38:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:13 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x2) 03:38:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in6=@loopback={0x2}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:38:13 executing program 6: sync() fork() sync() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:38:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:38:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:38:13 executing program 7: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 03:38:13 executing program 3: openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0000, 0x0) 03:38:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/249, &(0x7f0000000240)=0xf9) 03:38:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:38:13 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) copy_file_range(r1, 0x0, r3, &(0x7f0000000480), 0x0, 0x0) 03:38:13 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') write$P9_RLCREATE(r0, &(0x7f0000001640)={0x3a, 0xf, 0x0, {{}, 0xa000000}}, 0x18) 03:38:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) 03:38:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:38:13 executing program 6: sync() fork() sync() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:13 executing program 1: prlimit64(0x0, 0x6, &(0x7f00000000c0), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fork() 03:38:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x10) r3 = signalfd4(r0, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x80800) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000001c0)={0x9, 0xff5d, 0x0, 0x3, 0x2, [{0x1, 0x4, 0x81f5000, '\x00', 0x1904}, {0x7, 0x0, 0x8000}]}) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0x0, 0xfffffffffffffffc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 03:38:13 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) [ 463.645466] SELinux: Context : is not valid (left unmapped). 03:38:13 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f02d5cb8841d580c2", 0x9}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 03:38:13 executing program 4: futex(&(0x7f0000000200), 0x5, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 03:38:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) r2 = inotify_init1(0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 03:38:13 executing program 6: sync() fork() sync() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:13 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:13 executing program 1: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) ftruncate(r0, 0x8800000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xc681, 0x7}) lseek(r0, 0x0, 0x4) 03:38:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3}, 0x20) 03:38:13 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:38:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:38:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 03:38:14 executing program 7: semop(0x0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0}}) 03:38:14 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:14 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 03:38:14 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x88, 0x68, &(0x7f0000000000), 0x4) 03:38:14 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) dup2(r0, r1) 03:38:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0xffffffffff600000, &(0x7f0000000580), 0x0, &(0x7f0000000600)) 03:38:14 executing program 6: futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x1000000) 03:38:14 executing program 7: semop(0x0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0}}) 03:38:14 executing program 4: perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 03:38:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:38:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:38:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) 03:38:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:38:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0xffff}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:14 executing program 7: semop(0x0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0}}) 03:38:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000005a00)={'syzkaller0\x00'}) 03:38:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001400)='cubic\x00', 0x6) 03:38:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:38:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:38:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) 03:38:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) [ 464.551102] Bluetooth: hci4: Opcode 0x0c03 failed: -110 03:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x22, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 03:38:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:38:15 executing program 7: semop(0x0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0}}) 03:38:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0647, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x4d, 0x0, 0x0, 0x0) 03:38:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:38:15 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000000)={@empty, @empty, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @local}}}}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000880)=""/66) 03:38:15 executing program 0: syz_io_uring_setup(0x5785, &(0x7f00000010c0)={0x0, 0x59f0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001140), &(0x7f0000001180)) 03:38:15 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080), 0x20) 03:38:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) 03:38:15 executing program 1: add_key(&(0x7f0000000680)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:38:15 executing program 6: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x74, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 03:38:15 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000180), 0x10) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000080)) 03:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000001700)=0x8) 03:38:15 executing program 5: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000004"], 0x28}}], 0x2, 0x0) 03:38:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xa) 03:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000001700)=0x8) 03:38:15 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8953, 0x0) 03:38:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:38:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 03:38:15 executing program 7: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000500), 0x2800, 0x0) 03:38:15 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0182101, &(0x7f0000000000)) 03:38:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) setreuid(0x0, 0x0) symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x1000) 03:38:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 03:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000001700)=0x8) 03:38:15 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='T\f', 0x2}], 0x1}, 0x20008000) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000a40)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000a80)="97e5", 0x2}], 0x1}}], 0x2, 0x20048804) [ 465.531499] 9pnet: Could not find request transport: xen [ 465.568427] 9pnet: Could not find request transport: xen 03:38:15 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 03:38:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) write$tcp_mem(r0, &(0x7f00000000c0), 0x48) 03:38:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) setreuid(0x0, 0x0) symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x1000) 03:38:15 executing program 6: syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)={0x20, 0xc, 0x6a, "e8164fbb473016027d1aa615746c306be275f2f80e28c16de6971c862e90569918ae0d80f5c65b919c3a39a148ec01b09a628a2dc116fb881752fd0267d185b850d353634807c5b0face69052b7b3cef535a2e68d48d09a838acb722c8bc8abeadcfb2976f9ddeb56223"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000005c0)={0x20, 0x0, 0x9d, {0x9b, "0feb0338af4093f3b466c1654b08723cf4375065e704fefd5dc8927fcb74ef5f9b814f843d77ad1647169eca20fdb23def760dd1f9262360d15b84143bd74060d7a79704bd93fa4eeabd9120475b8c2044be6c2257bf2be6a1220e99bf9116e5d51b720cc842989db3b71b702599a079af98a4e6fbda8fc07adf54cb4287afaaf1f215e95d506a1ff8533529481f542d890d229aa9f05bf30aa921"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x5}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf7, 0xc0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xbf, 0xfd, 0x3f}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x7, 0x80, 0x81, 0xff, 0xc0}, 0x72, &(0x7f00000007c0)={0x5, 0xf, 0x72, 0x1, [@generic={0x6d, 0x10, 0xa, "3ec389ff0384a07fbe2d96847896302b371fcb82b5608c1d1f11763818ec6324e116331225274841b71783ec79eb816138cb2c3cfd4290ad725c471de22a975916633e30737ebf462d7d3b70b55513e4c94a37c71e37adaa7d66dce08e91db9280b5291fee29c70c94f6"}]}, 0x4, [{0xb7, &(0x7f0000000840)=@string={0xb7, 0x3, "ac41acfc968029e2ad19c2a0b9c21b039396a4ca2b93d723d77793e02e0f37c8d989318c22027279a11bc54223203cab383922ac14210bd2a3dd1e4d94e6fdcb9a381024bf2bcf122c758d19d06e7c87f2ebea9d9c69facd70df2ea2e9891f2dedf6d7bf14c2c41cbc0c63ef62f605c0012e4b61de15d291b4a006db67767b08843010fc663b364cfef85f52d2debe2d574e8b0c8aada414f86a882e5321cef7b2f05bf89ce23902a3770a69c7d8d6ce49679879a4"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x42a}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80)=0x1, 0x4) getpeername(0xffffffffffffffff, &(0x7f0000000b40)=@ieee802154={0x24, @short}, &(0x7f0000000bc0)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002000)={0x0, 0x0, "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", "ada8c622a62fa536e740ecfe55a30183985b86f976e55fd7e8c19831bbe8f2cc375d339c12aae8f4a0f7ff39ef4a1a5627b96dd66b0dd03bfccb9fe634411654bba13e9f56a8165880b1a36d704c281bfc8ea4b607dd75e607a89f2ddb6c4b55901d5196803b68af370f49779ff29b6640016591ecf5143fc6ebc4ae0d9874b3fc06750207d24ccc672c0ff848ab196c704e4ac95247fe587f1798d90abbf8b6798bfad12a09494b2db789d6899d6838eea2d62011717ba2a87012e920aea5edf4e0f35e1f63fe54d83bce4d59051fecaa30b39c2ccd248bc68013b430dbcf87fc801b32d65658201a6f261c943fc56f0b68671acc7eed8352e171fea3f9df94f60f6d1b4c722ebface044f82db4eb17251eebc08fac421b4bc695880a023745b0732887e37bf215adf8e63fdec44b2a0e96e06de648f55a165b0a8f0297920125c28f86bfc3d3bd42fcdbf42f99005a751fb44672384091d33073e63a34e2dea0a0137ee6d0f7042fff555166176d04228925d77a89c21983e63b7f8510583d79a782d8425d5fa9833c2cbce3cc24cca7c6980536c894aef27cccaa6eaac839642b8dc47f84dc465214422b876a6ba7c7064d6e4a715802fed5bffc357714e119259e31e5ea784129c79e698d9b48828fcea55bc0a35a4252ea763b7364036ff06ba69a96e755ac7b93e4b79f7b4c28bda823e32e32db0fbaf8269cdd33d229e48dce79a7c4bcb46c1b6c28c51a7087222800cb08814f59b37d134b950c9bd7e30265d83319b0f8ae5c3aa2a8e3b09505f4455902f8de4929d0416c6db20ed6c4a12af254b65d1e92f8286a74f7225bccc94753ecf5a03539d03ea1a626eaae023b415b76176e28d1bf2ec98a3bb77b3926998a6446a7dfc6c730113a58e4a46156263781627e631182202acaa06780f6e67eede613985b75222361fdf921e06de666efae4d21155f96ea3df797c6c5c708e195a2f56ae4eff2421e98d2bffbc4189dcdaab2208f11484c5feed0de55e27fb68a27f92a3f2dee76ac02014f448905d1ad2e0c70c26f62e3bfe68dd173be3b35f8e2943fd4c4136cef729732c5b4b77a4dec787e08c744cfaf3a456cc1ccbbade0eb226664247e058dd76b0864671686202e07d5279481cb6d50b4f84508979f92a558a57679c1106b7e786bac1520271bb05b19f8b950ecd5ac33211a3e2cbbf7704139b00003f6cc63548b196a3ae594c61ab54d167ec96c55913e0fcceefcd007b833baee674739cbc28068ee62ae7c05565c55d8ac070fd68683f23a42c30d8077bd95be1c1223c25ca18c42866d3eb0b9d0da58511653fafe5396ff222cd827eedef546d37c2472d9756665db87c86599fa9ae44443a83505d7e285eaf018576ccca4764dc7d270470e57fc6557f9e787a2ae7c59aa597826cef60b210b0776c3ba623e3b0d516aafc6359e4c00b47cbfdb92e9073ff359de3ff9cc0126c4bf457b7ddd874104274e2786e76aed92cb6464902bc3e892281fee98320d7247c4894928120bbc3fd15323e9b1ae313579fb04200a5d79b0e6caa128553904554e8b6bd3f0dfedc9087f5d06a70da563bb2cf5a5cc6c2cbce7d4dcae416b05ed16157368ca2aca5e78f169221232c62feab8b0e217280af01d7b58865c34bcb175e3a08525191975c1e55c4894653417c3de96508de686871ae5b86e558ad9593351ef0aab96f2bd7ae5ac56d2417da2ef9617b0b5759c07602954af8dfe65eb0f0d79c06115567e011aaa3938ab21717bd5cfdd2697779273d7c7043e7b523d0d80e218d09fbba75299073bdd7111b95498d919f8287904e830748d3e80e1a2aae7a4ca842b25d7c618da041269cfd077e0d58cc52ae62fd505a309059ef5148bf6a3917ea16fea937764779d04bba153354bb88af6caa3cca3c7e224e6a614cab8d0c834774dec48189056e0cf86f1cecd933218bf8f270f754029c254ed918522911a24d1fa0428f03843c5c88c34f4ec3d08e996971b12713671b9b1c46b87902e29a32894886988286ea683506d0d8edc59d611eec5a9e2ff9a744f5ca559fd8e965484b2eadba6fe23a83b1ea073e89e05897403474eb8f47944ce12855a23510518fdae67c9e19143113c7b6b426b62516d69242c04840ce57bfcb8a1e9386b8df939ba3aef1463098aabb903f7dd5b3b69e7f2b5a5a630075e094938a8338d1fec754debdd5e97da68c648473ca481880fc7d45bdd9dfa5fee0282273c43844cd98dfc5677e35da06e5c97dd9b2ea41fea29fae711626e6f99a80b31640e978af49747345293d9662e259b23d3a54ab9d0736aa6ca87125c5707944636494a71ba59c4b67636fb2894afe7b9f5e9b2bcdd0d63222416886b51380f51bd3d145014a5d6696f365ae820ebe63d678cb139871dd87a530bb17da7abd99ff97862cc38c3dbf74406e9a6a71ab318d24fa25a0380409abeb7543f8eae2835b5e750693053d37c38b8db07ab0afdfc3d0b05682e22edcce32267ee78ceedf04fe2f1876b86dfe51161cca04aaf147c7f7f88f87480c0d51fa883b9946404ec54e6e807d25ba46c9a52fc0248dcac39cfc0e44294897cad15320d25d8ceb15854b564e39d6545d57587d7330a0f74fdfd0c20abe35120702d3ee89b1cc19aa45d7e4674bfa5d14d81199e4be1aa6260ca3d2790b36e9b3065c72117e610c8450a776fcee5f54b31bea48b25c627d70b260bd6109ba08999bc1a4000c68ac372af997b315e4df8f79a898d256f0dd9638608f69f46df49a20c36187fcfc6ffb1f63755e5b0d4092093e461924d2e9ca76c8cab7a8cc7eaea6d8530abfb95ab383a636ac72bfd85688af6fb1a081be21c21f3ef3affc76ee6ed6f2995b96f76858d6c34a990c2ab57540b900e72c83bfa7e2b3cc7995a4b88c811fb40f0a7556d790d15dc7c276a9c7b1dcb2bf4b30578d5f3ec717cd5a3f3258fcc41d05a62065c20c5fc3f43f0468fa7751f62533af4c3b607d14dc1924a59826c522fc3b15e3568991ae49e8b0f8591487347d5c59182b9b9af5cb15b76f3b120fc552ae30b94575c1406015a798ffda18add2f5704ea8b007f96b95029cfb9037928484f144faa57af9d97f6007d19bbaf5d5d675fa153b9665a5935095909f827ce7b3f3d711e93eb368d139b36e59c47a46bead35640f025591b7ad3a7a641b999e274d3f1b7fe65d3517e612068adc55ae24ea022ec2048d48f20aa7f12624d52176c9f5a364304e0d530dd1c47584a809fadde113ea5bcc6693cfe62068937b94b683473e1f8748a7452908fb1b7a35aa3bf27bd1c68185dbdc12853d05d5ad91ce8bb5f255c1cc44f51dcab0197774cce57a0116288f31f2d0fd468f696eeee4f4489d6b53e72572ca6a4ab2623b702433f31ddbe610e9aa474abb7084bdcd74cc219776ac08b0b011ef6c9f0b468d90164b2cb7899f09d82ae6fab9c237a588f87abb94e6f9de4dc8fc6b0a6ed0e899d464c2170553b01bd08243e65b5d770f702c5dde7c8780c2ba7b623f754dad131db097b99af465ad2be796357fd82576cb0f44bc60fd61aa54c397833cb07e071ee9bdfc7c799055ceb3a7c6069734f1e55fe3a9e1e7f95cc87ba330c38d15a2c7bf3a851d589e329783d1435c627108051a31567245691cf89d0e2c398d76656f3d4c11e5b853c755ebf15c05db33806dcf98a27e49416e3264b1f4fea6575bc390aae4f605be333353e4cd59650e7c353e40c460b19b5ca8464e0f90408b7294ac3b5127dd7cca3b56eb5a766145e57b1b93ff39bdd350440efc983333f8fddc4970c63db3c61aff44486953184c33b07c1d29175d9338ec93d1721bc85ce92834b62c020bc5e7726e8481df81cd23afb7bb5ba8a3ada8dcd8db686d8fdad3588857e9797252a67a29a6843f4aa04b43d7060d7aeb547b44c4d7705e1dbb2ae709b804b45a58f6bce1cf37badf45030863d4636776431fc5c6854370fc6d1b77df651f30478d8cad6e1c32c33074c9969ec123b3d0c17f7c5ae23b07d6b92fb54a7e3058c7d710ca33176237c32b9db2ae48bbf832fd6bad77f27c286b89687a7ffe6ab6fb823368da55d819d3d7de25b9440f253403114115286a41f17f094a16523b203d282f2c9e76a6931be531f5ebda4ad87074b1e3345206d4ac1b71e7e6ed6a70cf89bf62c94bf26dd0d5c789824bd697fa08cb28ba0461d0d7e521adc19235b84950642633234ad0faad5121c5a00a03377e9051bd20f6cd5fb60126bd83916c825de4e3884950163b049704f00ef3f23a326485e6c8b1caccdab696609e8fac84b38f624f8ea9a7f3a6b395a2ae9efe82a821e327fc2e08a3691967ca7ae9c72782239219bcd090f80bdd47c5bde1a6b10a47f81f9d81806053828a2e586c18297dfd67029062033d4d843ef9f6ef3dba723be461b64422b5da3a87609ac5258898bc2f453df9036d5d6eb85e19d042a0585aaf0c0b19652f869f9d504e6167c3769aa5125884dcc30984138b6cc470894a10cc2acab0341971447f320dc0033c37daade48057e2083c894170996ba3b22dcc1414be4aa8c52ca968246741dc463d4c1f1d876dd6ef441a6ffe8602f7439608ba7432b38b5c6d41fd5d16d7d77001a9e74d0797680335212cbaaccd4f4fe291f3e0208c940f38d0e085c64cb7c84521b8de501bda16f09b32a399a5ed3fcda01343c19a7204dccef84bceb09ac47a1a8077b9dbbfd5c708c12316239d64c06efc6d722a506bcb64659fbf3763f9578471ae93dcdc20bb9769803bc3476ca4c2b24e82ee7fce58348de70eab3986b13f2da399712367c8d2ae6bc4024b78986e82a498bef56078c54e1d6d5a17d02cf5c8bb4ece59d9f91d3e6e73f2322932e2f5874d505b95f2bece91cbc59c57aa0453e39d02736fb723e2b7fdf602f0a7d5529050b8b36b60a6f94feb405735f5869669fcd81e80a35262bc238c85ef677e514787d95f55e89e20c229b6301f72c297311ad5cf609e633dd7a7ff485c31f4ee3953dc4373852d180a251d8cd8ff456b3fd28e5d69d6b2533c5c5e46b0837debcd3020f3bf48ae5cd4d941ff4da3f3d3468e92952f560e949845c1e81954cbc7b16e772b75e6edc654c482b5eb49b3e745bd88555502c0647483a171966ded6b3a506ea9b6d74208081fd8580aec070230f82ae21671edd73c85fd3dd1a8a45719d1a2248c7130ad19458b29ddac2a784f7529a6f14dc09b0c0f140b22282505664ccf3ebd6c734b86ca9c2bb026a9e585f9508da91a31b8c570f9800e838e660a27bfc85daa3e948d8d238eabbcc72a8099641610da28f503202df0af809492a18351f7951030b2a11d8b4ffc8a0c90b9dc549c68d9fc299d969a4f7a303efd61e15eef40b50d953ba7ab2b7026efd96e9135e47ff"}) 03:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000001700)=0x8) 03:38:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 03:38:15 executing program 5: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 03:38:15 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) 03:38:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) setreuid(0x0, 0x0) symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x1000) [ 465.673598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.679790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.202338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.205210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:38:16 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xffffffffffffff9d) 03:38:16 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 03:38:16 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@nocase}, {@fat=@tz_utc}, {@fat=@time_offset}]}) 03:38:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) write$tcp_mem(r0, &(0x7f00000000c0), 0x48) 03:38:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0xfffc, @dev}, 0x10) 03:38:16 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) setreuid(0x0, 0x0) symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x1000) 03:38:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}}, 0x88) 03:38:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x3, 0x8}) [ 466.285083] No source specified [ 466.289820] No source specified 03:38:16 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) dup3(r1, r0, 0x0) 03:38:16 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 03:38:16 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'sit0\x00', {0x2, 0x0, @multicast1}}) 03:38:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 03:38:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) write$tcp_mem(r0, &(0x7f00000000c0), 0x48) 03:38:16 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x70, 0x0]}}]}) 03:38:16 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x0) readlinkat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)=""/24, 0x18) 03:38:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x1000000) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:38:16 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0x200, 0x4924924}) 03:38:16 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 03:38:16 executing program 3: perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:38:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) write$tcp_mem(r0, &(0x7f00000000c0), 0x48) 03:38:16 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x539401, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000200)="f6", 0x1}], 0x1) 03:38:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 03:38:17 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 03:38:17 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x10000, 0x0) 03:38:17 executing program 6: openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/stat\x00', 0x0, 0x0) 03:38:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 03:38:17 executing program 7: add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="d1f8", 0x2, 0xfffffffffffffffd) 03:38:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setstatus(r0, 0x4, 0xc00) fcntl$setstatus(r0, 0x4, 0x40400) 03:38:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, 0x0, 0x46) 03:38:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000100), 0x4) 03:38:17 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0xffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='9', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) 03:38:17 executing program 3: syz_io_uring_setup(0x1e35, &(0x7f0000002440)={0x0, 0xb87, 0x2a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000024c0), &(0x7f0000002500)) 03:38:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v3, 0x18, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640), 0x0, 0x0, 0x0) 03:38:17 executing program 0: request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='[+)\x00', 0x0) 03:38:17 executing program 6: write$tun(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000002400)='./file0\x00', 0x0, 0x1) eventfd(0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000002f00)='./file0\x00', 0x1000, 0x0) sendto$unix(r0, &(0x7f0000002f40)="17", 0x1, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000002f80)='./file0\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) 03:38:17 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x0, 0xee00}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1}]}, 0x3c, 0x0) 03:38:17 executing program 1: prctl$PR_GET_FPEXC(0xb, 0x0) 03:38:17 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb04}}}, 0x0) 03:38:17 executing program 5: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) munmap(&(0x7f00008b4000/0x3000)=nil, 0x3000) madvise(&(0x7f00008a4000/0x1000)=nil, 0x1000, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 03:38:17 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/88, 0x58}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/81, 0x51}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/32, 0x20}, {&(0x7f0000000e40)=""/76, 0x4c}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/196, 0xc4}], 0x7, &(0x7f0000001100)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x3, 0x1, &(0x7f0000001240)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x823020, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getenv(0x4201, r2, 0x10200000, &(0x7f0000000000)) dup(r1) 03:38:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syslog(0x0, 0x0, 0x0) 03:38:17 executing program 7: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:38:17 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 03:38:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0x101, 0x200) 03:38:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_tables_targets\x00') pread64(r0, &(0x7f0000000200)=""/231, 0xe7, 0x0) 03:38:17 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000000000)={@dev}, 0x8) 03:38:17 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0xffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='9', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) 03:38:17 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) rt_sigpending(0x0, 0x0) 03:38:17 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6200, 0x0) 03:38:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 03:38:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 03:38:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x48}}, 0x0) 03:38:17 executing program 6: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) 03:38:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000040), 0x0) 03:38:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:17 executing program 0: unshare(0x280) unshare(0x66060080) 03:38:17 executing program 1: mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8) 03:38:17 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, &(0x7f0000000080)=ANY=[], 0xffd3) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="98", 0x1}], 0x1, 0x2) 03:38:17 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:38:17 executing program 7: gettid() getpgrp(0xffffffffffffffff) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000), 0x4) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:38:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010160, 0x0) 03:38:17 executing program 1: r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r0, 0x409, 0x9) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) [ 467.805423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.881537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.944883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.250720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.300932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:18 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0xffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='9', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) 03:38:18 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000080)="816ade021f72f629", 0x8) 03:38:18 executing program 3: clock_getres(0xb00, 0x0) 03:38:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:18 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000004c0), 0x8) 03:38:18 executing program 0: unshare(0x280) unshare(0x66060080) 03:38:18 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x616c00ca0753eec, 0x0) 03:38:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) 03:38:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 468.506620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:18 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x70000) 03:38:18 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000a80)='scalable\x00', 0x9) [ 468.579304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.609710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.620005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.639389] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 468.645517] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 468.648691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31333638353234303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040000c00000000000000d6f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d6f4655fd6f4655fd6f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="2000000098a2e27a98a2e27a00000000d6f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000d6f4655fd6f4655fd6f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d6f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bbc60cd0000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000060000000000000000000000000000000000000000000000000000000000000000000000000000000491c1dd40000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3133363835323430322f66696c65302f66696c6530000000000000000000000000000000000000000000008a6df6170000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="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", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000002248c6120000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00)) 03:38:18 executing program 0: unshare(0x280) unshare(0x66060080) [ 468.680287] wlan1: authenticated [ 468.683196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.685909] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 468.701515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.753961] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 468.755989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.760305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.761937] wlan1: associated 03:38:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f00000001c0)) 03:38:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 03:38:19 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0xffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='9', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) 03:38:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x70000) 03:38:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x8000000000000) 03:38:19 executing program 0: unshare(0x280) unshare(0x66060080) 03:38:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}}, 0x0) [ 469.183397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.191026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.205777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000005080)={0x3}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2, "1a1d1587d6ae4be2cc6a646da8dc6fd22240a8417e260c74f1e1c9eda632a018ab87"}, 0x2a, 0x0) [ 469.254602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.258690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.271313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 1: uname(&(0x7f00000000c0)=""/102400) uname(0x0) [ 469.318153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000019300)={{0x0, 0x8, 0x9, 0x7f, 0x4, 0x0, 0x0, 0x6, 0x6, 0x6, 0x7, 0x2, 0x7, 0x0, 0x18}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f000001a300)={r0, 0x9}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) sendfile(r3, r3, 0x0, 0x38000000000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r2, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4002c0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r5, r1], 0x3) [ 469.336302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.376859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 03:38:19 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x70000) 03:38:19 executing program 0: fork() r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0xaa5b1c75b4687e7e, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x20000000) 03:38:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004780)='net/arp\x00') readahead(r0, 0x0, 0x0) 03:38:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:38:19 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x3) clone3(&(0x7f0000005880)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:38:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:38:19 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x70000) 03:38:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x14, r2, 0xc9de1fea2ee157d7}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) 03:38:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b4b, 0xfffdfffdffffffff) [ 469.768807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.775012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.776677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 0: syz_emit_ethernet(0x1265, 0x0, 0x0) [ 469.823873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b4b, 0xfffdfffdffffffff) [ 469.839996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xffffffff00000001, 0x0) [ 469.846149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:19 executing program 5: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) [ 469.893502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b4b, 0xfffdfffdffffffff) [ 469.909251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10}) 03:38:20 executing program 0: capget(&(0x7f0000001a00), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) [ 