, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) (fail_nth: 8)

22:42:53 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pnp', 0x480203, 0x0)
finit_module(r0, &(0x7f0000000240)='(&\x88s--\x00', 0x1)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r1, &(0x7f0000000100)=""/174, 0xae)
close(r1)
clone3(&(0x7f00000001c0)={0x800400, 0x0, 0x0, 0x0, {}, 0x0, 0x55, 0x0, 0x0, 0x0, {r0}}, 0x58)

22:42:53 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf5)

22:42:53 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x500)

22:42:53 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x40b, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 1992.378708] FAULT_INJECTION: forcing a failure.
[ 1992.378708] name failslab, interval 1, probability 0, space 0, times 0
[ 1992.380991] CPU: 0 UID: 0 PID: 15463 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 1992.381022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1992.381034] Call Trace:
[ 1992.381042]  <TASK>
[ 1992.381051]  dump_stack_lvl+0xfa/0x120
[ 1992.381084]  should_fail_ex+0x4d7/0x5e0
[ 1992.381119]  should_failslab+0xc2/0x120
[ 1992.381154]  __kmalloc_cache_noprof+0x73/0x6a0
[ 1992.381181]  ? __hw_addr_add_ex+0x228/0x7a0
[ 1992.381213]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1992.381247]  ? __hw_addr_add_ex+0x228/0x7a0
[ 1992.381278]  __hw_addr_add_ex+0x228/0x7a0
[ 1992.381328]  ? __pfx___hw_addr_add_ex+0x10/0x10
[ 1992.381359]  ? mark_lock+0x6f1/0x750
[ 1992.381397]  dev_addr_init+0x13d/0x230
[ 1992.381434]  ? __pfx_dev_addr_init+0x10/0x10
[ 1992.381485]  alloc_netdev_mqs+0x171/0x1360
[ 1992.381508]  ? __pfx_ieee802154_if_setup+0x10/0x10
[ 1992.381551]  ieee802154_if_add+0xcf/0x1140
[ 1992.381587]  ? __asan_memset+0x24/0x50
[ 1992.381619]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 1992.381654]  ? __pfx___mutex_lock+0x10/0x10
[ 1992.381680]  ? skb_put+0x138/0x1b0
[ 1992.381715]  ? __nlmsg_put+0x159/0x1d0
[ 1992.381757]  ? genlmsg_put+0x265/0x2e0
[ 1992.381796]  ieee802154_add_iface_deprecated+0x42/0x60
[ 1992.381825]  ieee802154_add_iface+0x472/0x970
[ 1992.381864]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 1992.381898]  ? trace_kmalloc+0x1f/0xb0
[ 1992.381936]  ? __nla_parse+0x42/0x60
[ 1992.381972]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 1992.382005]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 1992.382047]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 1992.382081]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1992.382131]  ? security_capable+0x2f/0x90
[ 1992.382167]  genl_rcv_msg+0x532/0x7e0
22:42:53 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup2(r1, r2)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202)

22:42:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) (fail_nth: 9)

22:42:53 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x9}}}}, 0xc0}}, 0x0)

[ 1992.382203]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1992.382236]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 1992.382287]  netlink_rcv_skb+0x147/0x430
[ 1992.382317]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1992.382350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1992.382398]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1992.382431]  genl_rcv+0x28/0x40
[ 1992.382458]  netlink_unicast+0x5a7/0x870
[ 1992.382492]  ? __pfx_netlink_unicast+0x10/0x10
[ 1992.382538]  netlink_sendmsg+0x8a3/0xd80
[ 1992.382576]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1992.382624]  ____sys_sendmsg+0xa67/0xc20
[ 1992.382661]  ? copy_msghdr_from_user+0xfb/0x150
[ 1992.382688]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1992.382735]  ? lock_acquire+0x15e/0x2f0
[ 1992.382768]  ___sys_sendmsg+0x10f/0x1b0
[ 1992.382796]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1992.382820]  ? perf_trace_lock+0xb5/0x5d0
[ 1992.382855]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1992.382881]  ? proc_fail_nth_write+0x97/0x220
[ 1992.382920]  ? lock_acquire+0x15e/0x2f0
[ 1992.382947]  ? __fget_files+0x34/0x3b0
[ 1992.382975]  ? find_held_lock+0x2b/0x80
[ 1992.383010]  ? __fget_files+0x203/0x3b0
[ 1992.383038]  ? lock_release+0xc8/0x290
[ 1992.383071]  ? __fget_files+0x20d/0x3b0
[ 1992.383114]  __sys_sendmsg+0x150/0x200
[ 1992.383140]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1992.383183]  ? __pfx_ksys_write+0x10/0x10
[ 1992.383244]  do_syscall_64+0xbf/0x390
[ 1992.383275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.383298] RIP: 0033:0x7f056dbbbb19
[ 1992.383315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1992.383337] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1992.383358] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 1992.383373] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 1992.383386] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 1992.383399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1992.383412] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 1992.383450]  </TASK>
[ 1992.480639] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1992.486322] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1992.486984] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1992.494773] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:42:53 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40200, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

22:42:53 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x40c, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:42:53 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0xc, 0x0, &(0x7f0000000080))
close(r0)

22:42:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) (fail_nth: 10)

22:42:53 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf400)

[ 1994.390388] Bluetooth: hci1: command 0x0406 tx timeout
[ 1994.518393] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1994.518415] Bluetooth: hci4: command 0x0406 tx timeout
[ 1994.518931] Bluetooth: hci7: command 0x0c1a tx timeout
22:43:03 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf500)

22:43:03 executing program 4:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:03 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:03 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xd})
ioctl$VT_DISALLOCATE(r0, 0x5608)

22:43:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 17)

22:43:04 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xa}}}}, 0xc0}}, 0x0)

22:43:04 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) (fail_nth: 11)

22:43:04 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000610000000000119078000000000000000000004e20004d90786cd68c63cdca2832828487107ea4beb2cbcda9afa08750ea99e46fdcedd77740b07775c21741619389557b7dfa3dbd80e5858b173084418eef390fa4e16896b7b734eac29c"], 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}}], 0x1, 0x0, 0x0)

[ 2002.806790] FAULT_INJECTION: forcing a failure.
[ 2002.806790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2002.806847] CPU: 1 UID: 0 PID: 15516 Comm: syz-executor.0 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2002.806876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.806889] Call Trace:
[ 2002.806897]  <TASK>
[ 2002.806906]  dump_stack_lvl+0xfa/0x120
[ 2002.806941]  should_fail_ex+0x4d7/0x5e0
[ 2002.806975]  _copy_to_user+0x32/0xd0
[ 2002.807008]  simple_read_from_buffer+0xe0/0x180
[ 2002.807037]  proc_fail_nth_read+0x18a/0x240
[ 2002.807073]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2002.807108]  ? security_file_permission+0x22/0x90
[ 2002.807144]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2002.807177]  vfs_read+0x1eb/0xc70
[ 2002.807224]  ? __pfx_vfs_read+0x10/0x10
[ 2002.807256]  ? lock_release+0xc8/0x290
[ 2002.807291]  ? __fget_files+0x20d/0x3b0
[ 2002.807334]  ksys_read+0x121/0x240
[ 2002.807380]  ? __pfx_ksys_read+0x10/0x10
[ 2002.807423]  do_syscall_64+0xbf/0x390
[ 2002.807454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2002.807477] RIP: 0033:0x7fd4a26d569c
[ 2002.807494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2002.807515] RSP: 002b:00007fd49fc98170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2002.807537] RAX: ffffffffffffffda RBX: 00000000000000c0 RCX: 00007fd4a26d569c
[ 2002.807552] RDX: 000000000000000f RSI: 00007fd49fc981e0 RDI: 0000000000000005
[ 2002.807565] RBP: 00007fd49fc981d0 R08: 0000000000000000 R09: 0000000000000000
[ 2002.807579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2002.807592] R13: 00007ffd14fc7f2f R14: 00007fd49fc98300 R15: 0000000000022000
[ 2002.807628]  </TASK>
[ 2002.846707] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:43:04 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:04 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x50000)

22:43:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 18)

22:43:04 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf}}}}, 0xc0}}, 0x0)

[ 2002.890879] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2002.891196] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2002.893548] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2003.111107] FAULT_INJECTION: forcing a failure.
[ 2003.111107] name failslab, interval 1, probability 0, space 0, times 0
[ 2003.113042] CPU: 0 UID: 0 PID: 15530 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2003.113072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2003.113085] Call Trace:
[ 2003.113093]  <TASK>
[ 2003.113101]  dump_stack_lvl+0xfa/0x120
[ 2003.113136]  should_fail_ex+0x4d7/0x5e0
[ 2003.113171]  should_failslab+0xc2/0x120
[ 2003.113206]  __kvmalloc_node_noprof+0x111/0x7f0
[ 2003.113234]  ? __pfx_dev_addr_init+0x10/0x10
[ 2003.113272]  ? lockdep_init_map_type+0x4b/0x240
[ 2003.113311]  ? alloc_netdev_mqs+0x945/0x1360
[ 2003.113345]  ? alloc_netdev_mqs+0x945/0x1360
[ 2003.113367]  alloc_netdev_mqs+0x945/0x1360
[ 2003.113389]  ? __pfx_ieee802154_if_setup+0x10/0x10
[ 2003.113432]  ieee802154_if_add+0xcf/0x1140
[ 2003.113468]  ? __asan_memset+0x24/0x50
[ 2003.113499]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2003.113535]  ? __pfx___mutex_lock+0x10/0x10
[ 2003.113560]  ? skb_put+0x138/0x1b0
[ 2003.113596]  ? __nlmsg_put+0x159/0x1d0
[ 2003.113638]  ? genlmsg_put+0x265/0x2e0
[ 2003.113676]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2003.113705]  ieee802154_add_iface+0x472/0x970
[ 2003.113744]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2003.113778]  ? trace_kmalloc+0x1f/0xb0
[ 2003.113818]  ? __nla_parse+0x42/0x60
[ 2003.113854]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2003.113886]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2003.113928]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2003.113962]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2003.114013]  ? security_capable+0x2f/0x90
[ 2003.114049]  genl_rcv_msg+0x532/0x7e0
[ 2003.114086]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2003.114119]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2003.114170]  netlink_rcv_skb+0x147/0x430
[ 2003.114199]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2003.114232]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2003.114283]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2003.114316]  genl_rcv+0x28/0x40
[ 2003.114343]  netlink_unicast+0x5a7/0x870
[ 2003.114378]  ? __pfx_netlink_unicast+0x10/0x10
[ 2003.114424]  netlink_sendmsg+0x8a3/0xd80
[ 2003.114460]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2003.114506]  ____sys_sendmsg+0xa67/0xc20
[ 2003.114543]  ? copy_msghdr_from_user+0xfb/0x150
[ 2003.114570]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2003.114618]  ? lock_acquire+0x15e/0x2f0
[ 2003.114651]  ___sys_sendmsg+0x10f/0x1b0
[ 2003.114679]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2003.114703]  ? perf_trace_lock+0xb5/0x5d0
[ 2003.114738]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2003.114764]  ? proc_fail_nth_write+0x97/0x220
[ 2003.114805]  ? lock_acquire+0x15e/0x2f0
[ 2003.114834]  ? __fget_files+0x34/0x3b0
[ 2003.114862]  ? find_held_lock+0x2b/0x80
[ 2003.114899]  ? __fget_files+0x203/0x3b0
[ 2003.114926]  ? lock_release+0xc8/0x290
[ 2003.114960]  ? __fget_files+0x20d/0x3b0
[ 2003.115002]  __sys_sendmsg+0x150/0x200
[ 2003.115029]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2003.115070]  ? __pfx_ksys_write+0x10/0x10
[ 2003.115115]  do_syscall_64+0xbf/0x390
[ 2003.115146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2003.115169] RIP: 0033:0x7f056dbbbb19
[ 2003.115186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2003.115207] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2003.115228] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2003.115244] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2003.115257] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2003.115271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2003.115284] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2003.115322]  </TASK>
[ 2004.822411] Bluetooth: hci1: command 0x0406 tx timeout
[ 2004.950481] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2004.950589] Bluetooth: hci4: command 0x0406 tx timeout
[ 2004.951415] Bluetooth: hci7: command 0x0c1a tx timeout
22:43:18 executing program 2:
r0 = memfd_secret(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000000)={{0x0, 0x4e5, 0xdd, 0x5, 0x7f, 0x0, 0x1, 0x1, 0x4, 0x7, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x8001})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x13, r1, 0x0)