469.966431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.994709] EXT4-fs warning (device sda): verify_group_input:161: Bad blocks count 0 03:38:20 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "5c594261d4e73f29119005b8e925e3cd2c60ecf563bcb2b46d9c2846bc49b5cbc58a1af9c8056047f37dc86a16e70438ac8ae823ad0c7bdb3c86feab7eafa3"}, 0x97) 03:38:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b4b, 0xfffdfffdffffffff) [ 472.498004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.501016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.502754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.506964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.510153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.535205] Bluetooth: hci0: command tx timeout [ 476.584216] Bluetooth: hci0: command tx timeout [ 478.632161] Bluetooth: hci0: command tx timeout [ 480.680475] Bluetooth: hci0: command tx timeout [ 488.789448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.790767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.877585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.879164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.983237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.016917] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 489.018314] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 489.038800] wlan1: authenticated [ 489.039612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.042140] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 489.095070] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 489.096419] wlan1: associated [ 489.097337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:38:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x34, 0x0, &(0x7f00000023c0)) 03:38:39 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000)='92\r', 0x3, 0x11, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x0) 03:38:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xffffffff00000001, 0x0) 03:38:39 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x338) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x4) 03:38:39 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "759a3d", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 03:38:39 executing program 3: r0 = epoll_create(0x2b) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x4, r0, &(0x7f0000000000)) 03:38:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xffffffff00000001, 0x0) 03:38:40 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512040a7c274b4e07c4dbfe2b91a66bcd08a21be49369e89f52b44d7bc7293cf060f2e95f35abfb381b45e670d8bddcb7c16289a0e124be627905b423cc6d5783fe90ba0c922c17d535a48a99e88afdb0e494004fbfed653669036c2bb05dded7a1282c0ac3254aa8bf8e0450d077e79b60c1872af53cb0d1fcc4b4484d16c378aa", 0x338) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x00\xdf\xff\xe3\xdf'}}]}}) 03:38:40 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 03:38:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 03:38:40 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) io_submit(r0, 0x3, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x7fffffffffffffff, 0x7fffffffffffffff}]) 03:38:40 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 03:38:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() getpriority(0x2, r0) 03:38:40 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[]) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1201031, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 03:38:40 executing program 6: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a4", 0x1}], 0x0, 0x0) 03:38:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:38:40 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 03:38:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xffffffff00000001, 0x0) 03:38:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xddd, &(0x7f00000000c0)) io_setup(0x80, &(0x7f0000001600)) io_setup(0x4, &(0x7f00000017c0)) io_setup(0x6, &(0x7f0000001940)) io_setup(0x200, &(0x7f0000001a80)) 03:38:40 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xd10) read(r0, 0x0, 0x26) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 03:38:40 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x80}, 'port1\x00'}) 03:38:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6628) 03:38:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x4058534c, &(0x7f0000000180)={{}, 'port1\x00'}) 03:38:40 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 03:38:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2d, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:38:40 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) 03:38:40 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x338) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:40 executing program 6: msgsnd(0x0, 0xffffffffffffffff, 0x0, 0x0) 03:38:40 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f00000007c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80) 03:38:40 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000200)=""/2, 0x2, 0x0) 03:38:40 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x126, 0x0) 03:38:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) 03:38:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) 03:38:40 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002740)={0x0, 0x0}) fadvise64(r0, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 03:38:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$VT_SETMODE(r0, 0x5606, 0x0) 03:38:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 03:38:41 executing program 0: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 03:38:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ppoll(&(0x7f0000000900)=[{r0, 0x11d4}], 0x1, 0x0, 0x0, 0x0) 03:38:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de6c8a", 0x5b4}], 0x1}, 0x0) 03:38:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 03:38:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x61}, {0x6}]}) 03:38:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) read(0xffffffffffffffff, 0x0, 0x0) 03:38:41 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x338) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 491.807302] audit: type=1326 audit(2000000321.914:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32160 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa269640b19 code=0x0 03:38:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x31, 0x0, &(0x7f00000018c0)) 03:38:42 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 03:38:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) 03:38:42 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0xd5, 0x56, 0x50, 0x0, 0x2019, 0xab33, 0x2367, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x0, 0x0, 0xbe}, 0x0, 0x0}) 03:38:42 executing program 6: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000080)={0x4000010}) 03:38:42 executing program 1: setresuid(0x0, 0xee01, 0x0) timerfd_create(0x8, 0x0) [ 492.070216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.076684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:38:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@stripe}]}) [ 492.161750] No source specified [ 492.165933] No source specified [ 492.586572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.589434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.638902] audit: type=1326 audit(2000000322.746:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32160 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa269640b19 code=0x0 03:38:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x15, 0x0, &(0x7f0000000240)) 03:38:42 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='p') 03:38:42 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 03:38:42 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000003ac0)) openat$autofs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) 03:38:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x49, &(0x7f0000000000)="a94a128f", 0x4) 03:38:42 executing program 7: timer_create(0x0, 0x0, &(0x7f0000001080)) 03:38:42 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7) 03:38:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 03:38:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000004cda685f"], 0x38}}, 0x0) 03:38:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 03:38:42 executing program 2: mq_open(&(0x7f0000000000)='\xacZ(**}^!!^!@\x00', 0x7a25b2a79a5046ea, 0x0, 0x0) 03:38:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x21, 0x0, &(0x7f00000018c0)) 03:38:42 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:38:42 executing program 4: syz_mount_image$nfs4(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="01"]) 03:38:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 03:38:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5415, 0x0) [ 492.932869] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) ioprio_get$uid(0x3, r1) [ 492.987268] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80111500, 0x0) 03:38:43 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454e2, 0xffffffffffffffff) 03:38:43 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x38}, @dev}, "0000010000000000"}}}}}, 0x0) 03:38:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x5, @loopback}, 0x1c) close(r0) 03:38:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:38:43 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, &(0x7f00000000c0)) 03:38:43 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000010c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 03:38:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:38:43 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454e2, 0xffffffffffffffff) 03:38:43 executing program 7: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x65) 03:38:43 executing program 6: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 03:38:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1260, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 03:38:43 executing program 7: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xd, "9fb8dedc4ea32f0be3c415"}]}]}}}}}}}, 0x0) 03:38:43 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x2f0, 0x4) 03:38:43 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454e2, 0xffffffffffffffff) 03:38:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:38:43 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x100088}, 0x20) 03:38:43 executing program 1: r0 = io_uring_setup(0xcd3, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 03:38:43 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000003c0)) 03:38:43 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 03:38:43 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454e2, 0xffffffffffffffff) 03:38:43 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:38:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:38:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 03:38:43 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 03:38:43 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 03:38:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 03:38:44 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:44 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 03:38:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x51}}], 0x18}}], 0x1, 0x0) 03:38:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0x178) 03:38:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0xfffffffffffffffd) 03:38:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) 03:38:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, 0x0, 0x0) 03:38:44 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:38:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 03:38:44 executing program 7: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='cifs.spnego\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) io_setup(0x8001, &(0x7f0000000840)) 03:38:44 executing program 0: io_setup(0xddd, &(0x7f00000000c0)) io_setup(0x80, &(0x7f0000001600)) io_setup(0x4, &(0x7f00000017c0)) io_setup(0x6, &(0x7f0000001940)) io_setup(0x200, &(0x7f0000001a80)) 03:38:44 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1) 03:38:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') 03:38:44 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0/../file0\x00') 03:38:45 executing program 6: setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}) 03:38:45 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:45 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0x178) 03:38:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 03:38:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000, 0x0, "5eff7f0000002200090000ee00"}) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) 03:38:46 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0x178) 03:38:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000019300)=""/249, &(0x7f0000000240)=0xf9) 03:38:46 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:46 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x3, 0x0, 0x2f, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3}]}}}}}}, 0x0) 03:38:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:38:46 executing program 6: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @dev, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev, @loopback, @private, @loopback]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x5, "36dfce"}, {0x0, 0x3, 'y'}]}]}}}}}}}, 0x0) 03:38:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:38:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_PACK_ID(r2, 0x2271, &(0x7f0000000100)) 03:38:46 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000001c0)=0x10000, 0x4) 03:38:46 executing program 1: io_uring_setup(0x39b0, &(0x7f00000012c0)={0x0, 0xe441, 0x6}) 03:38:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/138) 03:38:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0x178) 03:38:46 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:46 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) [ 496.679156] Bluetooth: hci0: command tx timeout 03:38:47 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup3(r1, r0, 0x0) 03:38:47 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:38:47 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) 03:38:47 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x422040, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x254c41) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x11, r0) 03:38:47 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 03:38:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x3e}}], 0x18}}], 0x2, 0x0) 03:38:47 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x6, 0x0) 03:38:47 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='.\x00') 03:38:47 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 03:38:47 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = inotify_init() ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 03:38:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x4d, 0x0, &(0x7f0000000280)) 03:38:47 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f00000000c0)) 03:38:47 executing program 6: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xcd8f28428a7b3cbf) 03:38:47 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x1) setuid(r1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140), 0x10) 03:38:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') lseek(r0, 0xfffffffffffffffe, 0x1) 03:38:47 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 03:38:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xa, 0x0, 0x0) 03:38:48 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/stat\x00', 0x0, 0x0) 03:38:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000002380)=ANY=[@ANYBLOB="e6"], &(0x7f00000023c0)=0x24) 03:38:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000002c0)='\'#[^+-!\x00', 0x0, 0x0, 0x0) 03:38:48 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:48 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 03:38:48 executing program 2: syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x38, 0x0, 0x0, @local, @local, {[@srh={0x0, 0x6, 0x5, 0x3, 0x0, 0x0, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}]}}}}}, 0x0) 03:38:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:38:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short}, 0x14) write$binfmt_script(r1, 0x0, 0x0) 03:38:48 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0x8001) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4) 03:38:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:48 executing program 6: syz_io_uring_setup(0x487, &(0x7f0000000480)={0x0, 0x7e7a, 0x1c, 0x3, 0x2a4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 03:38:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084504, 0x0) 03:38:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4) 03:38:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) 03:38:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:38:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:38:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) 03:38:48 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg1\x00'}) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/252, 0xfc}], 0x1, 0x0, 0x0) 03:38:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084504, 0x0) 03:38:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) times(&(0x7f0000000080)) 03:38:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000ac0)='\t6') 03:38:48 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_crash_size', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 03:38:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24002840) 03:38:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:38:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:38:48 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:48 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x13, 0x170, &(0x7f00000001c0)}) 03:38:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084504, 0x0) 03:38:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:38:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) [ 498.727211] Bluetooth: hci0: command tx timeout 03:38:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0x8}}], 0x18}}], 0x1, 0x0) 03:38:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084504, 0x0) 03:38:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:38:49 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x541b, 0x0) 03:38:49 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 7: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x2, @local}, 0x1c) 03:38:49 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0x0) 03:38:49 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1) 03:38:49 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x0) 03:38:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) 03:38:49 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xe1, 0x0) 03:38:49 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x0) 03:38:49 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1) 03:38:49 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 03:38:49 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgrcv(0x0, &(0x7f0000002740)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x8, 0x0) 03:38:49 executing program 5: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x0) 03:38:49 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x32, &(0x7f00000000c0)={0x0, @initdev, @multicast1}, &(0x7f0000000140)=0x2) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x0) 03:38:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:49 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x19, 0x0, &(0x7f00000023c0)) 03:38:49 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1) 03:38:49 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x0) 03:38:49 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) 03:38:49 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:49 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 03:38:49 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1) 03:38:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 03:38:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x7fff]}, 0x8}) 03:38:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000840)=@ethtool_per_queue_op}) 03:38:49 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:49 executing program 1: mount$9p_xen(0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)) pipe2$9p(&(0x7f0000002d40), 0x0) 03:38:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:50 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000680)) keyctl$chown(0x4, 0x0, 0xee00, 0xee00) 03:38:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) 03:38:50 executing program 2: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 03:38:50 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) [ 500.033886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.034548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:38:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f00000001c0)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:38:50 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) [ 500.123798] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 500.124889] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 500.125678] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 500.126429] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 500.127262] blk_print_req_error: 54 callbacks suppressed [ 500.127274] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 500.133813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.134461] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.135372] buffer_io_error: 54 callbacks suppressed [ 500.135382] Buffer I/O error on dev sr0, logical block 0, async page read [ 500.153185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.153789] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.154834] Buffer I/O error on dev sr0, logical block 1, async page read [ 500.171307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.171895] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.172992] Buffer I/O error on dev sr0, logical block 2, async page read [ 500.181185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.181774] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.183128] Buffer I/O error on dev sr0, logical block 3, async page read [ 500.192197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.192775] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.193822] Buffer I/O error on dev sr0, logical block 4, async page read [ 500.198162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.198732] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.199621] Buffer I/O error on dev sr0, logical block 5, async page read [ 500.204566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.205360] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.206405] Buffer I/O error on dev sr0, logical block 6, async page read [ 500.209109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.209671] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.210523] Buffer I/O error on dev sr0, logical block 7, async page read [ 500.212117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.212695] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.213992] Buffer I/O error on dev sr0, logical block 0, async page read [ 500.214872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.215461] Buffer I/O error on dev sr0, logical block 1, async page read [ 500.216310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.216998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.217721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.218446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.219170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.219853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.228960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.229615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.237989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.239431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.240029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.240703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.241406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.242539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.244336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.244897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.247145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.247765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.249440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.250014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.252567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.255319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.255890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.256725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.257502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r0, 0x2) 03:38:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:38:50 executing program 2: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) 03:38:50 executing program 4: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r2}}) 03:38:50 executing program 3: clone3(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 03:38:50 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 500.373097] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 500.376211] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection 03:38:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:38:50 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x9, &(0x7f0000000000), 0x10) 03:38:50 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) 03:38:50 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {0x4, 0xfffd}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1) 03:38:50 executing program 2: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 03:38:50 executing program 4: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 3: setfsgid(0xffffffffffffffff) 03:38:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:38:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4e, 0x0, &(0x7f00000018c0)) 03:38:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:38:50 executing program 2: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 0: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [], 0x3d}) 03:38:50 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000180)) 03:38:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x0) 03:38:50 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:38:50 executing program 4: syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='g', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 03:38:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:38:50 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$getflags(r0, 0x1) 03:38:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x1ac) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3) [ 500.775095] Bluetooth: hci0: command tx timeout 03:38:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x4b4a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) 03:38:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1, 0x0, 0x0) 03:38:50 executing program 0: prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0) 03:38:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x2d4f, 0x80000001) 03:38:50 executing program 7: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='i\xf87Z)\x95\xa0\x9f\xfc\x84\xcf') 03:38:50 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000ab80)={0x77359400}) 03:38:50 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 03:38:50 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) membarrier(0x40, 0x0) membarrier(0x20, 0x0) 03:38:50 executing program 2: clock_adjtime(0x0, &(0x7f0000000b00)={0x97d0}) 03:38:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2}) 03:38:51 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0100", 0x18, 0x32, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @empty}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) [ 500.906619] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 500.907433] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 500.907994] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 500.908562] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 04 00 00 22 00 [ 500.909868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.914280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.914839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000094c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="ceddc821631b3f4522c8a01edf493c2658eccd9f2292fb16aa27aaa2418f436905df4e94a0e40e9fbbff5620a6864a72f3a3698dfc75f32a53464ab166cf37b49900b6085332be069f25bdac17eb6ef00ab9def91025beced18feb0e744b898963bb14b77d4bf691e36dbb4ca5c1677e63a527d449a9ff530e4772bb9f822c3560557e813a0860b74f2f2af524029a1d69feffcc7b03e0c2c3a8cbd3700b1f3dc6202f1871177b74edd013dc4e7bfc4f3bab9496484418ad8a9962328d2ee377cc7ca93645b54aee0c871dddc631bd56058e0d", 0xd3}, {&(0x7f0000000380)="a5de44e346cbfb9354e3e8eb13d04e4d87519d810a9d55cb2576be497e4481a510d82c4e323ed6a1e6dad48b5301ca36d461fe72296fee4b4320bcb610402849700ded3a9e8aed7d96179631a8e9540304bd318dbdeb7c3b4730340ab512a52b2d6ce388e7411381e5c453aeb190b5457c54cf62aea15c81932a6c262403", 0x7e}, {&(0x7f0000001ec0)="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", 0x45c}], 0x3}}], 0x1, 0x0) 03:38:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMETA(r0, 0x5423, &(0x7f0000000000)) 03:38:51 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) [ 500.929489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.930208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.938153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.938705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 500.941346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:38:51 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:38:51 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x4}}) 03:38:51 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) 03:38:51 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='D', 0x1}], 0x1, 0x3, 0x0) 03:38:51 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 03:38:51 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 03:38:51 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:38:51 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_delete(0x0) 03:38:51 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:51 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0), 0x54, 0x0) 03:38:51 executing program 2: r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) 03:38:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f00000011c0)=""/228, 0xe4) 03:38:51 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x404c534a, &(0x7f0000000180)={{}, 'port1\x00'}) 03:38:51 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) 03:38:51 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 03:38:51 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:38:51 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x2) 03:38:51 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000015c0)="253c89622be60b5c7fb6be13d47623df4b340666b086fb434c2093e65e0414e6d1fa96ea5da30de02286c04f808a1e109e917b9605aeeef1693830aad844e793ec707ad57ed717f642302260ce07b84ce4e309cceef276f0b1168993d8ff61df59cdab901e6255fe6286d5e0ad2b846f6ea00a066dff301b30f48dd723c1e1ba", 0x80}], 0x1}}], 0x2, 0x0) 03:38:51 executing program 7: symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 03:38:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xa3) 03:38:51 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) 03:38:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r1, &(0x7f000000a440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012001, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:38:51 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 03:38:51 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:38:51 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:51 executing program 6: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x2b, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 03:38:51 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) 03:38:51 executing program 7: sched_getscheduler(0x0) 03:38:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 03:38:51 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 03:38:51 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5413, &(0x7f0000000080)) 03:38:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:38:51 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 03:38:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 03:38:51 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/4096) [ 501.555237] audit: type=1400 audit(2000000331.659:67): avc: denied { map } for pid=33214 comm="syz-executor.5" path="pipe:[47571]" dev="pipefs" ino=47571 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 03:38:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r1, r0, &(0x7f0000000000)=0x2b, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001540)) 03:38:52 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:52 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x7) 03:38:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 03:38:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) 03:38:52 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1, 0x0, 0x0) 03:38:52 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x250480, 0x0) syz_io_uring_setup(0x2dc9, &(0x7f0000001340)={0x0, 0x0, 0x10, 0x1, 0x1ec, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) io_uring_setup(0x6e85, &(0x7f0000001540)={0x0, 0x0, 0x8, 0x3}) 03:38:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b71, 0x0) 03:38:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0f85403, &(0x7f0000000040)) 03:38:52 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 03:38:52 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) [ 502.582255] audit: type=1326 audit(2000000332.673:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33247 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa269640b19 code=0x0 [ 502.823127] Bluetooth: hci0: command tx timeout [ 503.393535] audit: type=1326 audit(2000000333.501:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33247 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa269640b19 code=0x0 03:38:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x2272, 0x0) 03:38:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x600, 0x0}, &(0x7f00000000c0)="1510de80e75b", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:38:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b71, 0x0) 03:38:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x10c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:53 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 03:38:53 executing program 7: creat(0x0, 0x0) r0 = creat(0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x2bc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) lsetxattr$security_ima(0x0, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "334e696f49612fe527f9b713325ac105"}, 0x11, 0x3) sendfile(r1, r2, 0x0, 0xfdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 03:38:53 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) 03:38:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) 03:38:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b71, 0x0) 03:38:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x10000, 0x4) 03:38:53 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) 03:38:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:38:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) 03:38:53 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') 03:38:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 03:38:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b71, 0x0) 03:38:54 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) 03:38:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc058534b, &(0x7f0000000180)={{}, 'port1\x00'}) 03:38:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0xa56}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r0 = open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x8000000) syz_io_uring_complete(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) [ 504.150735] Process accounting resumed 03:38:54 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') 03:38:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0x1, 0x0, 0x0, "", [@generic='$']}, 0x14}], 0x1}, 0x0) 03:38:54 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 03:38:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) 03:38:54 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) 03:38:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 03:38:54 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x3) 03:38:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x10c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 504.494220] audit: type=1400 audit(2000000334.599:70): avc: denied { associate } for pid=33403 comm="syz-executor.7" name="ssh.service" dev="cgroup2" ino=1176 scontext=system_u:object_r:selinux_config_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 03:38:54 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', 0x0, 0x9830c1, 0x0) 03:38:54 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) 03:38:54 executing program 7: r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000040), 0x3, 0x80000001, 0x0, 0xfffffffffffffea3) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 03:38:54 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 504.651094] Process accounting resumed 03:38:54 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') 03:38:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) 03:38:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 504.841321] Process accounting resumed 03:38:55 executing program 7: r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000040), 0x3, 0x80000001, 0x0, 0xfffffffffffffea3) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 03:38:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) 03:38:55 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 03:38:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x4, r0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) 03:38:55 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') 03:38:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) close(r0) 03:38:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x10c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) setresuid(0x0, 0x0, 0x0) 03:38:55 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 505.686861] Process accounting resumed 03:38:55 executing program 7: r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000040), 0x3, 0x80000001, 0x0, 0xfffffffffffffea3) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 03:38:55 executing program 4: getitimer(0x0, &(0x7f0000000b00)) 03:38:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) 03:38:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x10, 0x0, &(0x7f0000000140)) 03:38:55 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0) 03:38:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x8000, 0x0) 03:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:38:56 executing program 7: r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000040), 0x3, 0x80000001, 0x0, 0xfffffffffffffea3) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 03:38:56 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x8) 03:38:56 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 03:38:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x8000, 0x0) 03:38:56 executing program 3: semctl$SETVAL(0x0, 0x0, 0xb, 0x0) 03:38:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x10c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:38:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0x0, 0x1a, 0x0, @scatter={0x0, 0xfdfd, 0x0}, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0}) 03:38:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1002000) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000040), 0x4) 03:38:56 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgget(0x2, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3, "d584f0bcc7b574d2193287982d8a546be7563486463d7bb29e56f080502eea649283df4c3968f07aec46b5ba7468eb"}, 0x37, 0x0) msgrcv(0x0, &(0x7f0000000240)=ANY=[], 0x85, 0xffffff7f00000000, 0x0) 03:38:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13}) 03:38:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:38:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x8000, 0x0) 03:38:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 506.738129] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:38:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x8) 03:38:56 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, 0x0) [ 506.804310] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:38:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13}) 03:38:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000a7171838ff0008000300", @ANYRES32=r2], 0x44}}, 0x0) 03:38:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:38:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/41, 0x29, 0x1fb) 03:38:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x8000, 0x0) 03:38:57 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454d2, &(0x7f00000000c0)) 03:38:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) [ 507.544232] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3) syz_emit_vhci(0x0, 0xa) 03:38:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) [ 507.587440] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:38:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 03:38:57 executing program 7: times(0xfffffffffffffffd) 03:38:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 03:38:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13}) 03:38:57 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) [ 507.721528] Bluetooth: hci5: SCO packet too small [ 507.722808] Bluetooth: hci5: SCO packet too small [ 507.772409] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:38:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3) syz_emit_vhci(0x0, 0xa) [ 507.958432] Bluetooth: hci5: SCO packet too small 03:38:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x4044850) 03:38:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000a7171838ff0008000300", @ANYRES32=r2], 0x44}}, 0x0) 03:38:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:38:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13}) 03:38:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 03:38:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 03:38:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) close(r0) 03:38:58 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3) syz_emit_vhci(0x0, 0xa) [ 508.007878] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted [ 508.067376] Bluetooth: hci5: SCO packet too small 03:38:58 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3) syz_emit_vhci(0x0, 0xa) [ 508.112368] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) [ 508.179084] Bluetooth: hci5: SCO packet too small 03:38:58 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) 03:38:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 03:38:58 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:38:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000a7171838ff0008000300", @ANYRES32=r2], 0x44}}, 0x0) 03:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x8, r2) ptrace(0x8, r1) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000100)) [ 508.274539] audit: type=1326 audit(2000000338.381:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33769 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff9ffc5b19 code=0x0 03:38:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setpgid(0x0, 0x0) 03:38:58 executing program 7: io_setup(0x1, &(0x7f0000000300)=0x0) io_destroy(r0) io_setup(0xcf, &(0x7f00000000c0)) io_submit(r0, 0x0, 0x0) [ 508.313240] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:58 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000080)="8a2f8d8c1e7ef54ca70d4434e6d11cb22f5074fbcf1d27", 0x17, 0x0, 0x0, 0x0) 03:38:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) 03:38:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000a7171838ff0008000300", @ANYRES32=r2], 0x44}}, 0x0) [ 508.416484] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.424609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 03:38:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:38:59 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000001a00)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 03:38:59 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x8, r2) ptrace(0x8, r1) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000100)) 03:38:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000280)) 03:38:59 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) wait4(0x0, 0x0, 0x0, 0x0) 03:38:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) 03:38:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5424, &(0x7f0000000080)) 03:39:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x5d}}}, 0x581e40) 03:39:00 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 03:39:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x80045440, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "7cacc37b4a9fd591bc7dde22c61ccb0d5b569b"}) 03:39:00 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) 03:39:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 03:39:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 03:39:00 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x8, r2) ptrace(0x8, r1) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000100)) 03:39:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:39:00 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 03:39:00 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/94, 0x5e) 03:39:00 executing program 0: mount$9p_virtio(&(0x7f0000002580), 0x0, &(0x7f0000002600), 0x0, &(0x7f0000002800)) 03:39:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 03:39:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x9c9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 03:39:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1101}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x63, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) 03:39:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 03:39:00 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) [ 510.431883] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 03:39:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000019540)={0x8}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x520) r2 = accept4(r0, &(0x7f0000019140)=@can, &(0x7f0000000000)=0x80, 0x33266981b49ef31e) dup3(r1, r2, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000194c0)={{'\x00', 0x3}, {0x8}, 0x42, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000019100)='./file0\x00', 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000191c0), 0x400, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000019200)) syz_io_uring_complete(0x0) 03:39:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{}, {0x76, 0x3}}}}, 0x8) 03:39:00 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x24) [ 510.588330] Bluetooth: hci7: unexpected event for opcode 0x0c58 [ 510.590907] Bluetooth: hci7: unexpected event for opcode 0x0c58 03:39:00 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 03:39:00 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x8, r2) ptrace(0x8, r1) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000100)) 03:39:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 03:39:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:39:00 executing program 6: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000000)={{}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x2, 0x0, 0x0) setitimer(0x2, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) io_setup(0x400, &(0x7f0000000080)) 03:39:00 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{}, {0x76, 0x3}}}}, 0x8) 03:39:00 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40bc5311, &(0x7f00000000c0)) 03:39:00 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xff}, {0x6}]}, 0x10) [ 510.773210] Bluetooth: hci7: unexpected event for opcode 0x0c58 03:39:00 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 03:39:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 03:39:00 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{}, {0x76, 0x3}}}}, 0x8) 03:39:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc) 03:39:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 03:39:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "2c4137b8aca6fbc42161604cad1480ecfd6d77511d4edb850224237ae65b281f508edbfdf2c1071024b2f2374212bfd8ccd2333d048e49797b581d8690bd653bdb98076756942962134994743f3c40f9"}, 0xd8) 03:39:01 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 03:39:01 executing program 6: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000df0000/0x4000)=nil) [ 511.011676] Bluetooth: hci7: unexpected event for opcode 0x0c58 03:39:01 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 03:39:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, 0x0) 03:39:01 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x0) 03:39:01 executing program 5: time(0x0) 03:39:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setregid(0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8) 03:39:01 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{}, {0x76, 0x3}}}}, 0x8) 03:39:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) 03:39:01 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) setpriority(0x1, 0x0, 0x0) 03:39:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)) 03:39:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5441, 0x0) 03:39:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:01 executing program 6: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 511.346460] Bluetooth: hci7: unexpected event for opcode 0x0c58 03:39:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 03:39:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 03:39:01 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:39:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5609) 03:39:01 executing program 1: set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x9) clone3(&(0x7f0000005880)={0x640e0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:01 executing program 2: setrlimit(0x0, &(0x7f0000000000)) 03:39:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:01 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x4, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) 03:39:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe2(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4}, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000580)={0x20}, 0x0, 0x0) 03:39:01 executing program 0: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 03:39:01 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r0, 0x1) 03:39:01 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 03:39:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x541b, &(0x7f0000000000)) 03:39:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)) 03:39:01 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0xc, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0x13, 0x3, 0x0, [{@loopback}, {@broadcast}, {@broadcast}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W', 0x0, "944856"}}}}}}, 0x0) 03:39:01 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) setuid(0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:39:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000400)) close_range(r0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0) clock_gettime(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000015c0)=[{r1}, {}, {}], 0x3, &(0x7f0000001640), &(0x7f0000001680)={[0xf9e]}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) 03:39:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:39:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "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"}, 0x7e7) 03:39:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:02 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!=-\x00') 03:39:02 executing program 1: r0 = epoll_create(0x1000000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 03:39:02 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 03:39:02 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fadvise64(r0, 0xfffffffffffffffd, 0x3, 0x0) 03:39:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000014c0)=0xffffff84, 0x4) 03:39:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x1c, r1, 0x3d01edad0464e607, 0x0, 0x0, {{0x14, 0x0, 0xfffe}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:39:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:02 executing program 4: r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x7fdd572d7fff, 0x0) 03:39:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 03:39:02 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 03:39:02 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:02 executing program 4: set_robust_list(0x0, 0x0) 03:39:02 executing program 2: fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 03:39:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(0xffffffffffffffff, 0x0) 03:39:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xb) close(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000) 03:39:02 executing program 5: memfd_create(0x0, 0xf9) 03:39:02 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)) 03:39:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x30}}, 0x0) 03:39:02 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x7, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x5d) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="85bb39cfbbe78da00a0f1d4b62e36ba0556a1032bbc359ca37500aa4f6162eb4b72976d830ee9806976f032002afed2e88c7d2a09288e52000b856a5607a23b8e448106ed277a9b5bfb9bf3d", 0x4c}, {&(0x7f0000000140)="1e5acc4ec93daaf91e4a147824cafc6011", 0x11}], 0x2, 0x0) 03:39:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x5410, &(0x7f0000000180)) 03:39:02 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x800) 03:39:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x40000000000000) 03:39:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x4f, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:39:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@mcast1, @private0, @empty, 0x0, 0x8, 0x0, 0x700, 0x7, 0x4000024}) 03:39:02 executing program 6: move_pages(0x0, 0x2000000000000008, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080), &(0x7f0000000000)=[0x0], 0x0) 03:39:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) 03:39:02 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x7, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x5d) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="85bb39cfbbe78da00a0f1d4b62e36ba0556a1032bbc359ca37500aa4f6162eb4b72976d830ee9806976f032002afed2e88c7d2a09288e52000b856a5607a23b8e448106ed277a9b5bfb9bf3d", 0x4c}, {&(0x7f0000000140)="1e5acc4ec93daaf91e4a147824cafc6011", 0x11}], 0x2, 0x0) 03:39:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) r1 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4000005}) 03:39:02 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0x6a, 0x0, [@broadcast, @broadcast, @remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:39:02 executing program 0: r0 = getpid() ptrace$setopts(0x4206, r0, 0xf5, 0x0) 03:39:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001500), 0xa100, 0x0) close(r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7c3f779a) 03:39:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x10, &(0x7f0000000040)="61635299", 0x4) [ 514.599157] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 514.600654] Bluetooth: hci7: Injecting HCI hardware error event [ 514.602606] Bluetooth: hci7: hardware error 0x00 03:39:06 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x7, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x5d) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="85bb39cfbbe78da00a0f1d4b62e36ba0556a1032bbc359ca37500aa4f6162eb4b72976d830ee9806976f032002afed2e88c7d2a09288e52000b856a5607a23b8e448106ed277a9b5bfb9bf3d", 0x4c}, {&(0x7f0000000140)="1e5acc4ec93daaf91e4a147824cafc6011", 0x11}], 0x2, 0x0) 03:39:06 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) renameat(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') 03:39:06 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 03:39:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x560d, &(0x7f00000002c0)) 03:39:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000700)={0x28, r1, 0xcea008a6e34dc1cb, 0x0, 0x0, {{0x65}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:39:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:39:06 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 03:39:06 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5409, &(0x7f0000000000)) 03:39:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2271, &(0x7f0000000000)) 03:39:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x9, 0x0, 0x1, 0x7, 0x3, 0x3, 0x20, 0x1bb, 0x38, 0x36c, 0xfffffa0a, 0x8, 0x20, 0x1, 0x1f, 0x1, 0x8001}, [{0x0, 0x3, 0x7fff, 0x5, 0x4, 0x9, 0x5, 0x3fdc56f9}, {0x4, 0x80000001, 0x40, 0xa136, 0x0, 0x1, 0x4, 0x80000001}], "431b15591375bd3172d16a7460fb4f4e1186ba74aa6bb60770adb63ba5129ef2fe0f074b17b81628e1e551369e6ba32855d79427167571e523cf471bc064ba9a542355906aadf5bd2607bb22b83a2d3d9ff31f7bcd5d8f70e209fe31ff093a1fec5c21d5dc5b93e4558cbf57f35ed61a8b754239250460ce1dbc3e721a1c39ddb40e8d9e438c26a292cbefe182815a10cfa380d43616b8f0b0d0e7ac1bec55e86fd04fea90b9644be648ce", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x823) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 516.059422] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 516.061027] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 516.062148] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 516.063213] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 516.064381] blk_print_req_error: 35 callbacks suppressed [ 516.064397] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 516.071882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.072815] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.074106] buffer_io_error: 38 callbacks suppressed [ 516.074120] Buffer I/O error on dev sr0, logical block 0, async page read 03:39:06 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x7, 0x0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[], 0x5d) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="85bb39cfbbe78da00a0f1d4b62e36ba0556a1032bbc359ca37500aa4f6162eb4b72976d830ee9806976f032002afed2e88c7d2a09288e52000b856a5607a23b8e448106ed277a9b5bfb9bf3d", 0x4c}, {&(0x7f0000000140)="1e5acc4ec93daaf91e4a147824cafc6011", 0x11}], 0x2, 0x0) [ 516.099720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.100861] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.102148] Buffer I/O error on dev sr0, logical block 1, async page read 03:39:06 executing program 4: add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 03:39:06 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffa, 0xfce2daee5a83e788) [ 516.123305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.124818] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.126241] Buffer I/O error on dev sr0, logical block 2, async page read [ 516.138637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.139726] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.141021] Buffer I/O error on dev sr0, logical block 3, async page read 03:39:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fdatasync(r0) [ 516.163478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.164384] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.165079] Buffer I/O error on dev sr0, logical block 4, async page read [ 516.171582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.172064] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.172743] Buffer I/O error on dev sr0, logical block 5, async page read [ 516.183491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.183970] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.184753] Buffer I/O error on dev sr0, logical block 6, async page read [ 516.197598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.198860] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.200451] Buffer I/O error on dev sr0, logical block 7, async page read [ 516.230664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.231841] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 516.233440] Buffer I/O error on dev sr0, logical block 0, async page read [ 516.272409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.273604] Buffer I/O error on dev sr0, logical block 1, async page read [ 516.278442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.283392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.286270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.287522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.295246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 516.297643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:39:06 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffc}, {}], 0x2) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 03:39:06 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 03:39:06 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 03:39:06 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) getuid() 03:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x43, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x1e, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:39:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080), 0x6) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 03:39:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) [ 516.441712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 516.454482] audit: type=1326 audit(2000000346.561:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34811 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2836138b19 code=0x0 03:39:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) statfs(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5452, &(0x7f0000000040)={{0x1}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 03:39:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) 03:39:06 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0xc3608c45ed101d89) 03:39:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="232120ae0a"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) [ 516.545687] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 516.545687] The task syz-executor.3 (34939) triggered the difference, watch for misbehavior. 