22:43:18 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x12c8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:18 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 19)

22:43:18 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = getpid()
r2 = pidfd_open(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000))
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r2})
r5 = getpid()
pidfd_open(r5, 0x0)
clone3(&(0x7f0000001580)={0xac000200, &(0x7f0000000280), &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000300), {0x21}, &(0x7f00000013c0)=""/185, 0xb9, &(0x7f0000001480)=""/147, &(0x7f0000001540)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
clone3(&(0x7f0000001640)={0x40000200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x39}, &(0x7f0000000200)=""/109, 0x6d, &(0x7f00000003c0)=""/4096, &(0x7f0000001600)=[0xffffffffffffffff, 0x0, 0x0, r0, 0xffffffffffffffff, r5, r6], 0x7, {r7}}, 0x58)
sync()
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet(0x2, 0x80000, 0x9)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x79, 0x8, 0x3, 0x0, 0x1, 0x1000, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21ab, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x20, 0xffffffffffffff9b, 0xfffffffb, 0x3, 0x7, 0x9, 0x60, 0x0, 0x80, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'})

22:43:18 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:18 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:18 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf0}}}}, 0xc0}}, 0x0)

22:43:18 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x80000)

22:43:18 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x80101)

22:43:18 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xc812)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2017.584622] FAULT_INJECTION: forcing a failure.
[ 2017.584622] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.586457] CPU: 0 UID: 0 PID: 15564 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2017.586489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.586504] Call Trace:
[ 2017.586512]  <TASK>
[ 2017.586522]  dump_stack_lvl+0xfa/0x120
[ 2017.586559]  should_fail_ex+0x4d7/0x5e0
[ 2017.586596]  should_failslab+0xc2/0x120
[ 2017.586632]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2017.586662]  ? __hw_addr_add_ex+0x228/0x7a0
[ 2017.586697]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2017.586734]  ? __hw_addr_add_ex+0x228/0x7a0
[ 2017.586766]  __hw_addr_add_ex+0x228/0x7a0
[ 2017.586805]  ? __pfx___hw_addr_add_ex+0x10/0x10
[ 2017.586837]  ? mark_lock+0x6f1/0x750
[ 2017.586877]  dev_addr_init+0x13d/0x230
[ 2017.586916]  ? __pfx_dev_addr_init+0x10/0x10
[ 2017.586970]  alloc_netdev_mqs+0x171/0x1360
[ 2017.586994]  ? __pfx_ieee802154_if_setup+0x10/0x10
[ 2017.587039]  ieee802154_if_add+0xcf/0x1140
[ 2017.587076]  ? __asan_memset+0x24/0x50
[ 2017.587108]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2017.587145]  ? __pfx___mutex_lock+0x10/0x10
[ 2017.587171]  ? skb_put+0x138/0x1b0
[ 2017.587208]  ? __nlmsg_put+0x159/0x1d0
[ 2017.587252]  ? genlmsg_put+0x265/0x2e0
[ 2017.587299]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2017.587331]  ieee802154_add_iface+0x472/0x970
[ 2017.587373]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2017.587410]  ? trace_kmalloc+0x1f/0xb0
[ 2017.587452]  ? __nla_parse+0x42/0x60
[ 2017.587490]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2017.587526]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2017.587589]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2017.587626]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2017.587679]  ? security_capable+0x2f/0x90
[ 2017.587718]  genl_rcv_msg+0x532/0x7e0
[ 2017.587758]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2017.587793]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2017.587848]  netlink_rcv_skb+0x147/0x430
[ 2017.587879]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2017.587916]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2017.587967]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2017.588003]  genl_rcv+0x28/0x40
[ 2017.588032]  netlink_unicast+0x5a7/0x870
[ 2017.588069]  ? __pfx_netlink_unicast+0x10/0x10
[ 2017.588119]  netlink_sendmsg+0x8a3/0xd80
[ 2017.588157]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2017.588207]  ____sys_sendmsg+0xa67/0xc20
[ 2017.588246]  ? copy_msghdr_from_user+0xfb/0x150
[ 2017.588276]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2017.588328]  ? lock_acquire+0x15e/0x2f0
[ 2017.588363]  ___sys_sendmsg+0x10f/0x1b0
[ 2017.588393]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2017.588419]  ? perf_trace_lock+0xb5/0x5d0
[ 2017.588456]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2017.588485]  ? proc_fail_nth_write+0x97/0x220
[ 2017.588526]  ? lock_acquire+0x15e/0x2f0
[ 2017.588554]  ? __fget_files+0x34/0x3b0
[ 2017.588585]  ? find_held_lock+0x2b/0x80
[ 2017.588623]  ? __fget_files+0x203/0x3b0
[ 2017.588653]  ? lock_release+0xc8/0x290
[ 2017.588688]  ? __fget_files+0x20d/0x3b0
[ 2017.588734]  __sys_sendmsg+0x150/0x200
[ 2017.588763]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2017.588807]  ? __pfx_ksys_write+0x10/0x10
[ 2017.588856]  do_syscall_64+0xbf/0x390
[ 2017.588889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2017.588914] RIP: 0033:0x7f056dbbbb19
[ 2017.588932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.588955] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2017.588979] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2017.588995] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2017.589009] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.589023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2017.589037] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2017.589078]  </TASK>
22:43:18 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x2, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2017.687755] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2017.688726] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2017.690085] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2017.690750] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:43:18 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xff0f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2019.542401] Bluetooth: hci1: command 0x0406 tx timeout
[ 2019.735132] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2019.735223] Bluetooth: hci4: command 0x0406 tx timeout
[ 2019.737062] Bluetooth: hci7: command 0x0c1a tx timeout
22:43:29 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = timerfd_create(0x7, 0x0)
sendfile(r0, r2, 0x0, 0x7fff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cmdline\x00')
sendfile(r3, r0, &(0x7f0000000040)=0x400, 0x100000000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r5=>0x0, 0x8040, 0x59, 0x100, 0x0, {{0x5, 0x4, 0x2, 0x24, 0x14, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}}}}})
getresuid(&(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
r7 = geteuid()
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000006c0)=@newpolicy={0x35c, 0x13, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x401, 0x2, 0x20, 0x80, 0x67, r5, r6}, {0xa7, 0x80000000, 0x1, 0x8, 0x0, 0x5a, 0x5, 0x8}, {0x2, 0xf, 0x3f, 0x515}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, r5}, @mark={0xc, 0x15, {0x35075a, 0x5}}, @XFRMA_SET_MARK={0x8}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x1a, 0x2, 0xa0, 0x20, 0x29, 0x0, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x5, 0x0, 0x1, 0x74, 0xc8, 0x9, 0x9, 0x8}, {0x6, 0x0, 0x4ae25696, 0xf52f}, {0x7207, 0xffffffff, 0xd5}, 0x70bd2c, 0x3505, 0x2, 0x3, 0xf3, 0x40}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @etimer_thresh={0x8, 0xc, 0x4}, @algo_auth_trunc={0x121, 0x14, {{'sha1-ni\x00'}, 0x6a8, 0xa0, "c85cdf65983df0d6395f232a69a50700a3538d1d1d6ecdd4950aecc0e90fceaea6b6265b515b6c130c6a4e2accd61c811ecd42a6f5b1b332074ae80657d02b0b40266870b89841053e8ff381a21b6f997d74bf635adf9a180c1108098b1bddd31a6fe6de9436ba156e1d19c74b6e1fe42da6170c3baf5ca554b93976dbabc4975a7d67303b499ffcb7b8c90f4fec3c99d1565f6ecd966b6ef99bc424eab9d88f77167470c724e007e7b2b89f3f5393393be7d221f534e49dd3a13d9206323f3f7e038e2a095de16b39fca2544e0c34b6d11acac2ad"}}, @algo_auth_trunc={0x6f, 0x14, {{'blake2s-224-x86\x00'}, 0x118, 0xc0, "e99e218c5e33801526276338eb874e4f63fa27b5a6f7484b3a0a3af448195ce890964f"}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
signalfd(r4, &(0x7f0000000100)={[0x80000001]}, 0x8)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc)

22:43:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x107}}}}, 0xc0}}, 0x0)

22:43:29 executing program 6:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xfffffffffffffe3f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f0000000140), 0x80, &(0x7f0000000a00)={[{@grpid}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x2f52}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'x0I\x15\x9b\x7f%r\xf5\xebR\x84\xf1ex\x00\x06\x00'}}, {@fsname={'fsname', 0x3d, '.\x97/+'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@pcr={'pcr', 0x3d, 0x7}}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '\x98j#/{}$,[!-&-#+%\'$+.&@'}}, {@uid_gt={'uid>', r0}}]})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001580), 0x42001, 0x0)
lsetxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xf0, 0x2)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000015c0)={0x0, @loopback, @initdev}, &(0x7f0000001600)=0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {<r3=>r0, 0xffffffffffffffff}}, './file0\x00'})
syz_mount_image$nfs(&(0x7f00000004c0), &(0x7f0000000600)='./file0\x00', 0x3, 0x1, &(0x7f0000000740)=[{&(0x7f0000000640)="7acb03bf8c209fe9fd843ed9ebfb73130863bf4c70a50f5bf0579fe9867385edf383225081b940674174481ff10ec59b828ed2249db6ff1fed2a58f618a8f8a44a1faead0e5204a49a10bd600d52caf6290a716f4b81103067985bc3928660a0fcdf96d6d4e90e4c557044d307300023850992b173e5b68786754a3a8045b3c3d73bfe38cbb9de1c8b94470fc458cb140c49e1fefb9fac7d3ac11b908ad42668619751048b6c0c979b47e0405b922509c6705e73558f82df6f46edb983c1dc812eb11e72f7e4ca27716066fe8f4623c92510715938f2d6db75e10cc84f27681f66e597171341782476dce282e8d59f0082dbba9389ab90798f", 0xf9, 0x4fe}], 0x200004, &(0x7f00000007c0)={[{'%)\':%$+'}, {':{+%#(\xb7#)'}, {'%!-@,)*'}, {'(]!\\%&!.{'}], [{@context={'context', 0x3d, 'system_u'}}, {@hash}, {@subj_role={'subj_role', 0x3d, '[&$&(:\xf5}{{\''}}, {@uid_lt={'uid<', r3}}, {@subj_type={'subj_type', 0x3d, 'nojournal_checksum'}}, {@appraise_type}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@appraise}, {@permit_directio}]})
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa5a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff0001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x323}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x959}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x231d}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x448}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x414}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffff616}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8846}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x20000, 0x18b, 0x1d}, 0x18)

22:43:29 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x80000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:29 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 20)

22:43:29 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf0ff7f)

22:43:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x3, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:29 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x4, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2028.011494] loop6: detected capacity change from 0 to 264192
22:43:29 executing program 2:
r0 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x0, 0x0, @auto=[0x2a, 0x14, 0x34, 0x26, 0x15, 0x29]}, 0xe, 0xfffffffffffffffa)
keyctl$revoke(0x3, r0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r2=>0x0)
fcntl$setstatus(r1, 0x4, 0x0)
io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])

[ 2028.025445] ext4: Unknown parameter 'hash'
[ 2028.044115] loop6: detected capacity change from 0 to 4
[ 2028.048838] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 2028.062259] loop6: detected capacity change from 0 to 264192
[ 2028.078024] ext4: Unknown parameter 'hash'
22:43:29 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x1000000)

22:43:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x300}}}}, 0xc0}}, 0x0)

[ 2028.097345] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2028.099954] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:43:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x8, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2028.126746] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2028.127371] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:43:29 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x45, &(0x7f0000000040)=0x6, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

22:43:29 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 21)

22:43:29 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xc8120000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:29 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x9, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x701}}}}, 0xc0}}, 0x0)

22:43:29 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr', 0xaa800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"e2673861a23ae4d24c885ddc85671d24", <r2=>0x0, 0x0, {0x7f, 0x1}, {0x9f6c}, 0x0, [0x6, 0x800, 0x7, 0x0, 0xffffffffffffff9e, 0x80000001, 0x3, 0x6, 0x8, 0x3f, 0x7fffffff, 0x2, 0x100000001, 0x7, 0x1bf8]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000380)={{r0}, r2, 0xa, @unused=[0x1, 0xffff, 0x5, 0x3], @name="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"})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00')

[ 2028.367523] FAULT_INJECTION: forcing a failure.
[ 2028.367523] name failslab, interval 1, probability 0, space 0, times 0
[ 2028.369667] CPU: 0 UID: 0 PID: 15644 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2028.369700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2028.369714] Call Trace:
[ 2028.369723]  <TASK>
[ 2028.369733]  dump_stack_lvl+0xfa/0x120
[ 2028.369771]  should_fail_ex+0x4d7/0x5e0
[ 2028.369808]  should_failslab+0xc2/0x120
[ 2028.369846]  __kvmalloc_node_noprof+0x111/0x7f0
[ 2028.369877]  ? __pfx_dev_addr_init+0x10/0x10
[ 2028.369916]  ? lockdep_init_map_type+0x4b/0x240
[ 2028.369949]  ? alloc_netdev_mqs+0x945/0x1360
[ 2028.369985]  ? alloc_netdev_mqs+0x945/0x1360
[ 2028.370009]  alloc_netdev_mqs+0x945/0x1360
[ 2028.370032]  ? __pfx_ieee802154_if_setup+0x10/0x10
[ 2028.370079]  ieee802154_if_add+0xcf/0x1140
[ 2028.370117]  ? __asan_memset+0x24/0x50
[ 2028.370150]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2028.370189]  ? __pfx___mutex_lock+0x10/0x10
[ 2028.370216]  ? skb_put+0x138/0x1b0
[ 2028.370254]  ? __nlmsg_put+0x159/0x1d0
[ 2028.370307]  ? genlmsg_put+0x265/0x2e0
[ 2028.370348]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2028.370380]  ieee802154_add_iface+0x472/0x970
[ 2028.370420]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2028.370460]  ? trace_kmalloc+0x1f/0xb0
[ 2028.370502]  ? __nla_parse+0x42/0x60
[ 2028.370540]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2028.370575]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2028.370621]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2028.370657]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2028.370710]  ? security_capable+0x2f/0x90
[ 2028.370748]  genl_rcv_msg+0x532/0x7e0
[ 2028.370788]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2028.370823]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2028.370878]  netlink_rcv_skb+0x147/0x430
[ 2028.370908]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2028.370945]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2028.370995]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2028.371031]  genl_rcv+0x28/0x40
[ 2028.371060]  netlink_unicast+0x5a7/0x870
[ 2028.371097]  ? __pfx_netlink_unicast+0x10/0x10
[ 2028.371146]  netlink_sendmsg+0x8a3/0xd80
[ 2028.371184]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2028.371233]  ____sys_sendmsg+0xa67/0xc20
[ 2028.371272]  ? copy_msghdr_from_user+0xfb/0x150
[ 2028.371301]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2028.371352]  ? lock_acquire+0x15e/0x2f0
[ 2028.371387]  ___sys_sendmsg+0x10f/0x1b0
[ 2028.371418]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2028.371443]  ? perf_trace_lock+0xb5/0x5d0
[ 2028.371482]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2028.371510]  ? proc_fail_nth_write+0x97/0x220
[ 2028.371552]  ? lock_acquire+0x15e/0x2f0
[ 2028.371579]  ? __fget_files+0x34/0x3b0
[ 2028.371610]  ? find_held_lock+0x2b/0x80
[ 2028.371648]  ? __fget_files+0x203/0x3b0
[ 2028.371677]  ? lock_release+0xc8/0x290
[ 2028.371727]  ? __fget_files+0x20d/0x3b0
[ 2028.371772]  __sys_sendmsg+0x150/0x200
[ 2028.371801]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2028.371844]  ? __pfx_ksys_write+0x10/0x10
[ 2028.371893]  do_syscall_64+0xbf/0x390
[ 2028.371926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2028.371951] RIP: 0033:0x7f056dbbbb19
[ 2028.371970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2028.371993] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2028.372016] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2028.372032] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2028.372046] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2028.372061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2028.372075] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2028.372115]  </TASK>
[ 2028.473917] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2028.487175] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2028.489676] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2028.494030] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2030.486706] Bluetooth: hci1: command 0x0406 tx timeout
[ 2030.550418] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2030.550448] Bluetooth: hci4: command 0x0406 tx timeout
[ 2030.550496] Bluetooth: hci7: command 0x0c1a tx timeout
22:43:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x0, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 22)

22:43:40 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x1010800)

22:43:40 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
syz_open_dev$vcsu(0x0, 0x20, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
write$snapshot(0xffffffffffffffff, 0x0, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x1)

22:43:40 executing program 2:
clock_nanosleep(0x1, 0x1, 0x0, 0x0)

22:43:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x900}}}}, 0xc0}}, 0x0)

22:43:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:40 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xff0f0000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xa00}}}}, 0xc0}}, 0x0)

[ 2039.066806] FAULT_INJECTION: forcing a failure.
[ 2039.066806] name failslab, interval 1, probability 0, space 0, times 0
[ 2039.067929] CPU: 1 UID: 0 PID: 15677 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2039.067946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2039.067954] Call Trace:
[ 2039.067959]  <TASK>
[ 2039.067963]  dump_stack_lvl+0xfa/0x120
[ 2039.067984]  should_fail_ex+0x4d7/0x5e0
[ 2039.068005]  should_failslab+0xc2/0x120
[ 2039.068024]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2039.068040]  ? alloc_netdev_mqs+0xbe5/0x1360
[ 2039.068059]  ? alloc_netdev_mqs+0xbe5/0x1360
[ 2039.068072]  alloc_netdev_mqs+0xbe5/0x1360
[ 2039.068090]  ieee802154_if_add+0xcf/0x1140
[ 2039.068110]  ? __asan_memset+0x24/0x50
[ 2039.068126]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2039.068145]  ? __pfx___mutex_lock+0x10/0x10
[ 2039.068159]  ? skb_put+0x138/0x1b0
[ 2039.068179]  ? __nlmsg_put+0x159/0x1d0
[ 2039.068201]  ? genlmsg_put+0x265/0x2e0
[ 2039.068221]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2039.068237]  ieee802154_add_iface+0x472/0x970
[ 2039.068258]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2039.068276]  ? trace_kmalloc+0x1f/0xb0
[ 2039.068302]  ? __nla_parse+0x42/0x60
[ 2039.068321]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2039.068338]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2039.068360]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2039.068378]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2039.068404]  ? security_capable+0x2f/0x90
[ 2039.068424]  genl_rcv_msg+0x532/0x7e0
[ 2039.068443]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2039.068460]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2039.068487]  netlink_rcv_skb+0x147/0x430
[ 2039.068502]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2039.068519]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2039.068544]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2039.068565]  genl_rcv+0x28/0x40
[ 2039.068581]  netlink_unicast+0x5a7/0x870
[ 2039.068600]  ? __pfx_netlink_unicast+0x10/0x10
[ 2039.068624]  netlink_sendmsg+0x8a3/0xd80
[ 2039.068643]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2039.068667]  ____sys_sendmsg+0xa67/0xc20
[ 2039.068687]  ? copy_msghdr_from_user+0xfb/0x150
[ 2039.068702]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2039.068727]  ? lock_acquire+0x15e/0x2f0
[ 2039.068745]  ___sys_sendmsg+0x10f/0x1b0
[ 2039.068760]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2039.068773]  ? perf_trace_lock+0xb5/0x5d0
[ 2039.068792]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2039.068805]  ? proc_fail_nth_write+0x97/0x220
[ 2039.068826]  ? lock_acquire+0x15e/0x2f0
[ 2039.068840]  ? __fget_files+0x34/0x3b0
[ 2039.068856]  ? find_held_lock+0x2b/0x80
[ 2039.068874]  ? __fget_files+0x203/0x3b0
[ 2039.068888]  ? lock_release+0xc8/0x290
[ 2039.068906]  ? __fget_files+0x20d/0x3b0
[ 2039.068928]  __sys_sendmsg+0x150/0x200
[ 2039.068942]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2039.068963]  ? __pfx_ksys_write+0x10/0x10
[ 2039.068988]  do_syscall_64+0xbf/0x390
[ 2039.069005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2039.069018] RIP: 0033:0x7f056dbbbb19
[ 2039.069028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2039.069040] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2039.069052] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2039.069060] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2039.069067] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2039.069075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2039.069082] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2039.069102]  </TASK>
[ 2039.829801] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2039.833915] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2039.837157] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2039.839219] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2041.046390] Bluetooth: hci1: command 0x0406 tx timeout
[ 2041.878460] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2041.878552] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2041.879460] Bluetooth: hci4: command 0x0406 tx timeout
22:43:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x0, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:43:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf00}}}}, 0xc0}}, 0x0)

22:43:51 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x1a9e, &(0x7f0000003a00)={0x0, 0x36a9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r5)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c80000001b000100000000f75b23e35d05e9481e0000000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000491b1d920bc7c4fe5e30f8d1620b134bebe156d68286467ede0c67e0f711921ac4f5426402efe432e484e74e1e25facd2b32e3f244249dee840515533548d3518aafd05743b6f1a44a9656864b92ab3a33c94c7ac4819838e00af81ca0db0d1077a389e1f109d260a3", @ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYRES16=r4], 0xc8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
clock_gettime(0x0, &(0x7f00000001c0)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000180)=[{r1, 0x1}, {r3, 0x470}, {r4, 0xa28c}, {r6, 0x40}, {r7, 0x110}, {r0, 0x5000}], 0x6, &(0x7f0000000200)={r8, r9+60000000}, &(0x7f0000000240)={[0xaab]}, 0x8)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGETKEYCODE(r10, 0x4b52, &(0x7f0000000000)={0x1000})

22:43:51 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x10000000)

22:43:51 executing program 2:
r0 = socket(0x20, 0x80000, 0x7279adac)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x805)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0xd, 0xfffffffffffffffb}, {0x0, 0x0, 0x1000}], 0x80040, &(0x7f0000000140)=ANY=[@ANYBLOB='fowner=', @ANYRESDEC=r2, @ANYBLOB="07afabe81db11d49", @ANYRESDEC=r2, @ANYBLOB=',\x00'])

22:43:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 23)

22:43:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x8000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2050.535579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
22:43:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x8000000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:43:51 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x7ffff000)

22:43:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x300, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:43:51 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf4000000)

22:43:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf000}}}}, 0xc0}}, 0x0)

[ 2050.698520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
22:43:52 executing program 2:
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x80000000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
listen(r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="8584c0cfdd5d35f491581a99a534cd934208cb07f09061b0be52166a96f81413086fcb79b5cbc72f377471719e6a4b2433f2115c08dcd3a4e667a90fefeedbe8683f86", 0x43}, {&(0x7f0000000200)="51139a1f68f5c6a2a9db551696336db688495c39c3d41714ad9dfd6141e6890357a51f1b548fac27d1c20ce17efc122b78ca8e4caacaecf993a713ddbb870eb1296f19c5c89cc59aa6480d1fe59b1dc490a3e2fa3e3c06d0f1191621f24f52c975", 0x61}], 0x2)

22:43:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 24)

22:43:52 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf5000000)