03:39:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000280)={0x0, 0x0, "ee00"}) 03:39:06 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@reiserfs_3={0xc}, 0x0, 0x2) 03:39:06 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x600081, 0x0) pselect6(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 516.648184] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 517.267455] audit: type=1326 audit(2000000347.374:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34811 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2836138b19 code=0x0 [ 517.432347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 03:39:07 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwrite64(r0, &(0x7f0000000080)='\n', 0x2, 0x0) 03:39:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) 03:39:07 executing program 2: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') pread64(r1, &(0x7f0000000200)=""/193, 0xc1, 0xff03) 03:39:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000000080), 0x0) 03:39:07 executing program 3: perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:07 executing program 7: shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil) 03:39:07 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x80089203, &(0x7f0000000040)={0x0}) 03:39:07 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 03:39:07 executing program 4: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001940)=[{&(0x7f0000001480)="92", 0x1}, {&(0x7f0000001740)='J', 0x1, 0x100000000}], 0x0, 0x0) 03:39:07 executing program 5: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 03:39:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_auth_payload_to={{0xc7c, 0x4}}}, 0x8) 03:39:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)=0x47) 03:39:07 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port1\x00'}) 03:39:07 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)="34e0", 0x2}], 0x1) 03:39:07 executing program 3: perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:07 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:39:08 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)="34e0", 0x2}], 0x1) 03:39:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x8) 03:39:08 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) syz_open_procfs(r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x89, 0x25, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x44b, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:08 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:39:08 executing program 5: symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:39:08 executing program 3: perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:08 executing program 2: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:08 executing program 7: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:08 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:39:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x8) 03:39:08 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)="34e0", 0x2}], 0x1) 03:39:08 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) 03:39:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x8) 03:39:08 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:39:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 03:39:08 executing program 3: perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 518.631328] Bluetooth: hci0: command 0x0c1a tx timeout 03:39:08 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)="34e0", 0x2}], 0x1) 03:39:08 executing program 2: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x8) 03:39:08 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={[{@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffc6c}}]}) 03:39:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000dc0), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 03:39:08 executing program 7: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:08 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{}, {0x1, 0xff81}], 0x2, &(0x7f0000000080)) 03:39:08 executing program 3: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x300, 0x2, 0x0, r0, 0x0}]) [ 518.784231] msdos: Bad value for 'time_offset' [ 518.794380] msdos: Bad value for 'time_offset' 03:39:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/psched\x00') read$char_usb(r0, &(0x7f0000000040)=""/1, 0x1) 03:39:08 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) 03:39:09 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="a024030008021100000108021100000050505050505082"], 0x34) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 03:39:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:39:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) 03:39:09 executing program 5: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) ftruncate(r0, 0x8800000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0x7ffff000}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) 03:39:09 executing program 7: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() [ 519.020402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:09 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 519.061274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.370301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.373343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:09 executing program 2: r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) fork() 03:39:09 executing program 6: creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa0000000) 03:39:09 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff0b, 0x0) 03:39:09 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000004c0)=0x16, 0x4) 03:39:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="c3d46788fdee3ab0ba9597e2421b39210b3abc5d6d7eb4ebe3f4bdf4bcbd19144870204d8f28cc1486a0350f7843582b926219bb67a204465dbb2831f9f30040d89fc8e59100432823350a0f73e01ddfd22be607d0795a1d658927b4ec3cb5e91de76f7a3cf8e8e07b702e94ff8fbad4c1f91e2d81ed5bf3650e9c3e35085a3fb4e447537486191ac609acd5ccdca455b4042e3a7c274ce1ab00e54eaaa89fdfe99da42108cc920342c11e78c6869e3d6913b3da5fc50ce055764e8bc28c100f9c605eaa7710cb4af33b84aca3a4a397aacfc677865eb86a692ac2c7d9df5a9ff0f1070eb9091647c1748c", 0xeb}, {&(0x7f0000000000)="f288fa181b7f5b02d0e20458dc306e293a7bf2511bd58ebebe89ef74a463f9dc39ab8ec86369769ac4dc5cdc663252431f594e7e9693ce2c1cf3bb9a0294ec05fd73486b5d20227eecec180578d9a707d5ae6d72461ccdf0f611b6dcd81a310cdd995f67f25a0c27d43a5165af36564903dbf181263e", 0x76}, {&(0x7f0000000240)="4002a0aced800b75828944491809136f464f2d4db90bd8df3de53be39aeb450ae58d594e047cb6f62818d1d961e53074f948629c56dcc7b8519cbfa37815fdd0d489fcb2c987306dee9db66d0af4b322d10552de0da97bf257ed8cd101422bebb1dae7062f6e2f909a72d9262fdac1c56e0e7ddc95502b7705d4ee3145fabb4efb489f43b1015135572e1a06a3f6baad7b87de12f600064e9f236ba1b3bffdd6816f46b20d1efdccbf2c1c6c1b", 0xad}], 0x3) 03:39:09 executing program 5: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) ftruncate(r0, 0x8800000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0x7ffff000}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) 03:39:09 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000100)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) 03:39:09 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x2d]}}}}]}) 03:39:09 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1011000) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 519.509517] tmpfs: Bad value for 'mpol' [ 519.549820] tmpfs: Bad value for 'mpol' 03:39:09 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getdents(r0, &(0x7f00000002c0)=""/234, 0xea) getdents64(r0, 0x0, 0x0) 03:39:09 executing program 6: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 03:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) 03:39:09 executing program 5: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) ftruncate(r0, 0x8800000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0x7ffff000}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) 03:39:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}}, 0x0) 03:39:09 executing program 0: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001440)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000026c0)={{0x1, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 03:39:09 executing program 1: rt_sigsuspend(0x0, 0x0) 03:39:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x5) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c7987282b15d1461a40d1c529c698f0da7e119a1aeb3e035efc99144468fef659d61eea5025bfec8b534f93e3f3beb275de3a8617359b5d2d7a2fcb46cd474f0b774a989ba730c3d2e39c4a8beeb69d4da7f0610c6b7a898594504bdb43e4d9e44257adb07836889d07721ca4c645d04f2d6903ddf5aca438d01a5b85ef2616804f5f1b6d45a194dd8e653c8d474bfdd547dbf33424a35f18", 0x99}, {&(0x7f0000000140)="7fc9380be64efd391e6c88f08acd0b69b430c04717814b7441d2dac680e91e6ec4e3ecf6cb75cf31860e803dc973ebc885ab962ce959818f7f9328a36ece4a3566c7a90a58c07513599b4f4be1af2449e8740c1cdd9ee6878ca426cc9b1ee850a1ba7e49621bbd", 0x67}, {&(0x7f0000000900)="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", 0xf01}], 0x3, 0x0, 0x0, 0x0) 03:39:09 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) 03:39:09 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x40, 0x0) 03:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) 03:39:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20}}}}}, 0x0) 03:39:09 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='x', 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xffffffffffffffff, 0x0) 03:39:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 03:39:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) 03:39:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) 03:39:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005840)=[0x0], 0x1}, 0x58) 03:39:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) 03:39:10 executing program 6: kexec_load(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x100000000000}], 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 03:39:10 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 03:39:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a000000000000000401000000000000000000000000000100000000000000000000000000000000000000f1ffffffffffffff00000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025a124fc66d47e4b7c3e6eb7a217298f2f4b58e17bafb2ab26bd52ca7ef40f620a49aa56433f141da05e125ed48e7bb37c19147887182ea513587c914e20f243c49168d6407be3cf2af4e3c2d2c4f0a35ff950adb0e13cbff615d4950c880473bfb6c46e8aa3170070ab8e6536acdf4752c40bae967ceb241f43f83d415eb7cc58bd4244a61f4d57a3c4869048ccc9bad94f8d3edb2c9a52613ab54eeb6fcd29e62cd3d96956cc4f207da8335e815fc85b297d04f975ed8f18365cce0b98002019ef611f25e6d72b46ede69c0aff51ec7418b44e2693218905b4ea80d437552474e8db5d562a897cf4560a93b407d3c5"], 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @rand_addr=' \x01\x00', 0x1, 0x5, 0x0, 0xc00, 0x6, 0x80280}) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c99cc5acb7dd9f042a807936c927b03be41e2d7ca3a91b2870aa8eccbb0f10ffee7c86511828834639d783c7dc8780f8de338e9b9f33c4f1c1f8c30f83a76478b227c7fc177c984982efb11d32e960324d0ae7165492d328cda421773487fbb10d1bd14675ebbb2a8772d20fb239484944e4867ca774ac5cc368917df6b5204aef44a1359806ad2b254756d581fa886fcc52635a6c1afee9a6cbe9a8fd332f0aee2052234c81bd5d8577094be8798c86a2baa64b61767e7f87391d195b8e16505768bc184aeca05a0b9e6eb724da158185692add1af19df6bf17c6387eaa88bf628a4b936ff2decf270cba23", 0xffffffffffffff6a}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRESOCT=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRESDEC, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000100000f5926a7e979f24e42bf6278b1e9e9510e2fc931ee0ca", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="25311898977269f8842a79bad7f62d240c0cea24105439e70600a1e38365c58c1b62fc51224ec535d4abae4ff0e66a63448ea50942a980c1359a877ac73174d6806143faf24deeeecdcef52fbba7d8350c7b96dbda73c17d634dba86235c45ed399d2750584d8b7dcc7420eb35d5190a5e1293e0a2f6daa4cbb53c6ed29089495e8cbd9c3279646de9072f066c58e49e045ca8e2bcdf62bc4d40642ee38318f7c2bf0783a32917", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRESHEX], 0xb0, 0x4880}, 0x40001) setxattr$security_selinux(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/12) 03:39:10 executing program 5: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) ftruncate(r0, 0x8800000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0x7ffff000}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) 03:39:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:39:10 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:10 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) 03:39:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:39:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x14, 0x52, 0xfffffffffffffcef, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:39:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 03:39:11 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, 0x0) 03:39:11 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000009b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}], 0x1, 0x0) 03:39:11 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)='(', 0x1}, {&(0x7f0000000180)='U', 0x1}], 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 03:39:11 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45", 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7ff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x20000000) 03:39:11 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:11 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:11 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:11 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) times(0x0) 03:39:11 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x3, 0x0, 0x0, &(0x7f0000000180), 0x0) 03:39:11 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4}}) 03:39:11 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x88172, 0xffffffffffffffff, 0x8000000) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000006) 03:39:11 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:11 executing program 5: syz_emit_ethernet(0x3f, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x9, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "1a"}}}}}}, 0x0) 03:39:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) utime(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:11 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 03:39:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp512-generic\x00'}}}]}, 0x138}}, 0x0) 03:39:11 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) [ 522.117428] syz-executor.1 (35703) used greatest stack depth: 21888 bytes left 03:39:12 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) 03:39:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 03:39:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/attr/keycreate\x00', 0x2, 0x0) fchown(r0, 0x0, 0x0) 03:39:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b40, &(0x7f0000000080)={0x0, 0x0}) 03:39:12 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45", 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:39:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x33fe0, 0x0, 0x0, 0x0) 03:39:12 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x9e, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 03:39:12 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:12 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:12 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 03:39:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b40, &(0x7f0000000080)={0x0, 0x0}) 03:39:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x5, 0x0) 03:39:13 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:13 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:13 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45", 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:39:13 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:13 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b40, &(0x7f0000000080)={0x0, 0x0}) 03:39:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x6) 03:39:13 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) [ 523.260287] Bluetooth: hci3: unexpected event for opcode 0x041c [ 523.262825] Bluetooth: hci3: unexpected event for opcode 0x041c 03:39:13 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) 03:39:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b40, &(0x7f0000000080)={0x0, 0x0}) 03:39:13 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000006c0)) [ 523.422756] Bluetooth: hci3: unexpected event for opcode 0x041c 03:39:13 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:13 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) 03:39:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x68824900, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x0}, 0x58) [ 523.540602] Bluetooth: hci3: unexpected event for opcode 0x041c 03:39:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x12, &(0x7f0000000140), 0x4) 03:39:13 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) [ 523.604488] Bluetooth: hci3: unexpected event for opcode 0x041c 03:39:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2, 0x0, 0x0, 0x0) [ 523.770640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 523.771306] blk_print_req_error: 7 callbacks suppressed [ 523.771315] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 523.772660] buffer_io_error: 6 callbacks suppressed [ 523.772669] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 523.773937] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 523.774756] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 523.775563] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 523.776393] Buffer I/O error on dev sr0, logical block 4, lost async page write 03:39:14 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45", 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:39:14 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 03:39:14 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf5", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x0) 03:39:14 executing program 6: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)) 03:39:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x68824900, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x0}, 0x58) 03:39:14 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:14 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf5", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:14 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x24d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r4, 0x5412, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 03:39:14 executing program 7: syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 03:39:14 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:39:14 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback, {[@generic={0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) 03:39:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 03:39:14 executing program 7: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000001200)) getresgid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)) 03:39:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x68824900, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x0}, 0x58) 03:39:14 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x17a, 0x0) getdents(r0, 0x0, 0x0) 03:39:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 03:39:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 03:39:15 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./cgroup/pids.max\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 03:39:15 executing program 6: r0 = epoll_create(0x100) epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x1ff]}, 0x8) 03:39:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x68824900, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x0}, 0x58) 03:39:15 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 03:39:15 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x123081, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:39:15 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0xd000000}) [ 525.294399] EXT4-fs warning (device sda): ext4_group_extend:1870: need to use ext2online to resize further 03:39:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xfe, @local, 0x5}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 03:39:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigqueueinfo(0x0, 0x0, 0x0) 03:39:15 executing program 7: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 03:39:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @broadcast, @link_local}}}}, 0x0) 03:39:15 executing program 5: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:39:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001"], 0x34}], 0x1}, 0x0) 03:39:15 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:39:15 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) select(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="9fbe7f7871c0357c77d9ca8a92960890e51f3e4519a140a02b7c10764c378578eab5d2dd459ceb5e7623ef0683ca79a0a5ddb2ab26f6e9e98dfbdbda94f9ff8a74fd8da2839de8076b209df04b4741783037ac5f68f37d7ce9970f65dec981bc154179466c68948c4ed11f31f26921977e4389cb3b4dc5b9621fd24a5221796812e57c3cfff5029ef989a2710e8ea81901930fd72900c4d8f5a4462ab757984d", 0xa0, 0x4) 03:39:15 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES64=r0], 0x24}}, 0x0) 03:39:15 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 03:39:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 525.494172] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 525.511412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 03:39:15 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) 03:39:15 executing program 5: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:39:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="01"]}) 03:39:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x22cf, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:39:15 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:39:15 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) setfsgid(0x0) 03:39:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x31, 0x0, &(0x7f0000000140)) 03:39:15 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="bd", 0x1, 0xffffffffffff8000}, {&(0x7f0000000bc0)='@', 0x1, 0x7b4baac7}], 0x0, 0x0) 03:39:15 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) 03:39:15 executing program 5: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:39:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x22cf, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:39:15 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) write$P9_RSTAT(r1, &(0x7f0000000180)={0x41, 0x7d, 0x0, {0x0, 0x3a, 0xffff, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x3, '\\\x7f]', 0x1, '-', 0x3, '\\\x7f]'}}, 0x41) write$P9_RSTAT(r1, &(0x7f0000000040)={0x4a, 0x7d, 0x0, {0x0, 0x43, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '\'', 0x6, ',{^\x1e($', 0x3, '\\\x7f]', 0x6, '#--[{/'}}, 0x4a) 03:39:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x22cf, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:39:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) 03:39:15 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:39:15 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={[{@none}, {@name={'name', 0x3d, 'user.incfs.metadata\x00'}}]}) 03:39:15 executing program 5: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:39:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010100000000000000002b00060008000300", @ANYRES32=r1], 0x1c}}, 0x0) 03:39:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getpeername(r0, 0x0, 0x0) 03:39:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600", @ANYRES32], 0x18}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x22cf, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:39:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) fork() 03:39:15 executing program 5: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, 0x0, 0x0) 03:39:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) 03:39:16 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:39:16 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x5, @loopback}, 0x1c) close(r0) 03:39:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:16 executing program 3: r0 = getpid() setpriority(0x0, r0, 0x0) 03:39:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 03:39:16 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x22fcc3, 0x0) fcntl$dupfd(r1, 0x0, r0) 03:39:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x1b, 0x1, "d8"}}) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) fork() 03:39:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x5, @loopback}, 0x1c) close(r0) 03:39:17 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000000c000000", @ANYRES32=r1, @ANYBLOB="043f30fa5d80"], 0x20}], 0x1}, 0x0) 03:39:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) 03:39:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) fork() 03:39:17 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) pkey_alloc(0x0, 0x2) 03:39:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 527.001347] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) 03:39:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x5, @loopback}, 0x1c) close(r0) 03:39:17 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:17 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000000c000000", @ANYRES32=r1, @ANYBLOB="043f30fa5d80"], 0x20}], 0x1}, 0x0) 03:39:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0x8001) [ 527.271379] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 527.273245] Bluetooth: hci3: Injecting HCI hardware error event [ 527.275547] Bluetooth: hci3: hardware error 0x00 03:39:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x5, @loopback}, 0x1c) close(r0) 03:39:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) fork() 03:39:17 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000000c000000", @ANYRES32=r1, @ANYBLOB="043f30fa5d80"], 0x20}], 0x1}, 0x0) 03:39:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:17 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x44, &(0x7f0000000000), 0x4) 03:39:18 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:18 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000000c000000", @ANYRES32=r1, @ANYBLOB="043f30fa5d80"], 0x20}], 0x1}, 0x0) 03:39:18 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1) 03:39:18 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:18 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:18 executing program 2: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) 03:39:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}) 03:39:18 executing program 1: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)=[{&(0x7f0000000480)="90", 0x1, 0x3}], 0x0, 0x0) 03:39:18 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}) 03:39:18 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:39:18 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x400454a4, &(0x7f0000000040)={{0x3}}) 03:39:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 03:39:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}) 03:39:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 03:39:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 03:39:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8953, &(0x7f0000000a80)) 03:39:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 03:39:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4cf167922e85ba52"}) ioctl$TCSETAF(r0, 0x4b4c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) 03:39:19 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000000940)=[{r0}], 0x1, 0xaf9) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 03:39:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}) [ 529.319570] Bluetooth: hci3: Opcode 0x0c03 failed: -110 03:39:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000800)="100000001e2d0bf5a232d892e8b6bd4a", 0x10}], 0x1) 03:39:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') lseek(r0, 0x4, 0x0) 03:39:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b4d, &(0x7f0000000080)={0x0, 0x0}) 03:39:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 03:39:19 executing program 6: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:39:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e5", 0x1}], 0x1}}], 0x1, 0x0) 03:39:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:39:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001600)) 03:39:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x400, 0xbdd2}, 0x0) fork() 03:39:19 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x4, 0x4}], 0x18) 03:39:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') setresuid(0x0, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 03:39:20 executing program 4: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='(.}(,#}\x00', &(0x7f0000000040)='\xc8\xac#\x90\xfa\x06HQ#\xe6ed\"t\xba\xc1\xe4F\xb2\xfd\x84B:.\xa8S\xc2\x1c\xf7;G\x8fih\xafd\xbc\xbf\xf9<\xf8\xd9\xf9\x9a\x89u\xb5\x80p\xb8\xf0\xbe\xfd1\xc3%\x99S\xa73\xbc\xa1q\xae;\x0f\x02\x10\x8fqy\xfcR\xace\xe1\xadv\xb4\r\xff9\x82\xe5\xbb\xf0&\x84\x12hP\xa4\xc6\xfc\x1b\x18\xdb\xd3\xe6\xa6\xd2\xf9\x80O\x8a\xc2\b\xb4ka\xf5\xcbAW9|\xeb\x9b\xf3\x95\xc6\x01\x95sK\x95\xee\x7f4\x94#I\xbbf\xd0f$\xa4\xcd\xd69XIm\x8cR,L\x89\xb1\x7f\x8c\bo\xbd\xb4k9\xbd\xbf\xf1Y\xc9\xa7&t\x92\x97\x10\x8a0<=\xees\x01$\xa98v\xbc\'\xf4V*~\xf8\x99\x13\x826\x86\x1d9\x1b\xc1\xac\xc3\xe0\xd9\xd0\x98i\xa7\xc3\xd9-d1\x1d\x8d\xebJ\xe8b\xf5\x1b\xbb\x9f\xc26\xa5\x8by\x11\x9d\x12\xcd\xb5\n\xac\xedD:\xab`\x95\x05\xe4\x91T\xf4j\xa8\xa5hs\xf6\x04\xaa|\xb4\nE\x96i\xdf\x1f\xe9\xa6\xeaui\xf5\xc7$U\xa8-q\xfd\xce\xc1\xa9\xcb\xf9\xd4\xe0\xd3~;4i#\xb5q/5e4\xcf\xd1\xb4}k\xd3\x067l\xc8\x1d`\xb4\xf4\xeb\xc3e\x12A\xe4\xbeU[\xa8h\x9c\x12\xdf\x12P\x18\x1b\xfafpi\xb8\\M|/\xa7\xc5\t\x14\xcc\xc5\xb7\xa5H\xf1!\x89\xb3s\xd7\xa6\x97\xf2\x8d%\xca\"\xa3zV\ao9\xb4\xa7Ki\xe2i\xcd\xd0\xc0\xda_xE\x95%\xf3X\xc7\xb3\x11\xb5YW\xe8\xef\n\xabX\xaa*\xdd\xb5\x9e#\x140x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) 03:39:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 03:39:21 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30) 03:39:21 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0xc0000) 03:39:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0a85322, &(0x7f0000000240)={{0x3b}}) 03:39:21 executing program 2: clock_settime(0xffc99a3b, &(0x7f0000000080)={0x77359400}) 03:39:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b32, &(0x7f0000000200)) 03:39:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x23, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:39:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000040)=0xfa, 0x4) 03:39:21 executing program 7: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 03:39:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 03:39:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255, 0xff) [ 532.050364] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:39:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 532.147982] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:39:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b32, &(0x7f0000000200)) 03:39:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x9) 03:39:22 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x800) 03:39:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 03:39:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, &(0x7f0000000080)=@nl=@unspec, 0x0) 03:39:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0", 0x1d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:39:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0xfd}}]}, 0x1c}}, 0x0) 03:39:22 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0xc0000) 03:39:22 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 03:39:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b32, &(0x7f0000000200)) 03:39:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, 0x0, 0x0) 03:39:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, &(0x7f0000000080)=@nl=@unspec, 0x0) 03:39:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 532.503455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 532.521022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:39:22 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000000)=ANY=[@ANYBLOB="be"]) ftruncate(r0, 0x0) 03:39:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, &(0x7f0000000080)=@nl=@unspec, 0x0) 03:39:22 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891d, &(0x7f0000005a00)={'syz_tun\x00'}) 03:39:22 executing program 3: statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:39:22 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0xc0000) 03:39:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:39:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 03:39:22 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x40, 0x0) 03:39:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:39:22 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 03:39:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 03:39:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:39:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, &(0x7f0000000080)=@nl=@unspec, 0x0) 03:39:23 executing program 7: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) set_mempolicy(0x0, 0x0, 0x0) 03:39:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 03:39:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002680)=[{&(0x7f0000000080)="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", 0x3f0}], 0x1) 03:39:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x2}]}]}, 0x20}}, 0x0) 03:39:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:39:23 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, 0xfffffffffffffffc) 03:39:23 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0xc0000) 03:39:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8970, &(0x7f0000000c80)={'sit0\x00', 0x0}) 03:39:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:39:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x2}]}]}, 0x20}}, 0x0) 03:39:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x500, &(0x7f0000001500)=[{0x0}], 0x0, 0x0) [ 533.759155] audit: type=1326 audit(2000000363.866:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=37213 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4890b19 code=0x0 [ 533.765005] 9pnet_fd: Insufficient options for proto=fd 03:39:23 executing program 3: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)=@chain) 03:39:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x2}]}]}, 0x20}}, 0x0) 03:39:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 03:39:23 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b31, &(0x7f0000000000)) 03:39:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "5c594261d4e73f29119005b8e925e3cd2c60ecf563bcb2b46d9c2846bc49b5cbc58a1af9c8056047f37dc86a16e70438ac8ae823ad0c7bdb3c86feab7eafa3a0ddc8f31ee45e8c6e45b913309de224c42460880424c1c2d863cc225ea841a78c44c3a2f4189f4f0d036cfa6eb9483306f32ba7332b242831eea0cf36f0cdd336372287c563fc7e79cc"}, 0xe1) 03:39:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 03:39:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x2}]}]}, 0x20}}, 0x0) 03:39:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) 03:39:24 executing program 7: unshare(0x24000000) syz_io_uring_setup(0x40e5, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:39:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5ac2, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 03:39:24 executing program 6: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 03:39:24 executing program 2: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) 03:39:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:39:24 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='!=-\x00') r2 = gettid() setpgid(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='!=-\x00') perf_event_open(0x0, r2, 0xe, r3, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2, 0x0, 0x0, 0x0) 03:39:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r2, 0xb, 0x0) [ 534.689819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 534.690965] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 534.692323] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 534.693631] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 534.694929] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 534.696214] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 534.697487] Buffer I/O error on dev sr0, logical block 4, lost async page write 03:39:24 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 03:39:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x1, 0x3, 0x2}}) 03:39:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_thread_area(0x0) 03:39:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5ac2, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) [ 534.787617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 534.788600] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 534.790268] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 534.791836] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 534.793257] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 534.794531] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 534.795810] Buffer I/O error on dev sr0, logical block 4, lost async page write 03:39:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x7040, 0x0) 03:39:24 executing program 6: prlimit64(0x0, 0x6, &(0x7f00000000c0), 0x0) fork() 03:39:24 executing program 3: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 03:39:24 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f0000000000)={{0x7}, {}, 0x0, 0x4}) 03:39:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5ac2, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 03:39:25 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xe1, 0x1, 0x6, 0x0, 0x81, 0x9000, 0x4fcc6c6c320417fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8f, 0x1, @perf_config_ext={0x9, 0x4}, 0x80, 0xa70f, 0x8, 0x2, 0x8000, 0xf43, 0x2, 0x0, 0x361a, 0x0, 0x5}, 0x0, 0x7, r1, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() ptrace(0x10, 0x0) wait4(r4, 0x0, 0x80000000, &(0x7f0000000240)) r5 = fork() ptrace(0x10, r5) kcmp(r5, 0x0, 0x4, r0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x69) 03:39:25 executing program 2: clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:39:25 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000080)) 03:39:25 executing program 6: prlimit64(0x0, 0x6, &(0x7f00000000c0), 0x0) fork() 03:39:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0x3da, 0x4) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, 0x0}, 0x0) 03:39:25 executing program 0: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:39:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xc0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/202, 0xca}, {0x0}], 0x2) 03:39:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}}, 0x0) 03:39:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x33, 0x0, 0x0) 03:39:25 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/88, 0x58}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/81, 0x51}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/32, 0x20}, {&(0x7f0000000e40)=""/76, 0x4c}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/196, 0xc4}], 0x7, &(0x7f0000001100)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x3, 0x1, &(0x7f0000001240)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x10, 0x0) 03:39:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5ac2, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 03:39:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0a821bd57eaa41390cda155cff29d4885a55e402aafb8bb0f8d17fd921330264e737b040cb95adfb9612ce61239d310008f705b47793f38e176d211e48263f13f9204dbe9eeb16e46b9b40", 0x4b}], 0x1) 03:39:25 executing program 6: prlimit64(0x0, 0x6, &(0x7f00000000c0), 0x0) fork() 03:39:25 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, 0x0, 0x0) 03:39:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') pread64(r0, &(0x7f0000000240)=""/224, 0xe0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) 03:39:25 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 03:39:25 executing program 6: prlimit64(0x0, 0x6, &(0x7f00000000c0), 0x0) fork() 03:39:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') pread64(r0, &(0x7f0000000240)=""/224, 0xe0, 0x0) 03:39:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x5, 0x4) 03:39:25 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xe1, 0x1, 0x6, 0x0, 0x81, 0x9000, 0x4fcc6c6c320417fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8f, 0x1, @perf_config_ext={0x9, 0x4}, 0x80, 0xa70f, 0x8, 0x2, 0x8000, 0xf43, 0x2, 0x0, 0x361a, 0x0, 0x5}, 0x0, 0x7, r1, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() ptrace(0x10, 0x0) wait4(r4, 0x0, 0x80000000, &(0x7f0000000240)) r5 = fork() ptrace(0x10, r5) kcmp(r5, 0x0, 0x4, r0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x69) [ 535.655920] debugfs: Bad value for 'source' 03:39:25 executing program 1: syz_mount_image$tmpfs(&(0x7f0000005700), &(0x7f0000005740)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005840)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x0]}}}}]}) 03:39:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x34}}, 0x0) 03:39:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) [ 535.760480] tmpfs: Bad value for 'mpol' 03:39:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/225) [ 535.771322] tmpfs: Bad value for 'mpol' 03:39:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x6, @link_local}, 0x68, {0x2, 0x0, @empty}, 'lo\x00'}) [ 535.835537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 03:39:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x42, 0x0, &(0x7f00000018c0)) 03:39:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:39:25 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffc}, {0x0, 0x4}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x0, 0xde3}], 0x1) 03:39:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000001600)) 03:39:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000480)={0x77359400}, 0x10) 03:39:26 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 03:39:26 executing program 6: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x6) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fork() tkill(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fork() tkill(0x0, 0x0) 03:39:26 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x26, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0, 0x0, 0x0, 0x803e0000}}], 0x2, 0x0) splice(r1, &(0x7f00000002c0)=0xfffffffffffffff9, r0, &(0x7f0000000300), 0x1, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) 03:39:26 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f00000004c0), 0x4) 03:39:26 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f801", 0x17}, {0x0, 0x0, 0xa20}], 0x0, &(0x7f0000000300)=ANY=[]) io_setup(0x572, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, 0x0}]) unlinkat(r2, &(0x7f0000000200)='./file0\x00', 0x200) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0xf0, 0x0) 03:39:26 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$tun(r0, &(0x7f0000000140)={@val, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "5d8ece3528206be90677dfe0cb83b694c684d4ff50261add", "031adca3455228d5184c59b3452c36aa76cae2b92db7422640b598153d98f4c3"}}}}, 0x60) 03:39:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:39:26 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x26, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0, 0x0, 0x0, 0x803e0000}}], 0x2, 0x0) splice(r1, &(0x7f00000002c0)=0xfffffffffffffff9, r0, &(0x7f0000000300), 0x1, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) 03:39:26 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000100)) 03:39:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 03:39:26 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xe1, 0x1, 0x6, 0x0, 0x81, 0x9000, 0x4fcc6c6c320417fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8f, 0x1, @perf_config_ext={0x9, 0x4}, 0x80, 0xa70f, 0x8, 0x2, 0x8000, 0xf43, 0x2, 0x0, 0x361a, 0x0, 0x5}, 0x0, 0x7, r1, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() ptrace(0x10, 0x0) wait4(r4, 0x0, 0x80000000, &(0x7f0000000240)) r5 = fork() ptrace(0x10, r5) kcmp(r5, 0x0, 0x4, r0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x69) 03:39:26 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x47, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) 03:39:26 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x26, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0, 0x0, 0x0, 0x803e0000}}], 0x2, 0x0) splice(r1, &(0x7f00000002c0)=0xfffffffffffffff9, r0, &(0x7f0000000300), 0x1, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) 03:39:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xb0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x55, 0x4, 0x2, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x29}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x2c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}]}]}, 0xb0}}, 0x0) 03:39:26 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1) 03:39:26 executing program 1: semget(0x1, 0x0, 0x0) 03:39:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 03:39:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:39:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000ac0)="0936bceaf821bce58fa7c8bf283d65dd041cd2cfa791c25cb095f74122c06825861d5b7d7d18de") 03:39:26 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x26, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0, 0x0, 0x0, 0x803e0000}}], 0x2, 0x0) splice(r1, &(0x7f00000002c0)=0xfffffffffffffff9, r0, &(0x7f0000000300), 0x1, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) 03:39:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000011c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0xf, r0, 0x0, 0x0, 0x0) 03:39:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 03:39:27 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) listen(r0, 0x0) close(r0) 03:39:27 executing program 5: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{}, 0x81}}}, 0x7) 03:39:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) 03:39:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 03:39:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x33, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:39:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') lseek(r0, 0xfffffffffffffff7, 0x0) 03:39:27 executing program 7: io_uring_setup(0x153a, &(0x7f0000000740)) 03:39:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xe1, 0x1, 0x6, 0x0, 0x81, 0x9000, 0x4fcc6c6c320417fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8f, 0x1, @perf_config_ext={0x9, 0x4}, 0x80, 0xa70f, 0x8, 0x2, 0x8000, 0xf43, 0x2, 0x0, 0x361a, 0x0, 0x5}, 0x0, 0x7, r1, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() ptrace(0x10, 0x0) wait4(r4, 0x0, 0x80000000, &(0x7f0000000240)) r5 = fork() ptrace(0x10, r5) kcmp(r5, 0x0, 0x4, r0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x69) 03:39:27 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) 03:39:27 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "babd9e434bed578310b31e76df43592e4088adff"}, 0x18) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xff, 0x2}, {0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "3e5312ab40314138dc1ad1e3b7cba1c298"}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8600c00080005000620040080000000b8979ddb636f910233a7c6e18f048dc270f4dfe74dc934f50a6decab7aae65a057223a05ea486b58deb07ee229b21c0c7b4c16b4fff6ed87195f0458c873caffafb60f47ef2ea564d74a23ab0344657c58c60ce53b4fdab9ab682c2a4bbe"], 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3f, 0xc9, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC], 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x5, 0xc9, 0x40, 0x3, 0x8}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:27 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) 03:39:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x16, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:39:27 executing program 6: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:39:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2275, &(0x7f0000000000)) 03:39:27 executing program 1: r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:39:27 executing program 7: openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 03:39:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000400)) [ 537.866890] Bluetooth: Unexpected continuation frame (len 10) [ 537.869885] Bluetooth: hci0: hardware error 0x07 03:39:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)={0x18, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x7}, @nested={0x4}]}, 0x18}], 0x1}, 0x0) [ 537.924520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.927002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:28 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x40000}, 0x20) 03:39:28 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x0) 03:39:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, "d017e9"}) signalfd(r0, &(0x7f0000000000)={[0x44]}, 0x8) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:39:28 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0xc009, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 03:39:28 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "babd9e434bed578310b31e76df43592e4088adff"}, 0x18) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xff, 0x2}, {0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "3e5312ab40314138dc1ad1e3b7cba1c298"}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8600c00080005000620040080000000b8979ddb636f910233a7c6e18f048dc270f4dfe74dc934f50a6decab7aae65a057223a05ea486b58deb07ee229b21c0c7b4c16b4fff6ed87195f0458c873caffafb60f47ef2ea564d74a23ab0344657c58c60ce53b4fdab9ab682c2a4bbe"], 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3f, 0xc9, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC], 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x5, 0xc9, 0x40, 0x3, 0x8}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:28 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x7}, 0x10) 03:39:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) 03:39:28 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80) 03:39:28 executing program 6: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000001180)='./file0\x00', 0x24000025) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:39:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000900)={@private1}, 0x14) 03:39:28 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:39:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x11, r0, 0x0) 03:39:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) 03:39:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:39:28 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "babd9e434bed578310b31e76df43592e4088adff"}, 0x18) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xff, 0x2}, {0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "3e5312ab40314138dc1ad1e3b7cba1c298"}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8600c00080005000620040080000000b8979ddb636f910233a7c6e18f048dc270f4dfe74dc934f50a6decab7aae65a057223a05ea486b58deb07ee229b21c0c7b4c16b4fff6ed87195f0458c873caffafb60f47ef2ea564d74a23ab0344657c58c60ce53b4fdab9ab682c2a4bbe"], 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3f, 0xc9, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC], 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x5, 0xc9, 0x40, 0x3, 0x8}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, "d017e9"}) signalfd(r0, &(0x7f0000000000)={[0x44]}, 0x8) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:39:28 executing program 2: io_uring_setup(0x7f7b, &(0x7f0000000000)={0x0, 0xe34e, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x2c}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r1, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, &(0x7f00000009c0)=""/54, 0x36}, 0x100}, {{0x0, 0x0, 0x0}}], 0x2, 0x42, &(0x7f0000005580)={0x77359400}) syz_open_procfs$namespace(0x0, &(0x7f00000055c0)='ns/time_for_children\x00') [ 538.564594] cgroup: fork rejected by pids controller in /syz2 03:39:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 03:39:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, "d017e9"}) signalfd(r0, &(0x7f0000000000)={[0x44]}, 0x8) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:39:28 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "babd9e434bed578310b31e76df43592e4088adff"}, 0x18) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xff, 0x2}, {0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "3e5312ab40314138dc1ad1e3b7cba1c298"}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8600c00080005000620040080000000b8979ddb636f910233a7c6e18f048dc270f4dfe74dc934f50a6decab7aae65a057223a05ea486b58deb07ee229b21c0c7b4c16b4fff6ed87195f0458c873caffafb60f47ef2ea564d74a23ab0344657c58c60ce53b4fdab9ab682c2a4bbe"], 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3f, 0xc9, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC], 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x5, 0xc9, 0x40, 0x3, 0x8}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x34, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:39:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r0, 0x0, 0x144) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:39:28 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) alarm(0x0) 03:39:28 executing program 7: creat(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 03:39:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, "d017e9"}) signalfd(r0, &(0x7f0000000000)={[0x44]}, 0x8) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:39:28 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:39:28 executing program 7: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000003c0)="b4", 0x1, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) 03:39:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 03:39:29 executing program 5: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f1d"], 0x22) 03:39:29 executing program 6: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f0000001840)='9', 0x1}], 0x1, 0x6, 0x0, 0x0) 03:39:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(r0, r0, 0x2) 03:39:29 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, 0x0) 03:39:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f00000006c0)) 03:39:29 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:39:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:39:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) 03:39:29 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) sendfile(r0, r1, 0x0, 0x800) 03:39:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0) 03:39:29 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000001900)={'ip6erspan0'}, 0xd) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, &(0x7f0000001940)={'#! ', './file0'}, 0xb) 03:39:29 executing program 3: set_mempolicy(0x2232e668c0e597ad, 0x0, 0x0) [ 539.166212] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 539.167938] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 539.169243] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 539.170411] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 539.171735] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 03:39:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3df}}) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000040)='k', 0x1}], 0x1) 03:39:29 executing program 3: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), 0xffffffffffffffff) 03:39:29 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:39:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000006a00ffbd"], 0x14}], 0x1}, 0x0) 03:39:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 03:39:29 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001440)={0x3, "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"}, 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000026c0)={{0x1, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 03:39:29 executing program 0: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/102395) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 03:39:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0) 03:39:29 executing program 0: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/102395) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 03:39:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000001d40)=""/4096, 0x1000) 03:39:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) 03:39:29 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000dc0), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 03:39:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0) 03:39:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf) 03:39:29 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)=""/198, 0xc6) 03:39:29 executing program 0: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/102395) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 03:39:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8936, &(0x7f0000000040)) 03:39:29 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 03:39:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x4) read$eventfd(r0, &(0x7f00000010c0), 0x8) 03:39:29 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) [ 539.690956] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=38903 comm=syz-executor.3 [ 539.943762] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 539.945494] Bluetooth: hci0: hardware error 0x07 03:39:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000000140)=[{0x0}, {&(0x7f00000001c0)="d0", 0x1}], 0x2}}], 0x1, 0x28880) 03:39:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0) 03:39:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) 03:39:30 executing program 0: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/102395) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 03:39:30 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) write$binfmt_script(r0, 0x0, 0x0) lseek(r0, 0x0, 0x4) io_setup(0xfff, &(0x7f0000000040)) 03:39:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) io_setup(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) 03:39:30 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 03:39:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) 03:39:30 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) timerfd_gettime(0xffffffffffffffff, 0x0) 03:39:30 executing program 7: migrate_pages(0x0, 0x4, &(0x7f00000005c0)=0x5, &(0x7f0000000600)=0x10001) 03:39:30 executing program 0: r0 = getpgrp(0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffc4}) 03:39:30 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000004c0)=0x16, 0x4) 03:39:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:39:31 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:39:31 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 03:39:31 executing program 0: r0 = getpgrp(0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffc4}) 03:39:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 03:39:31 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) 03:39:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x17, 0x0, &(0x7f00000023c0)) 03:39:31 executing program 0: r0 = getpgrp(0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffc4}) 03:39:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1000}) 03:39:31 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:39:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 03:39:31 executing program 7: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000000c0)=[{0x0, 0x2}, {&(0x7f0000000000)="12", 0x1}], 0x2, 0x0, 0x0) 03:39:31 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 03:39:31 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001540)=[{0x10, 0x1, 0x25}], 0x10}}], 0x1, 0x0) 03:39:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/stat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:31 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file2'}, 0xb) 03:39:31 executing program 0: r0 = getpgrp(0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffc4}) 03:39:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) dup2(r2, r1) 03:39:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0x0) 03:39:31 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee00, 0x0) 03:39:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x7, 0x4) 03:39:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) 03:39:31 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 03:39:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, 0x0, &(0x7f0000000140)) 03:39:31 executing program 1: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0), 0x1ff, 0x0) [ 541.991206] Bluetooth: hci0: Opcode 0x0c03 failed: -110 03:39:32 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:39:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8943, &(0x7f0000000c80)={'sit0\x00', 0x0}) 03:39:32 executing program 0: unshare(0x20000200) unshare(0x22060200) unshare(0x2020000) 03:39:32 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 03:39:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) 03:39:32 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 03:39:32 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:39:32 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8b, 0x0, 0x0, r0, 0x0}]) 03:39:33 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:39:33 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:39:33 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/164, &(0x7f00000001c0)=0xa4) 03:39:33 executing program 0: unshare(0x20000200) unshare(0x22060200) unshare(0x2020000) 03:39:33 executing program 3: futex(&(0x7f0000010940), 0x4, 0x0, &(0x7f0000010980)={0x0, 0x989680}, &(0x7f00000109c0), 0x1) 03:39:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0) 03:39:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) 03:39:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x19, 0x0, &(0x7f00000018c0)) 03:39:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000540), 0x10) 03:39:33 executing program 0: unshare(0x20000200) unshare(0x22060200) unshare(0x2020000) 03:39:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) 03:39:33 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa) 03:39:33 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:39:33 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nfs', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/242, 0xf2) 03:39:33 executing program 0: unshare(0x20000200) unshare(0x22060200) unshare(0x2020000) 03:39:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) 03:39:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fcntl$notify(r0, 0x402, 0xc000000b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fcntl$notify(r1, 0x402, 0xc000000b) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fcntl$notify(r2, 0x402, 0xc000000b) 03:39:33 executing program 1: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}}, 