[ 2050.815340] FAULT_INJECTION: forcing a failure.
[ 2050.815340] name failslab, interval 1, probability 0, space 0, times 0
[ 2050.816492] CPU: 1 UID: 0 PID: 15729 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2050.816509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2050.816517] Call Trace:
[ 2050.816522]  <TASK>
[ 2050.816527]  dump_stack_lvl+0xfa/0x120
[ 2050.816549]  should_fail_ex+0x4d7/0x5e0
[ 2050.816569]  should_failslab+0xc2/0x120
[ 2050.816588]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2050.816603]  ? alloc_netdev_mqs+0xc53/0x1360
[ 2050.816622]  ? alloc_netdev_mqs+0xc53/0x1360
[ 2050.816635]  alloc_netdev_mqs+0xc53/0x1360
[ 2050.816654]  ieee802154_if_add+0xcf/0x1140
[ 2050.816674]  ? __asan_memset+0x24/0x50
[ 2050.816690]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2050.816709]  ? __pfx___mutex_lock+0x10/0x10
[ 2050.816723]  ? skb_put+0x138/0x1b0
[ 2050.816743]  ? __nlmsg_put+0x159/0x1d0
[ 2050.816765]  ? genlmsg_put+0x265/0x2e0
[ 2050.816785]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2050.816801]  ieee802154_add_iface+0x472/0x970
[ 2050.816822]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2050.816840]  ? trace_kmalloc+0x1f/0xb0
[ 2050.816861]  ? __nla_parse+0x42/0x60
[ 2050.816880]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2050.816897]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2050.816919]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2050.816937]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2050.816963]  ? security_capable+0x2f/0x90
[ 2050.816983]  genl_rcv_msg+0x532/0x7e0
[ 2050.817003]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2050.817020]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2050.817046]  netlink_rcv_skb+0x147/0x430
[ 2050.817061]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2050.817079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2050.817104]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2050.817122]  genl_rcv+0x28/0x40
[ 2050.817136]  netlink_unicast+0x5a7/0x870
[ 2050.817154]  ? __pfx_netlink_unicast+0x10/0x10
[ 2050.817178]  netlink_sendmsg+0x8a3/0xd80
[ 2050.817197]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2050.817222]  ____sys_sendmsg+0xa67/0xc20
[ 2050.817242]  ? copy_msghdr_from_user+0xfb/0x150
[ 2050.817256]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2050.817285]  ? lock_acquire+0x15e/0x2f0
[ 2050.817306]  ___sys_sendmsg+0x10f/0x1b0
[ 2050.817322]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2050.817334]  ? perf_trace_lock+0xb5/0x5d0
[ 2050.817354]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2050.817368]  ? proc_fail_nth_write+0x97/0x220
[ 2050.817390]  ? lock_acquire+0x15e/0x2f0
[ 2050.817404]  ? __fget_files+0x34/0x3b0
[ 2050.817420]  ? find_held_lock+0x2b/0x80
[ 2050.817440]  ? __fget_files+0x203/0x3b0
[ 2050.817454]  ? lock_release+0xc8/0x290
[ 2050.817472]  ? __fget_files+0x20d/0x3b0
[ 2050.817495]  __sys_sendmsg+0x150/0x200
[ 2050.817509]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2050.817531]  ? __pfx_ksys_write+0x10/0x10
[ 2050.817556]  do_syscall_64+0xbf/0x390
[ 2050.817573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2050.817586] RIP: 0033:0x7f056dbbbb19
[ 2050.817596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2050.817608] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2050.817619] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2050.817628] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2050.817635] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2050.817642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2050.817650] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2050.817671]  </TASK>
22:43:52 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x3d8, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2051.325634] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2051.326763] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2051.327844] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2051.328598] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2052.502382] Bluetooth: hci1: command 0x0406 tx timeout
[ 2053.334366] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2053.334891] Bluetooth: hci4: command 0x0406 tx timeout
[ 2053.334931] Bluetooth: hci7: command 0x0c1a tx timeout
22:44:03 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xc812000000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:03 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x7ffffffff000)

22:44:03 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

22:44:03 executing program 2:
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x80000000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
listen(r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="8584c0cfdd5d35f491581a99a534cd934208cb07f09061b0be52166a96f81413086fcb79b5cbc72f377471719e6a4b2433f2115c08dcd3a4e667a90fefeedbe8683f86", 0x43}, {&(0x7f0000000200)="51139a1f68f5c6a2a9db551696336db688495c39c3d41714ad9dfd6141e6890357a51f1b548fac27d1c20ce17efc122b78ca8e4caacaecf993a713ddbb870eb1296f19c5c89cc59aa6480d1fe59b1dc490a3e2fa3e3c06d0f1191621f24f52c975", 0x61}], 0x2)

22:44:03 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x80000}}}}, 0xc0}}, 0x0)

22:44:03 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x0, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:03 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x900, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:03 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 25)

22:44:03 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x1000000000000)

22:44:03 executing program 6:
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
syz_io_uring_complete(0x0)
setxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x1, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000200)="3706b0943926eb9b4a30fa89b76f149afbd9431e54d8")
creat(&(0x7f00000004c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{&(0x7f00000005c0)="f1", 0x1}], 0x0, &(0x7f0000000780)={[], [{@context={'context', 0x3d, 'user_u'}}, {@hash}, {@pcr}]})
openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00')
openat2(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x4420, 0x8}, 0x18)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$nfs(&(0x7f00000021c0), 0x0, 0x0, 0x2, &(0x7f0000003880)=[{&(0x7f0000002240)="a6", 0x1, 0x80000000}, {&(0x7f0000002280)="fc", 0x1}], 0x0, &(0x7f0000003ac0)={[{'./)\x90(::'}]})
mount$9p_virtio(&(0x7f0000004000), &(0x7f0000004040)='./file0\x00', &(0x7f0000004080), 0x1000002, &(0x7f0000004340)={'trans=virtio,', {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x890001, &(0x7f0000000600)={'trans=virtio,', {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'nfs\x00'}}, {@hash}, {@appraise_type}]}})
r4 = dup2(r1, r0)
ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000003c0))
setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='user.incfs.size\x00', &(0x7f00000002c0)='$#\'\x00', 0x4, 0x3)

22:44:03 executing program 2:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x5000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="019c5b55535b8f6fbd32641cc33ae4680ff271cb8ceb0419b3857a3cd0810002456b674afb4e4371f8073ca862a7996a6deff6216be23c6f5182ad1794686e26e42d3bfac1a02773f35841d9b1ca68fcf961a0cf41625ce9f07fd3250e6ac0c98543ef9d4fbf86bf45d4409c7d114a2910c2c60ea42fdbe7a2cdb87beab585a1bf87af6e2f39c62e63a02b8faf5cef511c0e4f71b941b25f", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="00000000000000002e2d666964653000ebcab904860986180a02ec1652c4f6282c88893fdc69afb62fc34549f804d8d18b32380e78aca0b8a221ed4bf3050fecbd928700f6796b96e11c975f46cb1abcae6aec2f1db611c6aa2bf046e8"])
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
r3 = shmat(0xffffffffffffffff, &(0x7f0000000000/0x4000)=nil, 0x0)
shmdt(r3)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2)
getcwd(&(0x7f0000000040)=""/173, 0xffffffffffffff6f)

22:44:03 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xc9ffff}}}}, 0xc0}}, 0x0)

22:44:03 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf00, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:03 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0xff0f000000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:03 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 26)

[ 2062.461649] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 2062.498460] loop6: detected capacity change from 0 to 264192
22:44:03 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x5000000000000)

[ 2062.521550] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 2062.570746] FAULT_INJECTION: forcing a failure.
[ 2062.570746] name failslab, interval 1, probability 0, space 0, times 0
[ 2062.572455] CPU: 1 UID: 0 PID: 15779 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2062.572485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2062.572498] Call Trace:
[ 2062.572506]  <TASK>
[ 2062.572515]  dump_stack_lvl+0xfa/0x120
[ 2062.572550]  should_fail_ex+0x4d7/0x5e0
[ 2062.572585]  should_failslab+0xc2/0x120
[ 2062.572619]  __kvmalloc_node_noprof+0x111/0x7f0
[ 2062.572654]  ? alloc_netdev_mqs+0xd0e/0x1360
[ 2062.572690]  ? alloc_netdev_mqs+0xd0e/0x1360
[ 2062.572711]  alloc_netdev_mqs+0xd0e/0x1360
[ 2062.572745]  ieee802154_if_add+0xcf/0x1140
[ 2062.572780]  ? __asan_memset+0x24/0x50
[ 2062.572810]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2062.572844]  ? __pfx___mutex_lock+0x10/0x10
[ 2062.572869]  ? skb_put+0x138/0x1b0
[ 2062.572904]  ? __nlmsg_put+0x159/0x1d0
[ 2062.572944]  ? genlmsg_put+0x265/0x2e0
[ 2062.572981]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2062.573010]  ieee802154_add_iface+0x472/0x970
[ 2062.573047]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2062.573080]  ? trace_kmalloc+0x1f/0xb0
[ 2062.573118]  ? __nla_parse+0x42/0x60
[ 2062.573152]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2062.573184]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2062.573225]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2062.573258]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2062.573314]  ? security_capable+0x2f/0x90
[ 2062.573350]  genl_rcv_msg+0x532/0x7e0
[ 2062.573386]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2062.573417]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2062.573467]  netlink_rcv_skb+0x147/0x430
[ 2062.573495]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2062.573528]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2062.573574]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2062.573607]  genl_rcv+0x28/0x40
[ 2062.573633]  netlink_unicast+0x5a7/0x870
[ 2062.573667]  ? __pfx_netlink_unicast+0x10/0x10
[ 2062.573712]  netlink_sendmsg+0x8a3/0xd80
[ 2062.573747]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2062.573792]  ____sys_sendmsg+0xa67/0xc20
[ 2062.573828]  ? copy_msghdr_from_user+0xfb/0x150
[ 2062.573854]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2062.573900]  ? lock_acquire+0x15e/0x2f0
[ 2062.573934]  ___sys_sendmsg+0x10f/0x1b0
[ 2062.573961]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2062.573985]  ? perf_trace_lock+0xb5/0x5d0
[ 2062.574020]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2062.574045]  ? proc_fail_nth_write+0x97/0x220
[ 2062.574083]  ? lock_acquire+0x15e/0x2f0
[ 2062.574108]  ? __fget_files+0x34/0x3b0
[ 2062.574135]  ? find_held_lock+0x2b/0x80
[ 2062.574168]  ? __fget_files+0x203/0x3b0
[ 2062.574194]  ? lock_release+0xc8/0x290
[ 2062.574226]  ? __fget_files+0x20d/0x3b0
[ 2062.574268]  __sys_sendmsg+0x150/0x200
[ 2062.574293]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2062.574333]  ? __pfx_ksys_write+0x10/0x10
[ 2062.574377]  do_syscall_64+0xbf/0x390
[ 2062.574407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2062.574430] RIP: 0033:0x7f056dbbbb19
[ 2062.574447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2062.574467] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2062.574488] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2062.574503] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2062.574516] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2062.574529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2062.574542] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2062.574580]  </TASK>
[ 2062.624883] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
22:44:03 executing program 2:
clone(0x41828100, 0x0, 0x0, 0x0, 0x0)
clone(0x2008000, &(0x7f0000000000)="666b92c999ac645615a8ae1ce80651b7bc", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="32d84d99d6b4d5a8fe28ace03553d862e274d1e9a4df4347f9ecbf1f020cb34f53e34cce349b1a9ca5233133737d61019f43a553ee1109633e4d5733fa98659344fa3f4764cedabe2d2b901b5ba24ee522f29246ad8ad5b190a33ecc9367dc34a58ce89cc76a857bb7928b2bb331e0170b4b99fe596caf834e6a1496eb976e3cbc7c465db273a46ebeaade1c4995a0c570217e")
clone(0x20202000, &(0x7f0000000180)="bb74a8848eb3e2d5f94ef275d94f79073c01d45039", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)="489dead6e87d1f76cd1f217230abb950b9613c2b76b91c2b4dac6cafbd7f8e02658ef2e0eeb7a08995e268cee4fbc58268888c668a98b540e61597b784d72083326614a45eb7d16a732fbee5107b77f07ec0493b3487721721474a67b1a52182eeb678ef4988a7c5b6902c8a60675260aacbaebabab2bcef1a0b957d66c2e74e8280c90c54db3eb8632c947f8f9c9285c90c10b539d7bacadf0b0137ce37f7d4065e5bb2b943a49a6912654c42d15fb3798083148a5296725a86229df5cd")
clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="159e0fea76709f38fb56c53af47fc448c4a8af699b981f20ac72f7d2852b780808c31a175a819a7d1e2a2a5978f221c0af21dbc17df51115c3585a4e1c1388233239a63bae3e874e19d4f70dfa5cd5e5431f45ff3e2cd7bbeec0bc53b2a1fed45e66247de0136852ea53d15e6e585bafd091cbb93ee0f73bcea9c8fc87565fa90e40fe093434490454a30189b5aaa518baf15207833f156ad554ad2f416ad621f914b56f99e95b4ec6bd70e3affc3ffb56d1569285b6a5bf9ba2eef65f226c1f3026ebbebcee89ae353c2e7368df")