0x804) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x50}}, 0x801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x408, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'fou\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040060}, 0x0) r2 = io_uring_setup(0x4a9f, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, 0x2a1}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x302400, 0x0) r4 = openat$cgroup(r3, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r2, 0x10000000) ioctl$CDROMRESET(r2, 0x5312) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000640)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000880)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000009c0)) 03:39:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x1f8, 0x0, 0x0) 03:39:33 executing program 2: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 03:39:34 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:39:34 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a4aeee", 0x0, 0x6, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "9afb1a9a27b9e92f"}}}}}}}, 0x0) 03:39:34 executing program 2: pipe(&(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x8b}, &(0x7f00000000c0), 0x0) 03:39:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:34 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x64) 03:39:34 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, &(0x7f0000000080)=ANY=[], 0xffd3) write$P9_RSTAT(r0, &(0x7f0000000080)={0x50, 0x7d, 0x0, {0x0, 0x49, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xc, '-*@{[g@-\xdf]}]', 0x3, '-]\'', 0x5, '}%}%-', 0x2, '-*'}}, 0x50) fcntl$setpipe(r0, 0x407, 0xff0f) 03:39:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x8, 0x0, 0x0) 03:39:34 executing program 2: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) 03:39:34 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/250) 03:39:34 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000180)) 03:39:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 03:39:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000540), 0x10) 03:39:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:39:34 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5412, &(0x7f0000000080)) 03:39:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000540), 0x10) 03:39:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000000), 0x4) 03:39:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) 03:39:35 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/125, 0x7d) read(r0, &(0x7f0000000080)=""/1, 0x1) 03:39:35 executing program 2: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) 03:39:35 executing program 1: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, 0x0) 03:39:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) shutdown(r0, 0x0) 03:39:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20) 03:39:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 03:39:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000580), 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) 03:39:35 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) chdir(&(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:39:35 executing program 7: statfs(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b49, &(0x7f0000000040)) 03:39:35 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x1, 0x905}, 0x14}}, 0x0) 03:39:36 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 03:39:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_GET_PACK_ID(r2, 0x2275, &(0x7f0000000040)) 03:39:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 03:39:36 executing program 7: syz_io_uring_setup(0x1df6, &(0x7f0000002040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3c5, &(0x7f00000021c0)={0x0, 0x22b4, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002240), &(0x7f0000002280)) 03:39:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x6e6bb1}}, 0x50}}, 0x0) 03:39:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000540), 0x10) 03:39:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "a7e987e221795cfdadbb39dc7cf2e00799ceeef28f1cdca9ea953aceb227fcd51aa67ffba49b4d"}, 0x32) 03:39:36 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_getoverrun(0x0) 03:39:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x3ad}, "16d34093c36411e89aa4f98fa09960"}, 0x2f) 03:39:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') fstat(r0, &(0x7f0000000000)) 03:39:36 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') pread64(r0, &(0x7f0000000040)=""/60, 0x3c, 0x0) 03:39:36 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000001a4c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0xa46) 03:39:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000780)=ANY=[], 0xa6, 0x0) 03:39:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x68824900, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x0}, 0x58) [ 546.691253] sg_write: data in/out 905/1 bytes for SCSI command 0xc3-- guessing data in; [ 546.691253] program syz-executor.0 not setting count and/or reply_len properly 03:39:36 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:36 executing program 7: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) 03:39:37 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:37 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1a2685", 0x44, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private0, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 03:39:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={{r0}}) 03:39:37 executing program 7: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) 03:39:37 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xf9ffffff}) 03:39:37 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 03:39:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) 03:39:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 547.500426] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 547.505592] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 547.522239] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 03:39:37 executing program 0: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:39:37 executing program 7: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) 03:39:37 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x21084, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x6) 03:39:37 executing program 6: syz_emit_ethernet(0x4c, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x16, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{}]}}}}}}, 0x0) 03:39:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f0000000380)=ANY=[]) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) 03:39:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001440), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000180)) [ 547.792938] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 03:39:38 executing program 7: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) 03:39:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) 03:39:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) socket$inet6_udp(0xa, 0x2, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:39:38 executing program 4: r0 = memfd_secret(0x0) ftruncate(r0, 0x6) ftruncate(r0, 0x0) 03:39:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0) 03:39:38 executing program 3: futex(0x0, 0xc, 0x0, 0x0, &(0x7f0000000540), 0x0) 03:39:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 03:39:38 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:38 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmdt(r0) shmat(0x0, &(0x7f0000701000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) 03:39:38 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:38 executing program 0: setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}) 03:39:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f30200000000000000003600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 03:39:38 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000, 0x600}]) 03:39:38 executing program 7: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') sync_file_range(r0, 0xffffffffffff0700, 0x0, 0x0) 03:39:38 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_create(0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0) 03:39:38 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc028660f, &(0x7f0000000040)) 03:39:38 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 548.743849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 548.744780] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 03:39:38 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x10, 0x0, &(0x7f0000000100)) [ 548.760368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 548.761429] I/O error, dev sr0, sector 259 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 548.763299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 548.764294] I/O error, dev sr0, sector 515 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 548.765749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 548.766581] I/O error, dev sr0, sector 771 op 0x0:(READ) flags 0x0 phys_seg 32 prio class 0 03:39:39 executing program 7: syz_open_procfs(0x0, &(0x7f00000017c0)='net/vlan/vlan1\x00') 03:39:39 executing program 5: unlinkat(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0x200) 03:39:39 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:39 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x80) 03:39:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) sched_getscheduler(0x0) 03:39:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') pread64(r0, &(0x7f0000000040)=""/60, 0x3c, 0x760e) 03:39:39 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000006c0)=0x80, 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/24, 0x18}}], 0x1, 0x0, 0x0) 03:39:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @local}, 0x1c) 03:39:39 executing program 5: set_mempolicy(0xc000, 0x0, 0x0) 03:39:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 03:39:39 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) 03:39:39 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/160, 0x7ffff000}, {&(0x7f0000000140)=""/135, 0x87}], 0x2) 03:39:40 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) 03:39:40 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 03:39:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000001080)=""/248) 03:39:40 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000640), 0x8, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000180)=@v3, 0x18, 0x0) 03:39:40 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) 03:39:40 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:40 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000080)) 03:39:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 03:39:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000003600)=[{&(0x7f00000033c0)=""/216, 0xd8}, {0x0}, {0x0}], 0x3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:39:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000001080)=""/248) 03:39:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000001700)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000016c0), &(0x7f0000000180)=0x8) 03:39:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x80000000, 0x4) 03:39:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x11, 0x0, &(0x7f0000000240)) 03:39:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) close(r0) 03:39:41 executing program 7: io_setup(0x572, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x7ffffffff000}]) 03:39:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000001080)=""/248) 03:39:41 executing program 6: sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000005e40), 0xffffffffffffffff) 03:39:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r0, 0x404, 0x0, 0x0, 0x0) 03:39:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xe1, 0x0, 0x405}}}, 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000001000700a23b012515fc1a26b479e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x43}, @l2cap_cid_signaling={{0x3f}, [@l2cap_create_chan_rsp={{0xd, 0x80, 0x8}, {0x0, 0x392, 0x98, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xef, 0x4}, {0x2, 0xb35}}, @l2cap_conf_req={{0x4, 0x7, 0xc}, {0x100, 0x24, [@l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_flushto={0x2, 0x2, 0x81}]}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0xee, 0x20, 0x59, 0x5}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x200, 0x3}}, @l2cap_info_rsp={{0xb, 0x4, 0x4}, {0x800, 0x4}}]}}, 0x48) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa126b000200001ba1d0df659ca82b567cf602"], 0x1a) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x100}}, @l2cap_info_req={{0xa, 0x40, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x5a67}}, @l2cap_create_chan_req={{0xc, 0x52, 0x5}, {0xee, 0x9, 0x1}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x9, 0x0, 0x5857, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0xb0, 0x2}, {0x5}}]}}, 0x36) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)) 03:39:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:39:41 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) setitimer(0x0, 0x0, 0x0) 03:39:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000001080)=""/248) 03:39:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x300) 03:39:41 executing program 1: lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r5, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r8, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 03:39:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) 03:39:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7a, 0x0, 0x0, 0x1ff, 0x0, "b1ee63efd018534e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 03:39:41 executing program 7: io_setup(0x572, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x7ffffffff000}]) 03:39:41 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) [ 551.627063] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:39:41 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0'}, 0x4) [ 551.669942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:39:41 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0) 03:39:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:39:42 executing program 7: io_setup(0x572, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x7ffffffff000}]) 03:39:42 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) fcntl$getflags(r0, 0x401) 03:39:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0xce24, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x20004000) 03:39:42 executing program 1: lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r5, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r8, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 03:39:42 executing program 3: socket(0x0, 0x0, 0x0) 03:39:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6c, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:39:42 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 03:39:42 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:42 executing program 5: semctl$IPC_RMID(0x0, 0x0, 0x8) [ 552.071898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:39:42 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x20004000) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/net\x00') 03:39:42 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/87}, 0x5f, 0x0, 0x0) msgsnd(r0, &(0x7f0000001440)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000001040)={0x3}, 0x8, 0x0) 03:39:42 executing program 7: io_setup(0x572, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x7ffffffff000}]) 03:39:42 executing program 1: lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r5, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r8, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 03:39:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 03:39:42 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 03:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000800)="0f0000001e2d0bf5a232d892e8b6bd4a", 0x10}], 0x1) 03:39:42 executing program 3: setgid(0x0) [ 552.344499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:39:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200), 0x4) 03:39:42 executing program 1: lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r5, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r8, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 03:39:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) 03:39:42 executing program 7: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000019280), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) 03:39:42 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) fsopen(0x0, 0x0) 03:39:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) [ 552.578715] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:39:42 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56) 03:39:42 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 03:39:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000041c0)) 03:39:42 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 03:39:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 03:39:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) faccessat2(r0, &(0x7f00000001c0)='.\x00', 0x0, 0x0) 03:39:42 executing program 5: r0 = gettid() pidfd_open(r0, 0x0) 03:39:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x47, 0x0, &(0x7f0000000140)=0x47) [ 552.816403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 03:39:43 executing program 3: r0 = epoll_create(0x2b) r1 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)) 03:39:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 03:39:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 03:39:43 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') pread64(r0, &(0x7f0000000240)=""/42, 0xff30, 0x0) 03:39:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) dup3(0xffffffffffffffff, r1, 0x0) dup3(r0, r1, 0x80000) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="fa", 0x80000, 0x600}]) 03:39:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000100)=""/41, 0x29) 03:39:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x48, 0x0, &(0x7f00000018c0)) 03:39:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x28, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) [ 553.065824] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:43 executing program 6: getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) 03:39:43 executing program 5: socket$inet(0x2, 0xa, 0x7f) 03:39:43 executing program 7: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) 03:39:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, 0x0, &(0x7f0000001880)) 03:39:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) 03:39:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 03:39:43 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1e, 0x0, 0x0) 03:39:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 03:39:43 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x401054d5, &(0x7f00000000c0)) 03:39:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) [ 553.449613] Process accounting resumed 03:39:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'ip6tnl0\x00'}) 03:39:43 executing program 6: setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 03:39:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 03:39:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) 03:39:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, 0x0, &(0x7f0000001880)) 03:39:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r1, 0x3d01edad0464e607, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 03:39:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, 0x0, &(0x7f0000001880)) [ 553.653967] Process accounting resumed 03:39:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r1, 0x3d01edad0464e607, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 03:39:43 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) 03:39:43 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffe4e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x40, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/32) 03:39:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) [ 553.828168] Process accounting resumed 03:39:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 6: semget(0x1, 0x6, 0x0) 03:39:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 03:39:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, 0x0, &(0x7f0000001880)) 03:39:43 executing program 4: uname(&(0x7f0000000080)=""/1) 03:39:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r1, 0x3d01edad0464e607, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 03:39:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 03:39:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) [ 553.894665] Process accounting resumed 03:39:44 executing program 6: arch_prctl$ARCH_GET_GS(0x1025, &(0x7f0000000140)) 03:39:44 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 03:39:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0x20000, 0x4) 03:39:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r1, 0x3d01edad0464e607, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 03:39:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) 03:39:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="5b8e601236948fb18a93803f867f79ec202ca1842ae9f96b13bc6baf0d25bf4e58c958d5e6b6f87cd3eca7f4fbd0a4305a9e44965daaa9e6f0c3acc9bfa429a1147f85fe0e27651bdf01f3485b2cb5d3c608cc96fe1fb350ddf48f3408cc44a58e033b6baebc324efc520f79e22e001b844537d3699b6aef53fc3975875480928a9b9b75494b149a155be91b5661120a345bd4e03be369ee10bba088d98a868777b960c67de875ab886d0cd14f", 0xad}, {&(0x7f0000002bc0)="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", 0xe14}], 0x3}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) 03:39:44 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 03:39:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000fe"], 0x0) 03:39:44 executing program 2: clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:44 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @multicast1}, @redirect={0x5, 0x0, 0x0, @remote, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) 03:39:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x6}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:44 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 03:39:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000fe"], 0x0) 03:39:44 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 03:39:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (fail_nth: 1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 554.357303] FAULT_INJECTION: forcing a failure. [ 554.357303] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 554.358318] CPU: 1 UID: 0 PID: 44367 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.358334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.358342] Call Trace: [ 554.358346] [ 554.358350] dump_stack_lvl+0xfa/0x120 [ 554.358376] should_fail_ex+0x4d7/0x5e0 [ 554.358396] _copy_from_user+0x30/0xd0 [ 554.358415] copy_msghdr_from_user+0x88/0x150 [ 554.358436] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.358459] ? lock_acquire+0x15e/0x2f0 [ 554.358475] ___sys_sendmsg+0xdc/0x1b0 [ 554.358493] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.358514] ? proc_fail_nth_write+0x97/0x220 [ 554.358536] ? lock_acquire+0x15e/0x2f0 [ 554.358547] ? __fget_files+0x34/0x3b0 [ 554.358564] ? find_held_lock+0x2b/0x80 [ 554.358582] ? __fget_files+0x203/0x3b0 [ 554.358597] ? lock_release+0xc8/0x290 [ 554.358611] ? __fget_files+0x20d/0x3b0 [ 554.358631] __sys_sendmsg+0x150/0x200 [ 554.358641] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.358654] ? fput+0x6a/0x100 [ 554.358666] ? ksys_write+0x1a3/0x240 [ 554.358683] ? __pfx_ksys_write+0x10/0x10 [ 554.358704] do_syscall_64+0xbf/0x360 [ 554.358718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.358731] RIP: 0033:0x7eff9ffc5b19 [ 554.358740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.358752] RSP: 002b:00007eff9d53b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.358764] RAX: ffffffffffffffda RBX: 00007effa00d8f60 RCX: 00007eff9ffc5b19 [ 554.358772] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 554.358779] RBP: 00007eff9d53b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.358787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.358794] R13: 00007ffca695e30f R14: 00007eff9d53b300 R15: 0000000000022000 [ 554.358809] [ 554.378682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.387702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.394681] FAULT_INJECTION: forcing a failure. [ 554.394681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.396471] CPU: 0 UID: 0 PID: 44370 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.396501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.396514] Call Trace: [ 554.396522] [ 554.396530] dump_stack_lvl+0xfa/0x120 [ 554.396571] should_fail_ex+0x4d7/0x5e0 [ 554.396605] _copy_from_user+0x30/0xd0 [ 554.396640] copy_msghdr_from_user+0x88/0x150 [ 554.396676] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.396720] ? lock_acquire+0x15e/0x2f0 [ 554.396746] ___sys_sendmsg+0xdc/0x1b0 [ 554.396780] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.396820] ? proc_fail_nth_write+0x97/0x220 [ 554.396855] ? lock_acquire+0x15e/0x2f0 [ 554.396876] ? __fget_files+0x34/0x3b0 [ 554.396905] ? find_held_lock+0x2b/0x80 [ 554.396933] ? __fget_files+0x203/0x3b0 [ 554.396961] ? lock_release+0xc8/0x290 [ 554.396985] ? __fget_files+0x20d/0x3b0 [ 554.397023] __sys_sendmsg+0x150/0x200 [ 554.397049] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.397073] ? fput+0x6a/0x100 [ 554.397094] ? ksys_write+0x1a3/0x240 [ 554.397124] ? __pfx_ksys_write+0x10/0x10 [ 554.397163] do_syscall_64+0xbf/0x360 [ 554.397186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.397209] RIP: 0033:0x7ff065ed8b19 [ 554.397225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.397245] RSP: 002b:00007ff06344e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.397266] RAX: ffffffffffffffda RBX: 00007ff065febf60 RCX: 00007ff065ed8b19 [ 554.397281] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 554.397294] RBP: 00007ff06344e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.397307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.397320] R13: 00007ffd77a8987f R14: 00007ff06344e300 R15: 0000000000022000 [ 554.397348] [ 554.454481] FAULT_INJECTION: forcing a failure. [ 554.454481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.455530] CPU: 1 UID: 0 PID: 44381 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.455546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.455557] Call Trace: [ 554.455564] [ 554.455574] dump_stack_lvl+0xfa/0x120 [ 554.455625] should_fail_ex+0x4d7/0x5e0 [ 554.455668] _copy_from_user+0x30/0xd0 [ 554.455701] copy_msghdr_from_user+0x88/0x150 [ 554.455723] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.455746] ? lock_acquire+0x15e/0x2f0 [ 554.455762] ___sys_sendmsg+0xdc/0x1b0 [ 554.455781] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.455802] ? proc_fail_nth_write+0x97/0x220 [ 554.455823] ? lock_acquire+0x15e/0x2f0 [ 554.455834] ? __fget_files+0x34/0x3b0 [ 554.455851] ? find_held_lock+0x2b/0x80 [ 554.455868] ? __fget_files+0x203/0x3b0 [ 554.455884] ? lock_release+0xc8/0x290 [ 554.455897] ? __fget_files+0x20d/0x3b0 [ 554.455917] __sys_sendmsg+0x150/0x200 [ 554.455927] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.455940] ? fput+0x6a/0x100 [ 554.455953] ? ksys_write+0x1a3/0x240 [ 554.455970] ? __pfx_ksys_write+0x10/0x10 [ 554.455991] do_syscall_64+0xbf/0x360 [ 554.456006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.456019] RIP: 0033:0x7f2836138b19 [ 554.456029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.456045] RSP: 002b:00007f28336ae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.456057] RAX: ffffffffffffffda RBX: 00007f283624bf60 RCX: 00007f2836138b19 [ 554.456065] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 554.456073] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.456083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.456090] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 554.456106] [ 554.458009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.504863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.886569] FAULT_INJECTION: forcing a failure. [ 554.886569] name failslab, interval 1, probability 0, space 0, times 1 [ 554.886742] FAULT_INJECTION: forcing a failure. [ 554.886742] name failslab, interval 1, probability 0, space 0, times 1 [ 554.888795] CPU: 1 UID: 0 PID: 44485 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.888831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.888846] Call Trace: [ 554.888855] [ 554.888864] dump_stack_lvl+0xfa/0x120 [ 554.888915] should_fail_ex+0x4d7/0x5e0 [ 554.888956] should_failslab+0xc2/0x120 [ 554.888998] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 554.889043] ? __alloc_skb+0x2ab/0x370 [ 554.889089] __alloc_skb+0x2ab/0x370 [ 554.889127] ? __pfx___alloc_skb+0x10/0x10 [ 554.889170] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 554.889220] netlink_alloc_large_skb+0x69/0x150 [ 554.889247] netlink_sendmsg+0x676/0xd80 [ 554.889277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.889315] ____sys_sendmsg+0xa67/0xc20 [ 554.889349] ? copy_msghdr_from_user+0xfb/0x150 [ 554.889390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.889431] ? lock_acquire+0x15e/0x2f0 [ 554.889462] ___sys_sendmsg+0x10f/0x1b0 [ 554.889504] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.889551] ? proc_fail_nth_write+0x97/0x220 [ 554.889594] ? lock_acquire+0x15e/0x2f0 [ 554.889618] ? __fget_files+0x34/0x3b0 [ 554.889653] ? find_held_lock+0x2b/0x80 [ 554.889687] ? __fget_files+0x203/0x3b0 [ 554.889721] ? lock_release+0xc8/0x290 [ 554.889750] ? __fget_files+0x20d/0x3b0 [ 554.889795] __sys_sendmsg+0x150/0x200 [ 554.889819] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.889853] ? __pfx_ksys_write+0x10/0x10 [ 554.889901] do_syscall_64+0xbf/0x360 [ 554.889930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.889957] RIP: 0033:0x7eff9ffc5b19 [ 554.889977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.890005] RSP: 002b:00007eff9d53b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.890030] RAX: ffffffffffffffda RBX: 00007effa00d8f60 RCX: 00007eff9ffc5b19 [ 554.890048] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 554.890063] RBP: 00007eff9d53b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.890079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.890095] R13: 00007ffca695e30f R14: 00007eff9d53b300 R15: 0000000000022000 [ 554.890128] [ 554.911849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.912292] CPU: 0 UID: 0 PID: 44483 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.912324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.912337] Call Trace: [ 554.912345] [ 554.912353] dump_stack_lvl+0xfa/0x120 [ 554.912395] should_fail_ex+0x4d7/0x5e0 [ 554.912429] should_failslab+0xc2/0x120 [ 554.912465] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 554.912496] ? __alloc_skb+0x2ab/0x370 [ 554.912534] __alloc_skb+0x2ab/0x370 [ 554.912566] ? __pfx___alloc_skb+0x10/0x10 [ 554.912597] ? selinux_socket_getpeersec_dgram+0x236/0x360 [ 554.912632] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 554.912668] ? __lock_acquire+0xc65/0x1b70 [ 554.912695] netlink_alloc_large_skb+0x69/0x150 [ 554.912718] netlink_sendmsg+0x676/0xd80 [ 