22:44:03 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf0ffff}}}}, 0xc0}}, 0x0)

[ 2062.676533] loop6: detected capacity change from 0 to 264192
[ 2062.691551] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
22:44:03 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x8000000000000)

[ 2063.076274] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2063.077758] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2063.081415] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2063.084187] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2064.278660] Bluetooth: hci1: command 0x0406 tx timeout
[ 2065.110424] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2065.111354] Bluetooth: hci4: command 0x0406 tx timeout
[ 2065.111887] Bluetooth: hci7: command 0x0c1a tx timeout
22:44:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 27)

22:44:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x2000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:12 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10, 0x0, 0x2}}], 0x10}}], 0x2, 0x0)

22:44:12 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf0ff7f00000000)

22:44:12 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x5, 0x6, 0x1, 0xffffffe3, 0x3, [0x2, 0x7, 0x8001]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
kcmp(0x0, 0x0, 0x0, r0, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x1000000}}}}, 0xc0}}, 0x0)

22:44:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x51, &(0x7f0000000040)=0x40, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r4, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x800, 0xd3, 0x6, 0x1f})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
sendfile(r0, r5, 0x0, 0x8003)

22:44:12 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:12 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r0, &(0x7f0000000000)=0x4, r1, &(0x7f0000000040)=0x9, 0xfffffffffffffffa, 0x17)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xd803, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2071.679208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
22:44:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 28)

22:44:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x2000000}}}}, 0xc0}}, 0x0)

22:44:13 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e20000000000000005000000000000007f0000000000000000000000000000000000802d000000000100000004000000ff00000000c8f1ffffffffffff0400000000000000874c0000000000000800"/112])
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x5)
syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
pwritev(r0, &(0x7f0000000340), 0x4, 0x2002, 0x2)

[ 2071.736191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
22:44:13 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf0ffffff7f0000)

[ 2071.776029] FAULT_INJECTION: forcing a failure.
[ 2071.776029] name failslab, interval 1, probability 0, space 0, times 0
[ 2071.777227] CPU: 1 UID: 0 PID: 15845 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2071.777245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2071.777254] Call Trace:
[ 2071.777259]  <TASK>
[ 2071.777264]  dump_stack_lvl+0xfa/0x120
[ 2071.777291]  should_fail_ex+0x4d7/0x5e0
[ 2071.777311]  should_failslab+0xc2/0x120
[ 2071.777331]  __kmalloc_noprof+0xc8/0x760
[ 2071.777345]  ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0
[ 2071.777363]  ? dev_prep_valid_name.constprop.0+0x150/0x690
[ 2071.777391]  ? dev_prep_valid_name.constprop.0+0x150/0x690
[ 2071.777412]  dev_prep_valid_name.constprop.0+0x150/0x690
[ 2071.777438]  ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10
[ 2071.777463]  ? alloc_netdev_mqs+0xebf/0x1360
[ 2071.777483]  ieee802154_if_add+0x150/0x1140
[ 2071.777504]  ? __asan_memset+0x24/0x50
[ 2071.777521]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2071.777542]  ? __pfx___mutex_lock+0x10/0x10
[ 2071.777557]  ? skb_put+0x138/0x1b0
[ 2071.777577]  ? __nlmsg_put+0x159/0x1d0
[ 2071.777601]  ? genlmsg_put+0x265/0x2e0
[ 2071.777623]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2071.777640]  ieee802154_add_iface+0x472/0x970
[ 2071.777662]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2071.777681]  ? trace_kmalloc+0x1f/0xb0
[ 2071.777703]  ? __nla_parse+0x42/0x60
[ 2071.777723]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2071.777742]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2071.777765]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2071.777784]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2071.777812]  ? security_capable+0x2f/0x90
[ 2071.777833]  genl_rcv_msg+0x532/0x7e0
[ 2071.777854]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2071.777872]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2071.777900]  netlink_rcv_skb+0x147/0x430
[ 2071.777916]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2071.777935]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2071.777961]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2071.777981]  genl_rcv+0x28/0x40
[ 2071.777995]  netlink_unicast+0x5a7/0x870
[ 2071.778015]  ? __pfx_netlink_unicast+0x10/0x10
[ 2071.778041]  netlink_sendmsg+0x8a3/0xd80
[ 2071.778060]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2071.778086]  ____sys_sendmsg+0xa67/0xc20
[ 2071.778108]  ? copy_msghdr_from_user+0xfb/0x150
[ 2071.778123]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2071.778150]  ? lock_acquire+0x15e/0x2f0
[ 2071.778170]  ___sys_sendmsg+0x10f/0x1b0
[ 2071.778186]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2071.778200]  ? perf_trace_lock+0xb5/0x5d0
[ 2071.778220]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2071.778235]  ? proc_fail_nth_write+0x97/0x220
[ 2071.778257]  ? lock_acquire+0x15e/0x2f0
[ 2071.778272]  ? __fget_files+0x34/0x3b0
[ 2071.778288]  ? find_held_lock+0x2b/0x80
[ 2071.778308]  ? __fget_files+0x203/0x3b0
[ 2071.778324]  ? lock_release+0xc8/0x290
[ 2071.778342]  ? __fget_files+0x20d/0x3b0
[ 2071.778366]  __sys_sendmsg+0x150/0x200
[ 2071.778381]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2071.778404]  ? __pfx_ksys_write+0x10/0x10
[ 2071.778429]  do_syscall_64+0xbf/0x390
[ 2071.778447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2071.778461] RIP: 0033:0x7f056dbbbb19
[ 2071.778471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2071.778484] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2071.778497] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2071.778506] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2071.778514] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2071.778522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2071.778529] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2071.778550]  </TASK>
22:44:13 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x3000000}}}}, 0xc0}}, 0x0)

22:44:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, r4}, 0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x74}}, 0x48054)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r5, 0x407, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2071.937675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2071.963238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
22:44:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffff}}, './file0\x00'})
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x12, 0xec, &(0x7f0000000040)="299a6660800a3fa24a24ed43284261cae6b8f13522e6c414eeea03b900c188ce23b2bc58401fbcf47cf34dcaeed48c165ec5f458b2d17c0753849abd1d22dd07c5feca5e47244ab905f1a3f664120530d324ceee2098fade44c01a69d93b7af08205497839cb1eae3a3f3fae1fa0f832362937258186f7483fb76562c6eaa249b51a422ddc72804336cf13e0441b7eb0572b99d16bd2773ba8ffbab959812e7d66fb0c861b0e7461fd1746046bbb3932e8a5b03250009df33f9c44f5b5dc64ad7ac719b48696a18d2c79ee7149a1bce6df63622cbe9c245f37eed8185ccca456bb817deb71f5c06ee5d20b18"})
mknod$loop(&(0x7f0000000580)='./file0\x00', 0x6000, 0x0)

[ 2072.436252] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2072.437063] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2072.438821] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2072.440250] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2073.622377] Bluetooth: hci1: command 0x0406 tx timeout
[ 2074.454475] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2074.454666] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2074.455941] Bluetooth: hci4: command 0x0406 tx timeout
22:44:22 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:22 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 29)

22:44:22 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x13030000, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000000400000003", 0x9, 0x800}], 0x0, &(0x7f0000000080)={[{@nouid32}, {@commit}, {@stripe={'stripe', 0x3d, 0x1}}, {@dioread_nolock}]})
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=<r3=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000002280)={{r2}, r3, 0x4, @unused, @devid})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000006c0)={{r1}, r3, 0x4, @unused=[0x1ff, 0x2, 0x1, 0x79f], @name="c44d28ab84ede6d6c4c256c0d3903b0467b70f54dca2918e432adde86ca0a5d148480b727b0c37f54297e5e3d603953bf1de0b91630bb2a5aa0f442664b02a3087ddc165b4fd8acac4f3d3237505bd0af9324b563018e531e1379c42d403e13a9b20f5bce6830297d291d02495bb7814c1a0e099bb56e278fe33fa0aef464a0cab9a0380b035fca40bdddd9a43cee5331225431bcf7e3cd5fc5180e711210d06d253f1e24c51e8be805ad9593d7d5d5c8283391668f995f5457faa3a2e185f3a7366248eedae42bc82ff0e5b58cba337520afbe18c332a99c087225894398482e80993a63d8d00f12dee7c65aa7ac152f79adfb46feabaf884f5d34a9698128563c39345170c43dee5f6451430bafaff8b80581bfb1d88d34e72dabaeb3be071f9c5c931e8a820245c6d32d914619042eadd507e32763f9e36a61f2d29745200fe2a9bddbc3554ce77ba5e20a2e37c754730c49add3380d8321a4490d71b1cb3c2ca78cdfb60535feb1090c13af308a05907957db25d8770573c0261f24f028bd02207e88ccd15ec0fdefc22c3548a85498adc05f4772aee5580854d39ba741dc81a7cf3a08c341ebffd851ecc0046e1c36316f269aba1398ee31c871ba89294f939d511233867c003fbeae3e618a25f370f9ca9cfa993453e38894e809414967bee69dc0ad77cbe1e813421c8e2ada2801cc3266e90b1b22a769dbe496d859306b229cf1d352dc6041970578bd5217a15fd5f1b63ccb14dc022b52d57552de66506d46ccf8f841cee528b970b60e32c8a787da5641af6963833d180f741a9da4410a53b08f1a051f7a3ca2756002f1d9e1d8037239ec1d13f7b3d4650c2c340c26fdb4888c30a449b88db1821121f846bd11f55708dee9789c8f9fd62e0c551e9657a108ae953c9083c20d864878bf46adcb46bf33e73bffc530460d3ee8512630bf091027f41eee128a4fa53f6c46e4f1471ad0b85bd15555b3f5a21ad3ae102b920fd756b4374cb5e08b14293bd5334d9d3916806b166f3fd05da2931254efa3b904ddfcb4e9f231cd2cc1c65c827bbbe0a385a46ac780f9f684543d6e87ff572fe0f78564f310d04d0da3ba7c9071640c992c8b32b7346af539f70eb0f94e0398c4dcaa588334ccf7d0df8fb8c80f061e7609ffa2844a311aa1fd18fe2cc361d1fba32650b2485b4997cfbb893a07524c41426c2ea2546cbed60bf698593e032629743667da6c7848f6d004bc24fc11a8bd665119658b77542c65301841949340308fe90b14b04bca20d5ef222b02e39e3ac86c987896f286a4a4db788891f05ba71a1480cea7a5a74a7434f63cd4227a5cdc58357740826b97b156faa8739c8e16d0d5fe5a926e61c7a4d2a4e94e99836d25afcdc9ab0cdbffa01451f8e763cc25f5f7ef2c044f020c82eb4b76ed8d74084c409baa31fa8690b879183914238b2aac48f646b7695bd354689b8ace30c6467bb1a90dd152a8beb83ce3bc341eb52ecca30732e6e30923ab7124b47a47ce35cf65eebc66cd61dfda20c92086f593df2371bb947c5d73273017e3163e9f9448d4be317369a2373e2e9804b9a539ff3e24a5388ef3eb7227835e0e39b913f4ec563f4b43dc87cb1e7c32e31275695865b66e92d85ab420c4e27372e0e92c6d96722f427ea7ed63d994e08cd66c0d474ec9e261a7f2c394fc14a7dd426a79f3ddd0f62194b66b7a0c5690790253d1e6f2d90cfc7f2fce33fda8e35f41558591d51fafcf66e721fe37e5b137b37f963a8c0bcadc6e4d6d1a624828c3a896a2aa7b59dd23def144850f3b7b4c61b7ac968430406f89cccc3a3bc024c00d3a5b3e5be3082a4b9c7b5efdfe2806bba650409d9d2ff8e5b3b1ddbce7f40216f9c147dbaf27b96672c730abc6cdd60458234cac32744fd0ee33ea33a636a334dc77a919838e494c8e62e1d7549eafe27d5e709bce49a15253a6bfdae89b38862da1c31bb9575c6ce9e925692644575c3d41d8c196bec28000d458aaae24fae22883ef526558e2dd1965562dedd0904642cb1810bcd2d19ac9f18533851e2a8428a85e89bae884b614a1a9a0f2ad010b459093781438c08e1d0f625a1112c575240c8f5d43e27287f673faa92dc134e3d4a5c611ce2ac47fb2b142c42717dc3aa71dd102f894437360d411bf4db0a16598f249b48fea9bdb74a88ef94431a8108421f962dc65b7a01c3853fb82cadd4399b8621f21d152bcb9fe3303d09311555539cd763d6af993e29fa18dd149fce97ab5f74dc38e53cdb574d3c3970244c391cc3b98fcce2e81cb74c4a2bcce6fb7586792556279c500a5ea36363ff0197e134394ec5d674772b50c657817dc576ca4e2c08fbec09a435ff31cc0ea5af8c1a40b879837756b294d72b432db775581d7bc6302d420ed5f3a9c9c9645c0e6ced5d703fcdefe464b3cf12fb3cb99d7dfbe17d6732ef37778a186d93d0f00d6ba1f4a7cf9a76f7cad15e82dde8cf4354ade7c7235bbe6cadd3c2748dd2ca0a22e00424c484110996c6d268ad7b4a3ee4837ee6c9af56a4c363705c026571af31bdf8cd02abaa17f5246feb4e599cd440be27b24d26fd8d4e77e50260cdee20c22c92b9d81bee14849eeb83628b5085680eb8fb5d93119d947010cf1e9b694e2939c2531411ae76d55024a740f4ed373fc6038506bd96c57eb4e05a094d78ccb9a1296b3855d8cc5617c04e8346e46abcfde63d1321c464d0b3492b95d7c29e3513dfcbe7fb778370d0a90aee39eb06f50f4f0b7ba1c8746595d37b65a697ebc21f980d5e6812d6d7bc21c73f134f5a3642d4672d2467050a9e1fcdc185f042ff57171239fca8b506161c6efff71665d140bf81c13b879ef8d717e82dc0387d65ddebdded79eaeb3d442925526adbce6e4e92862f91b12ab636de25a1ff5ef3806f0867817837a2050e7d0b6b2c3681648ac72f4e4637b3f9c61a948c5f86f42681861c878c4d250db5b790943ce13c5e0c89f4d5bac8350fafb218c5d309142fdaebc92ae6d848d3a1b12bc3faa580a7b95e5e9c13bb6c2e1fd9143c840f6f4081e699b3cc1911c6413a1f1335fa4c0655274b5e556a0497f6fbf18c8c77f9bf0f99bda1ead05ea3f9ad6109aa769136e07253a720e1b45ec71de5435e5d374011d2089a4883b0911de21ea7318d93614999bd64860462e03660852a3e15e63c6a7b232c0398df305a65774f3e4a660c4e84200e26054ceb0648e97ca5a6a38012f8380438913a33d0025a15e435909be1a31b0b2f87c0dfe70df389ae7948bbccbfd2531f7615de8548d9625b9ddbee61ed6f9a70b0af2c1d7c10db5c3aa123583297cac43e02845749f77d5ba2dba20e48aa7845f8fbf8cf2945625f46031d62314d78e6c35ffbe21860931011ee97aec0b578808b9cac43fdb49135aad73ea0866009472bb1909d0a276ed9594f2e673333bfb05a6788ab439bed0156bd79990eff674d6aefa282795d7ddc11e008780bf651b28764ceb3c9ccfd73f89fcaf83487655696b704836f5eda31959cfd4397d8c6300d02657177eb6b1ffe47348bb4d1123c525b79a184e3cb0fa9d1e422a88f44f16769927a86fa4e11dd7f79ec196c1c86a9761c9410362368ab9bb2cf1d73daccadf7cf064c6801adcff8af33ef01841d065f7c01ae4c06d909b08a9033ecf6ba2580b4fd53095e529d9d330674276c4226b6c6498c7c07f2c20ce1e2d9f4d2516237d99b3f76b8b5d907b88eec36236231363f22f47caf3e2db552afe860de2a117995da07ba60f203925da015412db02291ab294e69e1c7b70e6105cfd4a741fa2478aa329686f4cd80d1b484bac00dd5671d403bd8d8ce3eb4ca028de4ba2f827a9e559a3f3186f141baf34235dd29fb5a0580df8dc7a2f3a0582957d09a21c2c5d6dd97abe3e9a1d61ee3dc4aa4df41d343a0918b20666b049d5cd613277d41ea517592106f420969e17ddf4979154f0b6340dc8fa4c4a21360ec3fc08cfe3a083d3a7a5495809febad85d7b8bc5d7d3f14b225f39a8f41304148f053888880e795dc86d98b1bc0451a06b360f08f9a56db1975a248a9b9aaebb827824d728e11bc0e330921ae95421ed91bde2d648b9607dcf6555aee4574e95baaf765ab23101e4c157e2a2986e98112813c805440efffddb46915fdcdf2f44b10afb2dd604faf27392ac61b69da67949d9a98e5437f7bc1a2b0f229cf708e195ffc00b908ce3746859e381fd25b16fb4f05cb7d8e7e5cb7b52e50437488ef7aa8bbb668c5a79e033571c271793140de8a6017c5d25262e10405853c38cf3d52179cfaff46ca7f873c7e8c7624e59eab5c3d60916ce36dcbd20fed812211e2ed7430fc007a1dbe2c0dd9039d646d0c9473a51723b53f8bac9954862b1d9d2e455e9ee9c960e3b08c9d911299d676bbf61a0390dae4fa8819bf51e835eda467c395f85157f82dd06214c3b42528329604244409f7e8aba6cd445671cc4a48113c4df5abda5c5b9d5345f7032ae6f5a8d85d2e156c0a9f11cc991b5833d9117ab5ff77f7a6d5f4ed53e713bbb39a00f868727df1d99426983ba3411c88274bbd418870ecfb1c1d1bbb375b65cb3188fe7a4f825f31f047f12cc335dc65d4250aff5c2e30dcf724596371152053d5d22904bcd66cd9f970d1ed6d1639797fdb3710b331a212e94afd95788bfa53bc0984c10dd7aad066630abb60144dcb2beee72b90166ce30b0b39080b0496dec2dd0525235259f75b809e9ebad47bf63dbd9763650dc6d9e88c1c23587c3d27013b810b8f037d2a9da3834218bef77e9d73d3910a4180d1c4356f1b2a2f94f29ecf22470c0f0ea0635c6dacf2b9885739891ed6c5b14243ff25e62022dad611b8f8cde9f409532819700dc247df86445b283e992be5b795539f7c97a525371879f4182d15ef0691fcb00e62f52fbc745d85b81febc0ef80eb5134cc44c5f0b1ca4624d81fb6d4779124fa11119249ab401ae3a872b52d82420e9406aaee5e634f55378c3bdd8270cbf6010dcc8713ee45ca1d39b46fb3cc29a8970b173331a254e670d5aa4b17e691650ca0456ab5cac34b23e3be0d91b39f9daa90599833202642ea37315b94fb6267c2ef365b470b67b158ade0d9bb1f9ff984d30f7c45f5287e9b21c47cd3992c4b6d2128ddb976f63e8e99a78a02c4f51c2bc0c1a5351b633c1f2fcf6ad2ecb53201422a17b0b60381bc9777081088be22897a85f556ecc5461e927cdcd4f8838bd27f75a805f4aee73d2b87ddd3b30ccafdab5359785dbb171f589cbbc09b8fdbb93ce98e5a24bce0b7ae266747ffbecd132225a955e5a7f48add64f4b7d82b911e7922b6923afadc8272ceca9030d32e78400914bd30a0e9f341d78721382253da2e2202223874c90b360433835864b84ae920883aadef3e3290b6a64847f2c2e43b4c34bb58ed1127f94596473304ac2144fbab36e652c2c672661d3e81fa91ca6ec535fe07453142466561378c1fbbcb340457af1dde90b615844db3b58f70e6f1e948f6c5d1608e4f53678ebde329e1e5ad233176807a009b71515b692800d78cd40f70600a4b67af463b4ddef8ee3a0d46c1f5739409a6dfe9d1006b085cc0434f01ec94a95caa839f42b6bd849fae2afcb2cf062f30f2cc2f05087057900d156a4ad716d18ea9299a1d8d85d1fef6e36b7d80f9f4df27c4bd3407aa5b2c7905dcae008e6ec6ca508ea738b7fe12b140"})

22:44:22 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x100000000000000)

22:44:22 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x4000000}}}}, 0xc0}}, 0x0)

22:44:22 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000000000000000000006800528920a80000", @ANYRES32=0x0, @ANYBLOB="0c009900ffff00002a000000deaf5f55edb543960f44ae4400d136734d8532896ba10badea8edcadcf3429134a0d79208af4ca5e0216551895133e1095e22d36fec9febaf96e6b202de191238d5005e783caada8dae48a821373268d920f798cf2685b29899dbc249bb1ebbc7795cc91bdafb831d529aaefed"], 0x28}}, 0x0)

22:44:22 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002ce4dfe", 0x5d, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="969f9b18327adb07a9cd7cd98d695a47f1552299187d834bbff5e7bb8cb8bb7c121a5ca673180ae2"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/69, 0x45}, {&(0x7f0000001cc0)=""/105, 0x69}, {&(0x7f0000001d40)=""/18, 0x12}], 0x3, &(0x7f0000001dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r0=>0x0}}}], 0x60}, 0x9020)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/211, 0xd3}, {&(0x7f0000003180)=""/229, 0xe5}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/57, 0x39}, {&(0x7f00000042c0)=""/240, 0xf0}, {&(0x7f00000043c0)=""/24, 0x18}, {&(0x7f0000004400)=""/176, 0xb0}], 0x8, &(0x7f0000004540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004740)=""/46, 0x2e}, {&(0x7f0000004780)=""/200, 0xc8}], 0x2}}, {{&(0x7f00000048c0), 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004940)=""/86, 0x56}], 0x1, &(0x7f0000004a00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r1=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004b00)=""/179, 0xb3}, {&(0x7f0000004bc0)=""/55, 0x37}, {&(0x7f0000004c00)=""/142, 0x8e}], 0x3, &(0x7f0000004d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}], 0x5, 0x22020, &(0x7f0000004fc0))
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005e40)=[{{&(0x7f0000005000), 0x6e, &(0x7f0000005280)=[{&(0x7f0000005080)=""/178, 0xb2}, {&(0x7f0000005140)=""/197, 0xc5}, {&(0x7f0000005240)=""/28, 0x1c}], 0x3}}, {{&(0x7f00000052c0), 0x6e, &(0x7f0000005600)=[{&(0x7f0000005340)=""/92, 0x5c}, {&(0x7f00000053c0)=""/222, 0xde}, {&(0x7f00000054c0)=""/205, 0xcd}, {&(0x7f00000055c0)=""/46, 0x2e}], 0x4, &(0x7f0000005640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000005900)=[{&(0x7f00000057c0)=""/209, 0xd1}, {&(0x7f00000058c0)=""/49, 0x31}], 0x2, &(0x7f0000005940)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005a40)=""/121, 0x79}, {&(0x7f0000005ac0)=""/229, 0xe5}, {&(0x7f0000005bc0)=""/119, 0x77}, {&(0x7f0000005c40)=""/26, 0x1a}], 0x4, &(0x7f0000005cc0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}], 0x4, 0x40, &(0x7f0000005f40))
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000003, &(0x7f0000005f80)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, 'ext3\x00'}}, {@version_L}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, '#{.{'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r2}}]}})

22:44:22 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x80000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:22 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x101080000000000)