554.912743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.912775] ____sys_sendmsg+0xa67/0xc20 [ 554.912803] ? copy_msghdr_from_user+0xfb/0x150 [ 554.912837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.912871] ? lock_acquire+0x15e/0x2f0 [ 554.912896] ___sys_sendmsg+0x10f/0x1b0 [ 554.912931] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.912970] ? proc_fail_nth_write+0x97/0x220 [ 554.913006] ? lock_acquire+0x15e/0x2f0 [ 554.913026] ? __fget_files+0x34/0x3b0 [ 554.913062] ? find_held_lock+0x2b/0x80 [ 554.913090] ? __fget_files+0x203/0x3b0 [ 554.913118] ? lock_release+0xc8/0x290 [ 554.913143] ? __fget_files+0x20d/0x3b0 [ 554.913180] __sys_sendmsg+0x150/0x200 [ 554.913200] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.913228] ? __pfx_ksys_write+0x10/0x10 [ 554.913267] do_syscall_64+0xbf/0x360 [ 554.913291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.913314] RIP: 0033:0x7f2836138b19 [ 554.913331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.913351] RSP: 002b:00007f28336ae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.913373] RAX: ffffffffffffffda RBX: 00007f283624bf60 RCX: 00007f2836138b19 [ 554.913387] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 554.913400] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.913413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.913426] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 554.913454] [ 554.957725] FAULT_INJECTION: forcing a failure. [ 554.957725] name failslab, interval 1, probability 0, space 0, times 0 [ 554.958755] CPU: 1 UID: 0 PID: 44489 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 554.958772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.958782] Call Trace: [ 554.958790] [ 554.958800] dump_stack_lvl+0xfa/0x120 [ 554.958847] should_fail_ex+0x4d7/0x5e0 [ 554.958888] should_failslab+0xc2/0x120 [ 554.958940] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 554.958965] ? __alloc_skb+0x2ab/0x370 [ 554.958988] __alloc_skb+0x2ab/0x370 [ 554.959007] ? __pfx___alloc_skb+0x10/0x10 [ 554.959026] ? selinux_socket_getpeersec_dgram+0x236/0x360 [ 554.959053] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 554.959075] ? __lock_acquire+0xc65/0x1b70 [ 554.959091] netlink_alloc_large_skb+0x69/0x150 [ 554.959105] netlink_sendmsg+0x676/0xd80 [ 554.959120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.959139] ____sys_sendmsg+0xa67/0xc20 [ 554.959156] ? copy_msghdr_from_user+0xfb/0x150 [ 554.959176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.959197] ? lock_acquire+0x15e/0x2f0 [ 554.959212] ___sys_sendmsg+0x10f/0x1b0 [ 554.959233] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.959256] ? proc_fail_nth_write+0x97/0x220 [ 554.959278] ? lock_acquire+0x15e/0x2f0 [ 554.959290] ? __fget_files+0x34/0x3b0 [ 554.959307] ? find_held_lock+0x2b/0x80 [ 554.959325] ? __fget_files+0x203/0x3b0 [ 554.959342] ? lock_release+0xc8/0x290 [ 554.959356] ? __fget_files+0x20d/0x3b0 [ 554.959379] __sys_sendmsg+0x150/0x200 [ 554.959390] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.959408] ? __pfx_ksys_write+0x10/0x10 [ 554.959431] do_syscall_64+0xbf/0x360 [ 554.959446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.959459] RIP: 0033:0x7ff065ed8b19 [ 554.959469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.959481] RSP: 002b:00007ff06344e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.959493] RAX: ffffffffffffffda RBX: 00007ff065febf60 RCX: 00007ff065ed8b19 [ 554.959502] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 554.959510] RBP: 00007ff06344e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.959518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.959526] R13: 00007ffd77a8987f R14: 00007ff06344e300 R15: 0000000000022000 [ 554.959543] [ 554.990403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.997750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.999919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.134018] FAULT_INJECTION: forcing a failure. [ 555.134018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.135316] CPU: 1 UID: 0 PID: 44735 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 555.135334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.135347] Call Trace: [ 555.135355] [ 555.135364] dump_stack_lvl+0xfa/0x120 [ 555.135415] should_fail_ex+0x4d7/0x5e0 [ 555.135459] _copy_from_iter+0x1dc/0x15b0 [ 555.135491] ? lock_acquire+0x15e/0x2f0 [ 555.135506] ? __virt_addr_valid+0x1c6/0x5d0 [ 555.135527] ? find_held_lock+0x2b/0x80 [ 555.135547] ? __pfx__copy_from_iter+0x10/0x10 [ 555.135566] ? lock_release+0xc8/0x290 [ 555.135580] ? __virt_addr_valid+0x100/0x5d0 [ 555.135601] ? __check_object_size+0x57b/0x880 [ 555.135623] netlink_sendmsg+0x809/0xd80 [ 555.135641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.135660] ____sys_sendmsg+0xa67/0xc20 [ 555.135678] ? copy_msghdr_from_user+0xfb/0x150 [ 555.135700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.135722] ? lock_acquire+0x15e/0x2f0 [ 555.135737] ___sys_sendmsg+0x10f/0x1b0 [ 555.135759] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.135783] ? proc_fail_nth_write+0x97/0x220 [ 555.135806] ? lock_acquire+0x15e/0x2f0 [ 555.135818] ? __fget_files+0x34/0x3b0 [ 555.135837] ? find_held_lock+0x2b/0x80 [ 555.135854] ? __fget_files+0x203/0x3b0 [ 555.135872] ? lock_release+0xc8/0x290 [ 555.135887] ? __fget_files+0x20d/0x3b0 [ 555.135911] __sys_sendmsg+0x150/0x200 [ 555.135922] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.135940] ? __pfx_ksys_write+0x10/0x10 [ 555.135965] do_syscall_64+0xbf/0x360 [ 555.135981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.135996] RIP: 0033:0x7f2836138b19 [ 555.136007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.136020] RSP: 002b:00007f28336ae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.136038] RAX: ffffffffffffffda RBX: 00007f283624bf60 RCX: 00007f2836138b19 [ 555.136047] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 555.136056] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.136064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.136072] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 555.136090] [ 555.197315] FAULT_INJECTION: forcing a failure. [ 555.197315] name failslab, interval 1, probability 0, space 0, times 0 [ 555.198458] CPU: 1 UID: 0 PID: 44810 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 555.198475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.198488] Call Trace: [ 555.198496] [ 555.198506] dump_stack_lvl+0xfa/0x120 [ 555.198552] should_fail_ex+0x4d7/0x5e0 [ 555.198593] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 555.198626] should_failslab+0xc2/0x120 [ 555.198672] __kmalloc_noprof+0xb4/0x4b0 [ 555.198710] ? avc_has_perm_noaudit+0x150/0x3d0 [ 555.198750] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 555.198789] genl_family_rcv_msg_doit+0xab/0x2f0 [ 555.198821] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 555.198858] ? cap_capable+0xdb/0x3b0 [ 555.198889] ? security_capable+0x2f/0x90 [ 555.198944] ? ns_capable+0xe2/0x120 [ 555.198982] genl_rcv_msg+0x532/0x7e0 [ 555.199015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.199050] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 555.199092] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 555.199134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 555.199169] ? __lock_acquire+0x694/0x1b70 [ 555.199200] netlink_rcv_skb+0x147/0x430 [ 555.199227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.199257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.199294] ? netlink_deliver_tap+0x1ae/0xce0 [ 555.199336] ? selinux_netlink_send+0x507/0x880 [ 555.199378] ? is_vmalloc_addr+0x86/0xa0 [ 555.199420] genl_rcv+0x28/0x40 [ 555.199446] netlink_unicast+0x5a7/0x870 [ 555.199476] ? __pfx_netlink_unicast+0x10/0x10 [ 555.199514] netlink_sendmsg+0x8ac/0xd80 [ 555.199544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.199583] ____sys_sendmsg+0xa67/0xc20 [ 555.199618] ? copy_msghdr_from_user+0xfb/0x150 [ 555.199664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.199707] ? lock_acquire+0x15e/0x2f0 [ 555.199737] ___sys_sendmsg+0x10f/0x1b0 [ 555.199783] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.199833] ? proc_fail_nth_write+0x97/0x220 [ 555.199856] ? lock_acquire+0x15e/0x2f0 [ 555.199869] ? __fget_files+0x34/0x3b0 [ 555.199886] ? find_held_lock+0x2b/0x80 [ 555.199902] ? __fget_files+0x203/0x3b0 [ 555.199919] ? lock_release+0xc8/0x290 [ 555.199934] ? __fget_files+0x20d/0x3b0 [ 555.199956] __sys_sendmsg+0x150/0x200 [ 555.199968] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.199985] ? __pfx_ksys_write+0x10/0x10 [ 555.200009] do_syscall_64+0xbf/0x360 [ 555.200023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.200037] RIP: 0033:0x7f2836138b19 [ 555.200046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.200058] RSP: 002b:00007f28336ae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.200071] RAX: ffffffffffffffda RBX: 00007f283624bf60 RCX: 00007f2836138b19 [ 555.200079] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 555.200087] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.200095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.200102] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 555.200119] [ 555.383376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.389885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.392951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.459575] FAULT_INJECTION: forcing a failure. [ 555.459575] name failslab, interval 1, probability 0, space 0, times 0 [ 555.460919] CPU: 0 UID: 0 PID: 45109 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 555.460946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.460972] Call Trace: [ 555.460983] [ 555.460998] dump_stack_lvl+0xfa/0x120 [ 555.461088] should_fail_ex+0x4d7/0x5e0 [ 555.461161] should_failslab+0xc2/0x120 [ 555.461205] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 555.461230] ? __alloc_skb+0x2ab/0x370 [ 555.461261] __alloc_skb+0x2ab/0x370 [ 555.461287] ? __pfx___alloc_skb+0x10/0x10 [ 555.461313] ? genl_rcv_msg+0x532/0x7e0 [ 555.461339] netlink_ack+0x167/0xbf0 [ 555.461363] netlink_rcv_skb+0x344/0x430 [ 555.461380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.461401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.461427] ? netlink_deliver_tap+0x1ae/0xce0 [ 555.461453] ? selinux_netlink_send+0x507/0x880 [ 555.461479] ? is_vmalloc_addr+0x86/0xa0 [ 555.461507] genl_rcv+0x28/0x40 [ 555.461523] netlink_unicast+0x5a7/0x870 [ 555.461542] ? __pfx_netlink_unicast+0x10/0x10 [ 555.461568] netlink_sendmsg+0x8ac/0xd80 [ 555.461589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.461615] ____sys_sendmsg+0xa67/0xc20 [ 555.461638] ? copy_msghdr_from_user+0xfb/0x150 [ 555.461666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.461694] ? lock_acquire+0x15e/0x2f0 [ 555.461715] ___sys_sendmsg+0x10f/0x1b0 [ 555.461743] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.461775] ? proc_fail_nth_write+0x97/0x220 [ 555.461804] ? lock_acquire+0x15e/0x2f0 [ 555.461820] ? __fget_files+0x34/0x3b0 [ 555.461844] ? find_held_lock+0x2b/0x80 [ 555.461867] ? __fget_files+0x203/0x3b0 [ 555.461890] ? lock_release+0xc8/0x290 [ 555.461910] ? __fget_files+0x20d/0x3b0 [ 555.461940] __sys_sendmsg+0x150/0x200 [ 555.461956] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.461979] ? __pfx_ksys_write+0x10/0x10 [ 555.462012] do_syscall_64+0xbf/0x360 [ 555.462031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.462050] RIP: 0033:0x7f2836138b19 [ 555.462063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.462080] RSP: 002b:00007f28336ae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.462097] RAX: ffffffffffffffda RBX: 00007f283624bf60 RCX: 00007f2836138b19 [ 555.462108] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 555.462119] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.462130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.462140] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 555.462163] [ 555.807602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.818367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.823371] FAULT_INJECTION: forcing a failure. [ 555.823371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.825579] CPU: 1 UID: 0 PID: 45322 Comm: syz-executor.4 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 555.825608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.825621] Call Trace: [ 555.825629] [ 555.825637] dump_stack_lvl+0xfa/0x120 [ 555.825679] should_fail_ex+0x4d7/0x5e0 [ 555.825713] _copy_to_user+0x32/0xd0 [ 555.825749] simple_read_from_buffer+0xe0/0x180 [ 555.825780] proc_fail_nth_read+0x18a/0x240 [ 555.825813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.825846] ? security_file_permission+0x22/0x90 [ 555.825875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.825907] vfs_read+0x1eb/0xbe0 [ 555.825942] ? __pfx_vfs_read+0x10/0x10 [ 555.825973] ? lock_release+0xc8/0x290 [ 555.826000] ? __fget_files+0x20d/0x3b0 [ 555.826047] ksys_read+0x121/0x240 [ 555.826076] ? __pfx_ksys_read+0x10/0x10 [ 555.826115] do_syscall_64+0xbf/0x360 [ 555.826138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.826161] RIP: 0033:0x7f28360eb69c [ 555.826177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 555.826198] RSP: 002b:00007f28336ae170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.826219] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007f28360eb69c [ 555.826233] RDX: 000000000000000f RSI: 00007f28336ae1e0 RDI: 0000000000000004 [ 555.826246] RBP: 00007f28336ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.826259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.826271] R13: 00007ffe2d4848ef R14: 00007f28336ae300 R15: 0000000000022000 [ 555.826300] [ 558.132536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.135279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.137614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.143803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.146631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.167184] Bluetooth: hci3: command tx timeout [ 562.215157] Bluetooth: hci3: command tx timeout [ 564.263242] Bluetooth: hci3: command tx timeout [ 566.311176] Bluetooth: hci3: command tx timeout [ 574.330347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.331491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.392351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.393464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.513226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.523560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.906322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.908290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.915947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.925746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.324584] FAULT_INJECTION: forcing a failure. [ 575.324584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.326672] CPU: 1 UID: 0 PID: 47021 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 575.326702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.326715] Call Trace: [ 575.326723] [ 575.326731] dump_stack_lvl+0xfa/0x120 [ 575.326772] should_fail_ex+0x4d7/0x5e0 [ 575.326807] _copy_from_iter+0x1dc/0x15b0 [ 575.326840] ? lock_acquire+0x15e/0x2f0 [ 575.326862] ? __virt_addr_valid+0x1c6/0x5d0 [ 575.326894] ? find_held_lock+0x2b/0x80 [ 575.326924] ? __pfx__copy_from_iter+0x10/0x10 [ 575.326954] ? lock_release+0xc8/0x290 [ 575.326978] ? __virt_addr_valid+0x100/0x5d0 [ 575.327011] ? __check_object_size+0x57b/0x880 [ 575.327051] netlink_sendmsg+0x809/0xd80 [ 575.327078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.327110] ____sys_sendmsg+0xa67/0xc20 [ 575.327137] ? copy_msghdr_from_user+0xfb/0x150 [ 575.327171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.327206] ? lock_acquire+0x15e/0x2f0 [ 575.327230] ___sys_sendmsg+0x10f/0x1b0 [ 575.327264] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.327316] ? proc_fail_nth_write+0x97/0x220 [ 575.327351] ? lock_acquire+0x15e/0x2f0 [ 575.327371] ? __fget_files+0x34/0x3b0 [ 575.327399] ? find_held_lock+0x2b/0x80 [ 575.327427] ? __fget_files+0x203/0x3b0 [ 575.327455] ? lock_release+0xc8/0x290 [ 575.327480] ? __fget_files+0x20d/0x3b0 [ 575.327517] __sys_sendmsg+0x150/0x200 [ 575.327536] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.327564] ? __pfx_ksys_write+0x10/0x10 [ 575.327604] do_syscall_64+0xbf/0x360 [ 575.327628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.327650] RIP: 0033:0x7eff9ffc5b19 [ 575.327667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.327688] RSP: 002b:00007eff9d53b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.327709] RAX: ffffffffffffffda RBX: 00007effa00d8f60 RCX: 00007eff9ffc5b19 [ 575.327724] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 575.327736] RBP: 00007eff9d53b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.327749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.327762] R13: 00007ffca695e30f R14: 00007eff9d53b300 R15: 0000000000022000 [ 575.327790] [ 575.373350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.385826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.404185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.843300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 577.847632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 577.849751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 577.855855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 577.858687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.879291] Bluetooth: hci3: command tx timeout [ 581.928338] Bluetooth: hci3: command tx timeout [ 583.976141] Bluetooth: hci3: command tx timeout [ 586.023427] Bluetooth: hci3: command tx timeout [ 594.529165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.530262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.565847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.566955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.672204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.681378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.064679] FAULT_INJECTION: forcing a failure. [ 595.064679] name failslab, interval 1, probability 0, space 0, times 0 [ 595.066797] FAULT_INJECTION: forcing a failure. [ 595.066797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.066849] CPU: 0 UID: 0 PID: 47793 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 595.066882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.066897] Call Trace: [ 595.066906] [ 595.066915] dump_stack_lvl+0xfa/0x120 [ 595.066982] should_fail_ex+0x4d7/0x5e0 [ 595.067052] _copy_from_iter+0x1dc/0x15b0 [ 595.067112] ? lock_acquire+0x15e/0x2f0 [ 595.067140] ? __virt_addr_valid+0x1c6/0x5d0 [ 595.067180] ? find_held_lock+0x2b/0x80 [ 595.067217] ? __pfx__copy_from_iter+0x10/0x10 [ 595.067253] ? lock_release+0xc8/0x290 [ 595.067283] ? __virt_addr_valid+0x100/0x5d0 [ 595.067323] ? __check_object_size+0x57b/0x880 [ 595.067362] netlink_sendmsg+0x809/0xd80 [ 595.067394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.067433] ____sys_sendmsg+0xa67/0xc20 [ 595.067466] ? copy_msghdr_from_user+0xfb/0x150 [ 595.067508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.067550] ? lock_acquire+0x15e/0x2f0 [ 595.067579] ___sys_sendmsg+0x10f/0x1b0 [ 595.067636] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.067684] ? proc_fail_nth_write+0x97/0x220 [ 595.067729] ? lock_acquire+0x15e/0x2f0 [ 595.067754] ? __fget_files+0x34/0x3b0 [ 595.067789] ? find_held_lock+0x2b/0x80 [ 595.067823] ? __fget_files+0x203/0x3b0 [ 595.067857] ? lock_release+0xc8/0x290 [ 595.067886] ? __fget_files+0x20d/0x3b0 [ 595.067931] __sys_sendmsg+0x150/0x200 [ 595.067955] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.067989] ? __pfx_ksys_write+0x10/0x10 [ 595.068036] do_syscall_64+0xbf/0x360 [ 595.068064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.068091] RIP: 0033:0x7fd3868e3b19 [ 595.068111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.068136] RSP: 002b:00007fd383e59188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.068161] RAX: ffffffffffffffda RBX: 00007fd3869f6f60 RCX: 00007fd3868e3b19 [ 595.068179] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 595.068195] RBP: 00007fd383e591d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.068210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.068226] R13: 00007ffff58415cf R14: 00007fd383e59300 R15: 0000000000022000 [ 595.068260] [ 595.089159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.089649] CPU: 1 UID: 0 PID: 47777 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 595.089681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.089693] Call Trace: [ 595.089702] [ 595.089711] dump_stack_lvl+0xfa/0x120 [ 595.089757] should_fail_ex+0x4d7/0x5e0 [ 595.089792] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 595.089822] should_failslab+0xc2/0x120 [ 595.089858] __kmalloc_noprof+0xb4/0x4b0 [ 595.089888] ? avc_has_perm_noaudit+0x150/0x3d0 [ 595.089922] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 595.089955] genl_family_rcv_msg_doit+0xab/0x2f0 [ 595.089981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.090011] ? cap_capable+0xdb/0x3b0 [ 595.090044] ? security_capable+0x2f/0x90 [ 595.090081] ? ns_capable+0xe2/0x120 [ 595.090116] genl_rcv_msg+0x532/0x7e0 [ 595.090143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.090167] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 595.090200] ? __pfx_nl80211_set_interface+0x10/0x10 [ 595.090222] ? __pfx_nl80211_post_doit+0x10/0x10 [ 595.090251] ? __lock_acquire+0x694/0x1b70 [ 595.090278] netlink_rcv_skb+0x147/0x430 [ 595.090300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.090326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.090359] ? netlink_deliver_tap+0x1ae/0xce0 [ 595.090392] ? selinux_netlink_send+0x507/0x880 [ 595.090423] ? is_vmalloc_addr+0x86/0xa0 [ 595.090457] genl_rcv+0x28/0x40 [ 595.090477] netlink_unicast+0x5a7/0x870 [ 595.090501] ? __pfx_netlink_unicast+0x10/0x10 [ 595.090534] netlink_sendmsg+0x8ac/0xd80 [ 595.090559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.090592] ____sys_sendmsg+0xa67/0xc20 [ 595.090621] ? copy_msghdr_from_user+0xfb/0x150 [ 595.090656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.090691] ? lock_acquire+0x15e/0x2f0 [ 595.090716] ___sys_sendmsg+0x10f/0x1b0 [ 595.090751] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.090790] ? proc_fail_nth_write+0x97/0x220 [ 595.090828] ? lock_acquire+0x15e/0x2f0 [ 595.090848] ? __fget_files+0x34/0x3b0 [ 595.090878] ? find_held_lock+0x2b/0x80 [ 595.090908] ? __fget_files+0x203/0x3b0 [ 595.090936] ? lock_release+0xc8/0x290 [ 595.090961] ? __fget_files+0x20d/0x3b0 [ 595.090999] __sys_sendmsg+0x150/0x200 [ 595.091018] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.091047] ? __pfx_ksys_write+0x10/0x10 [ 595.091089] do_syscall_64+0xbf/0x360 [ 595.091113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.091136] RIP: 0033:0x7eff9ffc5b19 [ 595.091153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.091173] RSP: 002b:00007eff9d53b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.091194] RAX: ffffffffffffffda RBX: 00007effa00d8f60 RCX: 00007eff9ffc5b19 [ 595.091209] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 595.091222] RBP: 00007eff9d53b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.091235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.091247] R13: 00007ffca695e30f R14: 00007eff9d53b300 R15: 0000000000022000 [ 595.091276] [ 595.136845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.163530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.182779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.592680] FAULT_INJECTION: forcing a failure. [ 595.592680] name failslab, interval 1, probability 0, space 0, times 0 [ 595.594402] CPU: 1 UID: 0 PID: 48374 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 595.594431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.594444] Call Trace: [ 595.594451] [ 595.594460] dump_stack_lvl+0xfa/0x120 [ 595.594503] should_fail_ex+0x4d7/0x5e0 [ 595.594538] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 595.594567] should_failslab+0xc2/0x120 [ 595.594602] __kmalloc_noprof+0xb4/0x4b0 [ 595.594632] ? avc_has_perm_noaudit+0x150/0x3d0 [ 595.594665] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 595.594698] genl_family_rcv_msg_doit+0xab/0x2f0 [ 595.594723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.594753] ? cap_capable+0xdb/0x3b0 [ 595.594779] ? security_capable+0x2f/0x90 [ 595.594814] ? ns_capable+0xe2/0x120 [ 595.594848] genl_rcv_msg+0x532/0x7e0 [ 595.594876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.594900] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 595.594931] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 595.594953] ? __pfx_nl80211_post_doit+0x10/0x10 [ 595.594983] ? __lock_acquire+0x694/0x1b70 [ 595.595009] netlink_rcv_skb+0x147/0x430 [ 595.595030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.595063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.595096] ? netlink_deliver_tap+0x1ae/0xce0 [ 595.595129] ? selinux_netlink_send+0x507/0x880 [ 595.595159] ? is_vmalloc_addr+0x86/0xa0 [ 595.595193] genl_rcv+0x28/0x40 [ 595.595213] netlink_unicast+0x5a7/0x870 [ 595.595238] ? __pfx_netlink_unicast+0x10/0x10 [ 595.595270] netlink_sendmsg+0x8ac/0xd80 [ 595.595296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.595328] ____sys_sendmsg+0xa67/0xc20 [ 595.595357] ? copy_msghdr_from_user+0xfb/0x150 [ 595.595392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.595427] ? lock_acquire+0x15e/0x2f0 [ 595.595451] ___sys_sendmsg+0x10f/0x1b0 [ 595.595486] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.595526] ? proc_fail_nth_write+0x97/0x220 [ 595.595562] ? lock_acquire+0x15e/0x2f0 [ 595.595582] ? __fget_files+0x34/0x3b0 [ 595.595624] ? find_held_lock+0x2b/0x80 [ 595.595654] ? __fget_files+0x203/0x3b0 [ 595.595683] ? lock_release+0xc8/0x290 [ 595.595707] ? __fget_files+0x20d/0x3b0 [ 595.595745] __sys_sendmsg+0x150/0x200 [ 595.595765] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.595794] ? __pfx_ksys_write+0x10/0x10 [ 595.595834] do_syscall_64+0xbf/0x360 [ 595.595858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.595881] RIP: 0033:0x7fd3868e3b19 [ 595.595898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.595919] RSP: 002b:00007fd383e59188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.595940] RAX: ffffffffffffffda RBX: 00007fd3869f6f60 RCX: 00007fd3868e3b19 [ 595.595954] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 595.595967] RBP: 00007fd383e591d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.595980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.595993] R13: 00007ffff58415cf R14: 00007fd383e59300 R15: 0000000000022000 [ 595.596021] [ 595.745834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.262723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.269232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.271564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.275089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.277500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.330376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 598.335411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 598.337290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 598.340618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 598.342896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 600.359199] Bluetooth: hci7: command tx timeout [ 600.361019] Bluetooth: hci3: command tx timeout [ 602.407990] Bluetooth: hci3: command tx timeout [ 602.408456] Bluetooth: hci7: command tx timeout [ 604.455182] Bluetooth: hci3: command tx timeout [ 604.455624] Bluetooth: hci7: command tx timeout [ 606.503094] Bluetooth: hci3: command tx timeout [ 606.503541] Bluetooth: hci7: command tx timeout [ 607.681378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.681984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.727197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.727806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.811280] FAULT_INJECTION: forcing a failure. [ 607.811280] name failslab, interval 1, probability 0, space 0, times 0 [ 607.813123] CPU: 0 UID: 0 PID: 49904 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 607.813160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.813178] Call Trace: [ 607.813187] [ 607.813199] dump_stack_lvl+0xfa/0x120 [ 607.813256] should_fail_ex+0x4d7/0x5e0 [ 607.813303] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 607.813338] should_failslab+0xc2/0x120 [ 607.813374] __kmalloc_noprof+0xb4/0x4b0 [ 607.813404] ? avc_has_perm_noaudit+0x150/0x3d0 [ 607.813436] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 607.813469] genl_family_rcv_msg_doit+0xab/0x2f0 [ 607.813494] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 607.813524] ? cap_capable+0xdb/0x3b0 [ 607.813549] ? security_capable+0x2f/0x90 [ 607.813584] ? ns_capable+0xe2/0x120 [ 607.813618] genl_rcv_msg+0x532/0x7e0 [ 607.813645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.813669] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 607.813701] ? __pfx_nl80211_set_interface+0x10/0x10 [ 607.813723] ? __pfx_nl80211_post_doit+0x10/0x10 [ 607.813752] ? __lock_acquire+0x694/0x1b70 [ 607.813778] netlink_rcv_skb+0x147/0x430 [ 607.813799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.813824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.813857] ? netlink_deliver_tap+0x1ae/0xce0 [ 607.813889] ? selinux_netlink_send+0x507/0x880 [ 607.813921] ? is_vmalloc_addr+0x86/0xa0 [ 607.813954] genl_rcv+0x28/0x40 [ 607.813974] netlink_unicast+0x5a7/0x870 [ 607.813999] ? __pfx_netlink_unicast+0x10/0x10 [ 607.814038] netlink_sendmsg+0x8ac/0xd80 [ 607.814064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.814096] ____sys_sendmsg+0xa67/0xc20 [ 607.814125] ? copy_msghdr_from_user+0xfb/0x150 [ 607.814159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.814194] ? lock_acquire+0x15e/0x2f0 [ 607.814219] ___sys_sendmsg+0x10f/0x1b0 [ 607.814254] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.814293] ? proc_fail_nth_write+0x97/0x220 [ 607.814331] ? lock_acquire+0x15e/0x2f0 [ 607.814351] ? __fget_files+0x34/0x3b0 [ 607.814380] ? find_held_lock+0x2b/0x80 [ 607.814410] ? __fget_files+0x203/0x3b0 [ 607.814438] ? lock_release+0xc8/0x290 [ 607.814462] ? __fget_files+0x20d/0x3b0 [ 607.814500] __sys_sendmsg+0x150/0x200 [ 607.814520] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.814549] ? __pfx_ksys_write+0x10/0x10 [ 607.814589] do_syscall_64+0xbf/0x360 [ 607.814615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.814637] RIP: 0033:0x7f4ea3664b19 [ 607.814654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.814674] RSP: 002b:00007f4ea0bda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.814695] RAX: ffffffffffffffda RBX: 00007f4ea3777f60 RCX: 00007f4ea3664b19 [ 607.814710] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 607.814723] RBP: 00007f4ea0bda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.814736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.814749] R13: 00007fff87b81f2f R14: 00007f4ea0bda300 R15: 0000000000022000 [ 607.814778] [ 607.871641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.884464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.626883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.627997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.662331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.663739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.763688] FAULT_INJECTION: forcing a failure. [ 610.763688] name failslab, interval 1, probability 0, space 0, times 0 [ 610.765393] CPU: 1 UID: 0 PID: 49986 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 610.765435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.765453] Call Trace: [ 610.765463] [ 610.765475] dump_stack_lvl+0xfa/0x120 [ 610.765533] should_fail_ex+0x4d7/0x5e0 [ 610.765583] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 610.765618] should_failslab+0xc2/0x120 [ 610.765653] __kmalloc_noprof+0xb4/0x4b0 [ 610.765683] ? avc_has_perm_noaudit+0x150/0x3d0 [ 610.765716] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 610.765748] genl_family_rcv_msg_doit+0xab/0x2f0 [ 610.765773] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.765803] ? cap_capable+0xdb/0x3b0 [ 610.765828] ? security_capable+0x2f/0x90 [ 610.765863] ? ns_capable+0xe2/0x120 [ 610.765896] genl_rcv_msg+0x532/0x7e0 [ 610.765923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.765947] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 610.765979] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 610.766001] ? __pfx_nl80211_post_doit+0x10/0x10 [ 610.766030] ? __lock_acquire+0x694/0x1b70 [ 610.766063] netlink_rcv_skb+0x147/0x430 [ 610.766084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.766109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.766142] ? netlink_deliver_tap+0x1ae/0xce0 [ 610.766174] ? selinux_netlink_send+0x507/0x880 [ 610.766205] ? is_vmalloc_addr+0x86/0xa0 [ 610.766239] genl_rcv+0x28/0x40 [ 610.766258] netlink_unicast+0x5a7/0x870 [ 610.766283] ? __pfx_netlink_unicast+0x10/0x10 [ 610.766315] netlink_sendmsg+0x8ac/0xd80 [ 610.766341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.766373] ____sys_sendmsg+0xa67/0xc20 [ 610.766402] ? copy_msghdr_from_user+0xfb/0x150 [ 610.766436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.766471] ? lock_acquire+0x15e/0x2f0 [ 610.766496] ___sys_sendmsg+0x10f/0x1b0 [ 610.766530] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.766570] ? proc_fail_nth_write+0x97/0x220 [ 610.766606] ? lock_acquire+0x15e/0x2f0 [ 610.766626] ? __fget_files+0x34/0x3b0 [ 610.766656] ? find_held_lock+0x2b/0x80 [ 610.766684] ? __fget_files+0x203/0x3b0 [ 610.766712] ? lock_release+0xc8/0x290 [ 610.766737] ? __fget_files+0x20d/0x3b0 [ 610.766775] __sys_sendmsg+0x150/0x200 [ 610.766794] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.766823] ? __pfx_ksys_write+0x10/0x10 [ 610.766863] do_syscall_64+0xbf/0x360 [ 610.766887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.766909] RIP: 0033:0x7f284381fb19 [ 610.766926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.766946] RSP: 002b:00007f2840d95188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.766967] RAX: ffffffffffffffda RBX: 00007f2843932f60 RCX: 00007f284381fb19 [ 610.766981] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 610.766995] RBP: 00007f2840d951d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.767008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.767020] R13: 00007ffd2775f9cf R14: 00007f2840d95300 R15: 0000000000022000 [ 610.767049] [ 610.817513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.829549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.186388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.199943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.238247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.252963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.606674] FAULT_INJECTION: forcing a failure. [ 611.606674] name failslab, interval 1, probability 0, space 0, times 0 [ 611.608409] CPU: 0 UID: 0 PID: 50689 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 611.608439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.608452] Call Trace: [ 611.608459] [ 611.608468] dump_stack_lvl+0xfa/0x120 [ 611.608511] should_fail_ex+0x4d7/0x5e0 [ 611.608547] should_failslab+0xc2/0x120 [ 611.608583] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 611.608614] ? __alloc_skb+0x2ab/0x370 [ 611.608652] __alloc_skb+0x2ab/0x370 [ 611.608684] ? __pfx___alloc_skb+0x10/0x10 [ 611.608717] ? genl_rcv_msg+0x532/0x7e0 [ 611.608750] netlink_ack+0x167/0xbf0 [ 611.608780] netlink_rcv_skb+0x344/0x430 [ 611.608801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.608827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.608860] ? netlink_deliver_tap+0x1ae/0xce0 [ 611.608893] ? selinux_netlink_send+0x507/0x880 [ 611.608925] ? is_vmalloc_addr+0x86/0xa0 [ 611.608959] genl_rcv+0x28/0x40 [ 611.608979] netlink_unicast+0x5a7/0x870 [ 611.609003] ? __pfx_netlink_unicast+0x10/0x10 [ 611.609042] netlink_sendmsg+0x8ac/0xd80 [ 611.609068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.609101] ____sys_sendmsg+0xa67/0xc20 [ 611.609129] ? copy_msghdr_from_user+0xfb/0x150 [ 611.609164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.609199] ? lock_acquire+0x15e/0x2f0 [ 611.609225] ___sys_sendmsg+0x10f/0x1b0 [ 611.609260] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.609299] ? proc_fail_nth_write+0x97/0x220 [ 611.609336] ? lock_acquire+0x15e/0x2f0 [ 611.609356] ? __fget_files+0x34/0x3b0 [ 611.609385] ? find_held_lock+0x2b/0x80 [ 611.609414] ? __fget_files+0x203/0x3b0 [ 611.609442] ? lock_release+0xc8/0x290 [ 611.609467] ? __fget_files+0x20d/0x3b0 [ 611.609505] __sys_sendmsg+0x150/0x200 [ 611.609524] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.609553] ? __pfx_ksys_write+0x10/0x10 [ 611.609594] do_syscall_64+0xbf/0x360 [ 611.609617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.609640] RIP: 0033:0x7f284381fb19 [ 611.609657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.609677] RSP: 002b:00007f2840d95188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.609698] RAX: ffffffffffffffda RBX: 00007f2843932f60 RCX: 00007f284381fb19 [ 611.609712] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 611.609725] RBP: 00007f2840d951d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.609738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.609751] R13: 00007ffd2775f9cf R14: 00007f2840d95300 R15: 0000000000022000 [ 611.609780] [ 611.689527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.705460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.728574] FAULT_INJECTION: forcing a failure. [ 611.728574] name failslab, interval 1, probability 0, space 0, times 0 [ 611.730265] CPU: 0 UID: 0 PID: 50819 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 611.730315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.730333] Call Trace: [ 611.730342] [ 611.730354] dump_stack_lvl+0xfa/0x120 [ 611.730409] should_fail_ex+0x4d7/0x5e0 [ 611.730457] should_failslab+0xc2/0x120 [ 611.730495] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 611.730525] ? __alloc_skb+0x2ab/0x370 [ 611.730562] __alloc_skb+0x2ab/0x370 [ 611.730594] ? __pfx___alloc_skb+0x10/0x10 [ 611.730627] ? genl_rcv_msg+0x532/0x7e0 [ 611.730659] netlink_ack+0x167/0xbf0 [ 611.730689] netlink_rcv_skb+0x344/0x430 [ 611.730710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.730735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.730768] ? netlink_deliver_tap+0x1ae/0xce0 [ 611.730800] ? selinux_netlink_send+0x507/0x880 [ 611.730832] ? is_vmalloc_addr+0x86/0xa0 [ 611.730865] genl_rcv+0x28/0x40 [ 611.730885] netlink_unicast+0x5a7/0x870 [ 611.730910] ? __pfx_netlink_unicast+0x10/0x10 [ 611.730942] netlink_sendmsg+0x8ac/0xd80 [ 611.730967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.730999] ____sys_sendmsg+0xa67/0xc20 [ 611.731026] ? copy_msghdr_from_user+0xfb/0x150 [ 611.731068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.731103] ? lock_acquire+0x15e/0x2f0 [ 611.731128] ___sys_sendmsg+0x10f/0x1b0 [ 611.731167] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.731207] ? proc_fail_nth_write+0x97/0x220 [ 611.731242] ? lock_acquire+0x15e/0x2f0 [ 611.731263] ? __fget_files+0x34/0x3b0 [ 611.731292] ? find_held_lock+0x2b/0x80 [ 611.731321] ? __fget_files+0x203/0x3b0 [ 611.731349] ? lock_release+0xc8/0x290 [ 611.731374] ? __fget_files+0x20d/0x3b0 [ 611.731411] __sys_sendmsg+0x150/0x200 [ 611.731431] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.731460] ? __pfx_ksys_write+0x10/0x10 [ 611.731500] do_syscall_64+0xbf/0x360 [ 611.731524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.731545] RIP: 0033:0x7f4ea3664b19 [ 611.731562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.731582] RSP: 002b:00007f4ea0bda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.731603] RAX: ffffffffffffffda RBX: 00007f4ea3777f60 RCX: 00007f4ea3664b19 [ 611.731617] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 611.731630] RBP: 00007f4ea0bda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.731644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.731656] R13: 00007fff87b81f2f R14: 00007f4ea0bda300 R15: 0000000000022000 [ 611.731685] [ 611.796666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.814009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.189847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.202739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.204999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.232493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.616023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.628093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.643960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.722476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.159677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 615.166777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 615.171725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 615.181271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 615.184407] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 617.255752] Bluetooth: hci7: command tx timeout [ 619.304124] Bluetooth: hci7: command tx timeout [ 621.351171] Bluetooth: hci7: command tx timeout [ 623.401756] Bluetooth: hci7: command tx timeout [ 631.733221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.734667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.811998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.813160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.909022] FAULT_INJECTION: forcing a failure. [ 631.909022] name failslab, interval 1, probability 0, space 0, times 0 [ 631.911136] CPU: 1 UID: 0 PID: 52892 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 631.911166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 631.911179] Call Trace: [ 631.911186] [ 631.911194] dump_stack_lvl+0xfa/0x120 [ 631.911238] should_fail_ex+0x4d7/0x5e0 [ 631.911273] should_failslab+0xc2/0x120 [ 631.911309] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 631.911340] ? __alloc_skb+0x2ab/0x370 [ 631.911379] __alloc_skb+0x2ab/0x370 [ 631.911411] ? __pfx___alloc_skb+0x10/0x10 [ 631.911444] ? trace_rdev_return_int+0x153/0x1c0 [ 631.911479] ? rdev_scan+0x158/0x300 [ 631.911514] nl80211_send_scan_start+0x2d/0x190 [ 631.911539] nl80211_trigger_scan+0x1098/0x1cf0 [ 631.911573] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 631.911601] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.911636] ? security_capable+0x2f/0x90 [ 631.911673] ? ns_capable+0xe2/0x120 [ 631.911705] genl_rcv_msg+0x532/0x7e0 [ 631.911733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.911756] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 631.911788] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 631.911809] ? __pfx_nl80211_post_doit+0x10/0x10 [ 631.911837] ? __lock_acquire+0x694/0x1b70 [ 631.911863] netlink_rcv_skb+0x147/0x430 [ 631.911884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.911910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.911943] ? netlink_deliver_tap+0x1ae/0xce0 [ 631.911975] ? selinux_netlink_send+0x507/0x880 [ 631.912007] ? is_vmalloc_addr+0x86/0xa0 [ 631.912048] genl_rcv+0x28/0x40 [ 631.912067] netlink_unicast+0x5a7/0x870 [ 631.912092] ? __pfx_netlink_unicast+0x10/0x10 [ 631.912125] netlink_sendmsg+0x8ac/0xd80 [ 631.912150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.912183] ____sys_sendmsg+0xa67/0xc20 [ 631.912222] ? copy_msghdr_from_user+0xfb/0x150 [ 631.912257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.912292] ? lock_acquire+0x15e/0x2f0 [ 631.912317] ___sys_sendmsg+0x10f/0x1b0 [ 631.912351] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.912391] ? proc_fail_nth_write+0x97/0x220 [ 631.912429] ? lock_acquire+0x15e/0x2f0 [ 631.912449] ? __fget_files+0x34/0x3b0 [ 631.912479] ? find_held_lock+0x2b/0x80 [ 631.912508] ? __fget_files+0x203/0x3b0 [ 631.912537] ? lock_release+0xc8/0x290 [ 631.912562] ? __fget_files+0x20d/0x3b0 [ 631.912600] __sys_sendmsg+0x150/0x200 [ 631.912619] ? __pfx___sys_sendmsg+0x10/0x10 [ 631.912649] ? __pfx_ksys_write+0x10/0x10 [ 631.912690] do_syscall_64+0xbf/0x360 [ 631.912714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.912736] RIP: 0033:0x7f4ade21bb19 [ 631.912754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 631.912774] RSP: 002b:00007f4adb791188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.912795] RAX: ffffffffffffffda RBX: 00007f4ade32ef60 RCX: 00007f4ade21bb19 [ 631.912810] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 631.912823] RBP: 00007f4adb7911d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.912836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.912849] R13: 00007fff659e593f R14: 00007f4adb791300 R15: 0000000000022000 [ 631.912878] [ 631.966172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.976719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.370524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.390733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.392725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.411355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.783147] FAULT_INJECTION: forcing a failure. [ 632.783147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.785151] CPU: 0 UID: 0 PID: 53609 Comm: syz-executor.6 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 632.785180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.785193] Call Trace: [ 632.785200] [ 632.785208] dump_stack_lvl+0xfa/0x120 [ 632.785250] should_fail_ex+0x4d7/0x5e0 [ 632.785285] _copy_to_user+0x32/0xd0 [ 632.785319] simple_read_from_buffer+0xe0/0x180 [ 632.785350] proc_fail_nth_read+0x18a/0x240 [ 632.785383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.785416] ? security_file_permission+0x22/0x90 [ 632.785445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.785477] vfs_read+0x1eb/0xbe0 [ 632.785512] ? __pfx_vfs_read+0x10/0x10 [ 632.785543] ? lock_release+0xc8/0x290 [ 632.785569] ? __fget_files+0x20d/0x3b0 [ 632.785609] ksys_read+0x121/0x240 [ 632.785638] ? __pfx_ksys_read+0x10/0x10 [ 632.785677] do_syscall_64+0xbf/0x360 [ 632.785700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.785722] RIP: 0033:0x7f4ade1ce69c [ 632.785739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 632.785760] RSP: 002b:00007f4adb791170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.785780] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f4ade1ce69c [ 632.785795] RDX: 000000000000000f RSI: 00007f4adb7911e0 RDI: 0000000000000004 [ 632.785808] RBP: 00007f4adb7911d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.785821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.785833] R13: 00007fff659e593f R14: 00007f4adb791300 R15: 0000000000022000 [ 632.785862] [ 632.851888] FAULT_INJECTION: forcing a failure. [ 632.851888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.853617] CPU: 0 UID: 0 PID: 53713 Comm: syz-executor.1 Not tainted 6.16.0-next-20250728 #1 PREEMPT(voluntary) [ 632.853646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.853658] Call Trace: [ 632.853665] [ 632.853673] dump_stack_lvl+0xfa/0x120 [ 632.853712] should_fail_ex+0x4d7/0x5e0 [ 632.853745] _copy_to_user+0x32/0xd0 [ 632.853780] simple_read_from_buffer+0xe0/0x180 [ 632.853809] proc_fail_nth_read+0x18a/0x240 [ 632.853841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.853874] ? security_file_permission+0x22/0x90 [ 632.853903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.853935] vfs_read+0x1eb/0xbe0 [ 632.853970] ? __pfx_vfs_read+0x10/0x10 [ 632.854001] ? lock_release+0xc8/0x290 [ 632.854026] ? __fget_files+0x20d/0x3b0 [ 632.854072] ksys_read+0x121/0x240 [ 632.854101] ? __pfx_ksys_read+0x10/0x10 [ 632.854140] do_syscall_64+0xbf/0x360 [ 632.854163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.854185] RIP: 0033:0x7f4ea361769c [ 632.854201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 632.854222] RSP: 002b:00007f4ea0bda170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.854242] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f4ea361769c [ 632.854256] RDX: 000000000000000f RSI: 00007f4ea0bda1e0 RDI: 0000000000000004 [ 632.854269] RBP: 00007f4ea0bda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.854282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.854295] R13: 00007fff87b81f2f R14: 00007f4ea0bda300 R15: 0000000000022000 [ 632.854323] [ 632.935959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.002254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.018304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.037846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.443893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.446292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.450343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.454596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.456987] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.480157] Bluetooth: hci7: command tx timeout [ 639.527173] Bluetooth: hci7: command tx timeout [ 641.575227] Bluetooth: hci7: command tx timeout [ 643.623121] Bluetooth: hci7: command tx timeout [ 652.075018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.076327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.141823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.143139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.255671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.271881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.663082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.667257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.673321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.679742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.987240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.005324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.137927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.158331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.161994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.504645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.668798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 655.672221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 655.674614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.680021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.682776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.922634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 655.924746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 655.936318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 655.945305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 655.947175] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 657.703237] Bluetooth: hci3: command tx timeout [ 657.959344] Bluetooth: hci7: command tx timeout [ 659.751787] Bluetooth: hci3: command tx timeout [ 660.007112] Bluetooth: hci7: command tx timeout [ 661.799084] Bluetooth: hci3: command tx timeout [ 662.056092] Bluetooth: hci7: command tx timeout [ 663.848073] Bluetooth: hci3: command tx timeout [ 664.103096] Bluetooth: hci7: command tx timeout [ 665.011245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.011857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.091703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.092332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.181095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.188354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.492844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.857351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.858458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.902241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.903558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.996308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.004931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.311798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.409661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.413990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.427160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.433281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.738819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.749582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.847013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.896288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.908682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.236646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.388898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.392295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.397527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.405438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.408480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.650635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 670.655401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 670.660435] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 670.668014] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 670.670889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 672.487155] Bluetooth: hci3: command tx timeout [ 672.744315] Bluetooth: hci7: command tx timeout [ 674.535095] Bluetooth: hci3: command tx timeout [ 674.791971] Bluetooth: hci7: command tx timeout [ 676.583096] Bluetooth: hci3: command tx timeout [ 676.839176] Bluetooth: hci7: command tx timeout [ 678.631107] Bluetooth: hci3: command tx timeout [ 678.887211] Bluetooth: hci7: command tx timeout [ 679.888554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.889179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.954829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.955941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.023159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.033103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.338921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.344766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.618371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.619844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.662865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.664562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.773994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.784514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.092325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.189845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.201663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.209246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.222975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.516993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.586286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.637479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.649889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.973946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.146756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.149424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.151900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.155668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.160256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.404026] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.406666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.408533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.413168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.418276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 686.183360] Bluetooth: hci3: command tx timeout [ 686.439125] Bluetooth: hci7: command tx timeout [ 688.231127] Bluetooth: hci3: command tx timeout [ 688.487199] Bluetooth: hci7: command tx timeout [ 690.279168] Bluetooth: hci3: command tx timeout [ 690.535080] Bluetooth: hci7: command tx timeout [ 692.327091] Bluetooth: hci3: command tx timeout [ 692.583123] Bluetooth: hci7: command tx timeout [ 693.514194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.514813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.591733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.592749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.639366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.639940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.683357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.683924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.685392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.692426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.748429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.755955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.996365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.060244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.104794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.112624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.136078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.149582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.419454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.461019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.466619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.471972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.532980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.817848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.944686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.948436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.951520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.956470] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.960585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.205608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 697.211908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 697.214414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 697.222319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 697.226577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 698.984112] Bluetooth: hci3: command tx timeout [ 699.240109] Bluetooth: hci7: command tx timeout [ 701.031343] Bluetooth: hci3: command tx timeout [ 701.287536] Bluetooth: hci7: command tx timeout [ 703.079192] Bluetooth: hci3: command tx timeout [ 703.335088] Bluetooth: hci7: command tx timeout [ 705.127104] Bluetooth: hci3: command tx timeout [ 705.384089] Bluetooth: hci7: command tx timeout [ 706.551303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.551903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.621016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.621636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.709234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.716538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.024234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.031101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.499696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.500499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.532963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.533753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.623391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.635212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.942274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.031796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.045711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.067432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.079812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.357372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.413840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.859564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 711.863159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 711.866283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 711.872100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 711.876276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.895165] Bluetooth: hci7: command tx timeout [ 715.943190] Bluetooth: hci7: command tx timeout [ 717.991204] Bluetooth: hci7: command tx timeout [ 720.040144] Bluetooth: hci7: command tx timeout [ 729.002390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.003736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.050989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.052367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.179911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.188792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.495715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.557216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.569491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.578943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.592736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.882367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.952642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.994508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.006778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.319288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.467488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 732.473720] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 732.477660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 732.484537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 732.494843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 734.567139] Bluetooth: hci7: command tx timeout [ 736.615181] Bluetooth: hci7: command tx timeout [ 737.647119] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) VM DIAGNOSIS: 08:30:21 Registers: info registers vcpu 0 RAX=000000000057c853 RBX=0000000000000000 RCX=ffffffff84b9b167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3324 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86438b50 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b99e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e7000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056360020752c CR3=000000000e695000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000 XMM10=20000000200000002000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000006204ab RBX=0000000000000001 RCX=ffffffff84b9b167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3324 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86438b50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b99e9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e7000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffff44cbfa8 CR3=000000000cdcf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000001110065636976726573 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000500000000000000040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000