[ 2081.198185] loop6: detected capacity change from 0 to 16
[ 2081.211601] ext3: Unknown parameter '–Ÿ›2zÛ©Í|Ù�iZGñU"™}ƒK¿õ绌¸»|\¦s
[ 2081.211601] â'
[ 2081.224934] 9pnet_virtio: no channels available for device syz
[ 2081.233548] loop6: detected capacity change from 0 to 16
[ 2081.237479] ext3: Unknown parameter '–Ÿ›2zÛ©Í|Ù�iZGñU"™}ƒK¿õ绌¸»|\¦s
[ 2081.237479] â'
[ 2081.254194] 9pnet_virtio: no channels available for device syz
[ 2081.976596] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2081.978645] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2081.980207] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2081.982054] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2083.223669] Bluetooth: hci1: command 0x0406 tx timeout
[ 2083.991498] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2083.991578] Bluetooth: hci4: command 0x0406 tx timeout
[ 2083.992802] Bluetooth: hci7: command 0x0c1a tx timeout
22:44:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:33 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf0ffff, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:33 executing program 6:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@md5={0x1, "2256250f88ce575ac74c3224d8f701aa"}, 0x11, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0xc5, 0x1, 0x1f, 0x1f, 0x0, 0x0, 0x200, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x90, 0x101}, 0x800, 0x20, 0x4, 0x2, 0x1, 0x2, 0x6, 0x0, 0x9, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x4, r0, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000200000000000e7ff07000300000000", @ANYRES32=r5, @ANYBLOB="1400c70000000000000000001bae63230cbb2c11"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x5ec, r6, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5d0, 0x11d, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x771, 0x4, 0x9, 0x7, 0x7, 0x5, 0x8, 0xfff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x36, 0xb, 0x1b, 0xc, 0x36, 0x16, 0x48, 0x36]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0xb, 0x24, 0x24, 0x3, 0x1b, 0x6, 0xb, 0x2, 0x3, 0x30, 0x9, 0x60, 0xc, 0x18, 0x36, 0x9, 0x36, 0xa, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcbfd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x12, 0x2, 0x12, 0xc, 0x12, 0x6, 0x4, 0x12, 0x16, 0x3, 0xc, 0x30, 0x33, 0x18, 0x12, 0x5, 0x1b, 0xb, 0x3]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x2, 0xb, 0x2, 0x1, 0x6c, 0xc, 0x24, 0x5, 0x2, 0x16, 0xb, 0x3, 0x36, 0x18, 0x16, 0x6, 0x5, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}]}, {0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x20, 0x9, 0x23ce, 0x0, 0x32, 0x3ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x12, 0x0, 0x1, 0x12, 0x16, 0x3, 0x1, 0x12, 0x36, 0x36, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0xa}, {0x2}, {0x2, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x3ff, 0x0, 0x4, 0x8000, 0x0, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x6, 0x5, 0x20, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x2}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x9}, {0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x8}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x1b, 0x16, 0x24, 0x24, 0x5, 0x4, 0xb, 0x36, 0x5, 0x60, 0x9, 0x2, 0x6c, 0x12, 0x4, 0x9, 0xa, 0x30, 0x9, 0x12, 0x3, 0x18, 0x12, 0x36, 0x2, 0x0, 0x18, 0x12, 0x1, 0x9]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xaf, 0x3, 0x1ff, 0x1f, 0x4b, 0x8, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x9, 0x9, 0x80, 0xd95, 0x491]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x16, 0x9, 0x3, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x400, 0x2, 0xfca8, 0x8, 0x7ff, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0xa}, {0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x6, 0x2}, {0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x15}, {0x5, 0x5}, {0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x4, 0x5, 0x9, 0xff, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x9}, {0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {}, {0x5, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x9}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x1}, {0x4, 0xa}, {0x4}, {0x7, 0x7}, {}, {0x6, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x7}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x16}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x2}, {0x5}, {0x3, 0x6}, {0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x2, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x9}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x5, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x48, 0x5, 0x4, 0xb, 0x48, 0x60, 0x6, 0x1b, 0x3, 0x60, 0x36, 0xc, 0x24, 0x9, 0x12, 0x6, 0x16, 0x30, 0x4, 0x9, 0x4, 0x16, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x6c, 0x0, 0xb, 0xc, 0xc, 0xb]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x8, 0x7, 0x9, 0x4, 0xfbd2, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x36, 0x1b, 0x9, 0x18, 0x1b, 0x30, 0x18, 0x12, 0x24, 0x9, 0x60, 0x12, 0x9, 0x6c, 0x1b, 0x3, 0x18, 0x1, 0x6, 0x16, 0xc, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x5, 0x6, 0x3, 0x4, 0x2]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x4, 0x3}, {}, {0x1, 0x5}, {0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xd1, 0x5, 0x4d05, 0x8, 0x4, 0x5, 0x2c0]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x6, 0x12, 0x48]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x3}, {0x3, 0x6}, {0x1}, {0x6, 0x5}, {0x1, 0x6}, {0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x7, 0x8}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x5, 0x6}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x3}, {0x7}, {0x6, 0x1}, {0x7, 0x7}, {}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x4}, {0x0, 0x1}, {0x5}, {0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x736, 0x6, 0x5, 0x5, 0x9, 0x0, 0xae, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x19, 0x6, 0x3, 0x6, 0x0, 0x5, 0xfffc]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0x1000, 0xc4, 0x2, 0x7, 0x8000, 0xefa]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2}, {0x6}, {0x5, 0x1}, {0x6, 0x8}, {0x6}, {0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x3, 0x3}, {0x7, 0xa}, {0x5, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x5ec}}, 0x4000005)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

22:44:33 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x1000000000000000)

22:44:33 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x7010000}}}}, 0xc0}}, 0x0)

22:44:33 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0)

22:44:33 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x80084503, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r2, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_sony', 0x616100, 0x11b)
syz_genetlink_get_family_id$smc(&(0x7f0000000300), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffc}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="2ce2b779be627bea1fa173a6d021863f09f4bf21"}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}}, 0x80)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000000}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000005}, 0x24004045)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c4, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe7, 0xbe, "f7afe0c52664b0b0f97280c64d5bc3f7579c1858a6d7d734451b07eaa9f573673e62b11f079f26e8275d43a13c000197b7c86696b63240f64f0488ae2e2a144436a7018d93079363dc9350b5ad1cc622aeb15311ad14f31ed0ebbe0f9a55281539bc5defce00595769d88e37860664c35f1031f4a53f83a10978e1ecf1d30f8e83fe7a5595f2b927aba6aa146ad51f2e5014240e677c1a0994f9579520d08607545854018c41eb391fc4d8e3d63feaedb9a78875d251c1dc2a7c1f65685484c1bfffb7b49b4303d4c021c994d2799665831f2c2669a083f8b83822a26d5b25a389483a"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xab, 0xac, "e1b604dce2ed166d493d58f12cc2b07e64f6d5ceff7f833aa730c88ffa1eac0be1f7bf61f92f5891dc940cfb3823599d310bbcb0a9ff4e56a46ffe6fc10a07e2f96e0a81d30a126aa6ea3c2f410543d804d3fda4153b7500fc78f861a58bbfcdc889df8a0620de99978bc3131dcbfbf1367a0f04dd8936e2d4054b62485b950a963c6946ce08bdaf6035f44983afc185acb40e48bab6e3c38be91515cbf61b12cffdce8dc641b6"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004085)

22:44:33 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 30)

[ 2092.605569] FAULT_INJECTION: forcing a failure.
[ 2092.605569] name failslab, interval 1, probability 0, space 0, times 0
[ 2092.607027] CPU: 0 UID: 0 PID: 15910 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2092.607052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2092.607063] Call Trace:
[ 2092.607070]  <TASK>
[ 2092.607078]  dump_stack_lvl+0xfa/0x120
[ 2092.607109]  should_fail_ex+0x4d7/0x5e0
[ 2092.607139]  should_failslab+0xc2/0x120
[ 2092.607168]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2092.607190]  ? lockdep_init_map_type+0x4b/0x240
[ 2092.607215]  ? register_netdevice+0x4c4/0x1d70
[ 2092.607240]  ? lockdep_init_map_type+0x4b/0x240
[ 2092.607268]  ? register_netdevice+0x4c4/0x1d70
[ 2092.607296]  register_netdevice+0x4c4/0x1d70
[ 2092.607320]  ? mark_held_locks+0x49/0x80
[ 2092.607345]  ? __pfx_register_netdevice+0x10/0x10
[ 2092.607366]  ? mac802154_llsec_set_params+0x490/0x570
[ 2092.607396]  ? __local_bh_enable_ip+0xa1/0x110
[ 2092.607426]  ieee802154_if_add+0xc73/0x1140
[ 2092.607459]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2092.607488]  ? __pfx___mutex_lock+0x10/0x10
[ 2092.607509]  ? skb_put+0x138/0x1b0
[ 2092.607539]  ? __nlmsg_put+0x159/0x1d0
[ 2092.607573]  ? genlmsg_put+0x265/0x2e0
[ 2092.607606]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2092.607630]  ieee802154_add_iface+0x472/0x970
[ 2092.607662]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2092.607691]  ? trace_kmalloc+0x1f/0xb0
[ 2092.607723]  ? __nla_parse+0x42/0x60
[ 2092.607753]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2092.607780]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2092.607815]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2092.607843]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2092.607885]  ? security_capable+0x2f/0x90
[ 2092.607915]  genl_rcv_msg+0x532/0x7e0
[ 2092.607946]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2092.607973]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2092.608015]  netlink_rcv_skb+0x147/0x430
[ 2092.608039]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2092.608067]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2092.608107]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2092.608135]  genl_rcv+0x28/0x40
[ 2092.608157]  netlink_unicast+0x5a7/0x870
[ 2092.608186]  ? __pfx_netlink_unicast+0x10/0x10
[ 2092.608225]  netlink_sendmsg+0x8a3/0xd80
[ 2092.608255]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2092.608293]  ____sys_sendmsg+0xa67/0xc20
[ 2092.608324]  ? copy_msghdr_from_user+0xfb/0x150
[ 2092.608347]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2092.608386]  ? lock_acquire+0x15e/0x2f0
[ 2092.608413]  ___sys_sendmsg+0x10f/0x1b0
[ 2092.608436]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2092.608456]  ? perf_trace_lock+0xb5/0x5d0
[ 2092.608486]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2092.608507]  ? proc_fail_nth_write+0x97/0x220
[ 2092.608556]  ? lock_acquire+0x15e/0x2f0
[ 2092.608577]  ? __fget_files+0x34/0x3b0
[ 2092.608601]  ? find_held_lock+0x2b/0x80
[ 2092.608630]  ? __fget_files+0x203/0x3b0
[ 2092.608653]  ? lock_release+0xc8/0x290
[ 2092.608680]  ? __fget_files+0x20d/0x3b0
[ 2092.608716]  __sys_sendmsg+0x150/0x200
[ 2092.608738]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2092.608773]  ? __pfx_ksys_write+0x10/0x10
[ 2092.608811]  do_syscall_64+0xbf/0x390
[ 2092.608837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2092.608857] RIP: 0033:0x7f056dbbbb19
[ 2092.608871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2092.608890] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2092.608908] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2092.608921] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2092.608932] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2092.608944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2092.608955] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2092.608987]  </TASK>
[ 2092.688763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2092.689768] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2092.692847] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2092.695759] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:44:33 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 31)

[ 2092.729891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
22:44:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x1000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2092.764975] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:44:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x8000000}}}}, 0xc0}}, 0x0)

[ 2092.773545] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:44:34 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf400000000000000)

[ 2092.780270] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2092.781776] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2092.822682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
22:44:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 32)

22:44:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x9000000}}}}, 0xc0}}, 0x0)

22:44:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:34 executing program 6:
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x0)

22:44:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x2000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:34 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:34 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xf500000000000000)

22:44:34 executing program 2:
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x151480)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), 0x10)

22:44:34 executing program 6:
r0 = io_uring_setup(0x733a, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00007016"], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

22:44:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xa000000}}}}, 0xc0}}, 0x0)

22:44:34 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
flock(r2, 0x1)
close_range(r0, r0, 0x0)
write(r0, &(0x7f0000000000)="1263da2e7392169d690fe008aff2278fc376885fe36074403d068f08de7f7e6704eadc3d282ab01dd69e25a4026e2ff6194e8750e265e04126d953d3bff1e9c656db5d6c3f59ace530f4b24822c064a136bdacf62697f068a0c332b28a0321e79fabf9beee5a709905804a6f94e4787ac7ff79816d3ad311c84d91d608c1361f51f8c1", 0x83)
vmsplice(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)="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", 0x1ba}], 0x2, 0x0)

22:44:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 33)

22:44:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x3000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf000000}}}}, 0xc0}}, 0x0)

22:44:34 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$setstatus(r1, 0x4, 0x1800)

22:44:34 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f004feecaa72c971d3d9265a589f2906e820000000000f3213bd8f4852eb48225f484", 0x66, 0x400}], 0x0, &(0x7f0000000140))
open$dir(&(0x7f0000000040)='./file0\x00', 0x200000, 0x4)
r0 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x100000001, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="99b12a438d06e6092b96024d76f937bbb79045ded5d905f0842d22762ca5c394558e30d11dacc369609c2af8cef235ae4a3553d23beb47a8a9974cfce66cf0bd4aafbf3e174083b8456aa235e7fac2e5446193f29d2a25bc42e1c4c527e47c88a52f4c2a4f818df0fc650cbead82c8b9604a006ef3e303d763ce4f934a519ca56d774b99add40d9cda5401527721cd69f2112ba6e8917d76bce52847476cfce4b678673732573d148322dda74671de88c7b9decd727b31ba98a268402b2cadefd335b35bbc1ca6fad6b044deef66a1d3ee061e8375086b", 0xd7, 0x80000001}, {&(0x7f0000000400)="d814c53f076f82e831164900a7b3c1bb10116a358b83bed54ca668e0d45b80b4af01cf5f0915ae31950b4b6214307eb970687d23c0c9d4766c9186ca656f858146eeebb173346813876f51c6dd2b6250bc0f6962b133ac25a46fe8b3fa0a6fe2889c320cccc6cbd0e6dd9759a594bd6c38b82bca13f2e3cb52281e30be821ef1a2a97519b07c02dae7f1428892836084dce298797a56612c8f22f02ded665230f6b2f5d4047cf0383a5d9f6be93af38c69a99aa1", 0xb4, 0x6}, {&(0x7f0000000180)="629eefcf7a4757247a4902ac1a42079101a381eb6a49e104f65d305841442c4735d88f429718a46656846af1961e4a9d6913d80053697b5b9f2c78c46d347a6ea46a7d56f71d3f40c45e52a1f2ebaff8c243d2b542cc4ffcf5bc7f2e", 0x5c, 0x20}], 0x10000, &(0x7f0000000540)={[{'ext4\x00'}, {'&'}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x37, 0x33, 0x33, 0x62, 0x36, 0x35, 0x36], 0x2d, [0x61, 0x61, 0x31, 0x31], 0x2d, [0x63, 0x35, 0x32, 0x39], 0x2d, [0x35, 0x65, 0x37, 0x64], 0x2d, [0x65, 0x36, 0x36, 0x31, 0x65, 0x63, 0x31, 0x39]}}}]})
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x40)

[ 2093.380508] loop6: detected capacity change from 0 to 4
[ 2093.390326] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck.
[ 2093.391405] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 2093.402094] loop6: detected capacity change from 0 to 264192
[ 2093.409404] nfs4: Unknown parameter 'ext4'
[ 2093.414685] loop6: detected capacity change from 0 to 4
[ 2093.426221] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck.
[ 2093.427335] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 2093.446196] loop6: detected capacity change from 0 to 264192
[ 2093.455183] nfs4: Unknown parameter 'ext4'
[ 2094.742406] Bluetooth: hci1: command 0x0406 tx timeout
[ 2094.806430] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2094.806496] Bluetooth: hci4: command 0x0406 tx timeout
[ 2094.807354] Bluetooth: hci7: command 0x0c1a tx timeout
22:44:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 34)

22:44:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5939874254696ddde8ba51"])

22:44:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x4000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:45 executing program 2:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x32, 0x80, 0xd9, 0x2, 0x0, 0x5e0, 0x90830, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x100000000}, 0x204, 0x3, 0x101, 0x5, 0x80000000, 0x39, 0x6, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x13030000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c697e726970653d3078303030303030303030303030303030310c000000cb7681b0cffdb26c6f636b2c00"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x3, 0x0, 0x81, 0x0, 0x2, 0x40000, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x1c020, 0xffffffff00000001, 0x20, 0x9, 0x8, 0x8000, 0x1ff, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r0, 0x2)

22:44:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x9effffff}}}}, 0xc0}}, 0x0)

22:44:45 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
splice(r1, &(0x7f0000000040)=0xfff, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x200, 0x1)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x42002, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)

22:44:45 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close(r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:45 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2104.578397] loop6: detected capacity change from 0 to 512
[ 2104.584739] ext4: Unknown parameter 'Y9‡BTimÝèºQ'
[ 2104.591881] loop6: detected capacity change from 0 to 512
[ 2104.592787] ext4: Unknown parameter 'Y9‡BTimÝèºQ'
[ 2104.615519] FAULT_INJECTION: forcing a failure.
[ 2104.615519] name failslab, interval 1, probability 0, space 0, times 0
[ 2104.616601] CPU: 1 UID: 0 PID: 16019 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2104.616618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2104.616625] Call Trace:
[ 2104.616630]  <TASK>
[ 2104.616635]  dump_stack_lvl+0xfa/0x120
[ 2104.616658]  should_fail_ex+0x4d7/0x5e0
[ 2104.616689]  should_failslab+0xc2/0x120
[ 2104.616708]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2104.616722]  ? kstrdup+0x87/0xc0
[ 2104.616736]  ? device_add+0xc29/0x1830
[ 2104.616759]  ? device_add+0xc29/0x1830
[ 2104.616776]  device_add+0xc29/0x1830
[ 2104.616792]  ? dev_set_name+0xbe/0x100
[ 2104.616806]  ? __pfx_dev_set_name+0x10/0x10
[ 2104.616819]  ? __pfx_device_add+0x10/0x10
[ 2104.616837]  ? lockdep_init_map_type+0x4b/0x240
[ 2104.616855]  ? __init_waitqueue_head+0xca/0x150
[ 2104.616875]  netdev_register_kobject+0x1a9/0x3e0
[ 2104.616895]  register_netdevice+0x1332/0x1d70
[ 2104.616915]  ? __pfx_register_netdevice+0x10/0x10
[ 2104.616929]  ? mac802154_llsec_set_params+0x490/0x570
[ 2104.616957]  ieee802154_if_add+0xc73/0x1140
[ 2104.616979]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2104.616998]  ? __pfx___mutex_lock+0x10/0x10
[ 2104.617012]  ? skb_put+0x138/0x1b0
[ 2104.617031]  ? __nlmsg_put+0x159/0x1d0
[ 2104.617053]  ? genlmsg_put+0x265/0x2e0
[ 2104.617074]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2104.617090]  ieee802154_add_iface+0x472/0x970
[ 2104.617111]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2104.617129]  ? trace_kmalloc+0x1f/0xb0
[ 2104.617150]  ? __nla_parse+0x42/0x60
[ 2104.617173]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2104.617190]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2104.617212]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2104.617230]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2104.617257]  ? security_capable+0x2f/0x90
[ 2104.617277]  genl_rcv_msg+0x532/0x7e0
[ 2104.617297]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2104.617314]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2104.617341]  netlink_rcv_skb+0x147/0x430
[ 2104.617357]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2104.617375]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2104.617400]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2104.617418]  genl_rcv+0x28/0x40
[ 2104.617432]  netlink_unicast+0x5a7/0x870
[ 2104.617450]  ? __pfx_netlink_unicast+0x10/0x10
[ 2104.617475]  netlink_sendmsg+0x8a3/0xd80
[ 2104.617494]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2104.617518]  ____sys_sendmsg+0xa67/0xc20
[ 2104.617538]  ? copy_msghdr_from_user+0xfb/0x150
[ 2104.617553]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2104.617579]  ? lock_acquire+0x15e/0x2f0
[ 2104.617596]  ___sys_sendmsg+0x10f/0x1b0
[ 2104.617611]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2104.617624]  ? perf_trace_lock+0xb5/0x5d0
[ 2104.617643]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2104.617657]  ? proc_fail_nth_write+0x97/0x220
[ 2104.617679]  ? lock_acquire+0x15e/0x2f0
[ 2104.617693]  ? __fget_files+0x34/0x3b0
[ 2104.617708]  ? find_held_lock+0x2b/0x80
[ 2104.617727]  ? __fget_files+0x203/0x3b0
[ 2104.617741]  ? lock_release+0xc8/0x290
[ 2104.617759]  ? __fget_files+0x20d/0x3b0
[ 2104.617782]  __sys_sendmsg+0x150/0x200
[ 2104.617796]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2104.617818]  ? __pfx_ksys_write+0x10/0x10
[ 2104.617842]  do_syscall_64+0xbf/0x390
[ 2104.617859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2104.617873] RIP: 0033:0x7f056dbbbb19
[ 2104.617883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2104.617895] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2104.617908] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2104.617916] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2104.617923] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2104.617931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2104.617938] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2104.617958]  </TASK>
22:44:57 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:57 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x9000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 35)

22:44:57 executing program 6:
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200020, &(0x7f0000000040)=ANY=[@ANYRESDEC])

22:44:57 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x3, 0x1000, 0x60, &(0x7f0000000000)="d9a9bacefc98b93ee0a64494a01cd283b7be8113bf94f6251741989988aff3081d217677a0ab16dca005e06cc0a64c18a208755671a8c48ff58b1f52d87cf127e8375646132dd1fb55c6ae150e1efbf31e7a9b3d65dd53c9deba0d046358340e", 0xa8, 0x0, &(0x7f0000000080)="c2847e385111677f283ca3c88646498005c338b29603f526b2a77188d1a49e58ecd5e29772ed3e3e07eb56eb259e2822f2f79fde0c97f8e5fdf86fc23b492fa7b5c66c09b06c962aa57fb5dc2af58c8121b80dca8df84e4f99f5398499b7960c99d5494210aa7816ee9126bbec345a54b52f6772e494623865ba66830f49a4c170752686133463a3a1e9ebde6cdd362b7cde7756dc9e437a34a0474c50b88561c04a7493a053e8f3"})

22:44:57 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000006c0)=""/4096)
acct(0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
sendfile(r0, r2, 0x0, 0x4)

22:44:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf0ffffff}}}}, 0xc0}}, 0x0)

22:44:57 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x53508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:44:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x94f, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0x81, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000))
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000003e40)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r0, &(0x7f0000003d40)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000280)=""/160, 0xa0}], 0x2, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x2, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000002900)=""/153, 0x99}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000003b00)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b80)=""/22, 0x16}, {&(0x7f0000003bc0)=""/99, 0x63}], 0x2, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x4, 0x10000, &(0x7f0000003e80)={r2, r3+10000000})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc000)

22:44:57 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:57 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:44:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="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", 0x200}])
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x20}, 0x1)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x3f, 0x47, 0x0, 0x0, 0x1, 0xc0862, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x5}, 0x1a808, 0x57, 0x0, 0x3, 0x4, 0x20, 0x4, 0x0, 0x100, 0x0, 0x7fff}, r2, 0x9, r0, 0x3)
sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000003680)="3e15c87d11b0c06341aa3653cd12f972fda5f92cf0e83dee5dd1e8194d6d24ca63ccff82b007383b946f4bf3d9d808e1ee65dc8be836c2d6a0f4072c8478899671d367b2764d54c18f800758cb22a584d9991411742080be8019a1e82fdd77f41526a1355c64c66d58d347a8e98399685cd8dfb4ded40412a963c11274566787a5f8d7b0d6b48deac9edb22a5650e41095ee6f8ee06d84a9f123b802525ed2e028cf790a6bf6d09cb6ee31489fc9b06edec70184ff4c23e6a0a9ae0e283580e733c814acfb88c09d6e645f31b831920c357dcdd6", 0xd4}], 0x1, &(0x7f0000003780)=[@rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x1, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x635}}, @tclass={{0x14, 0x29, 0x43, 0x4ab}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}], 0x90}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x8, @mcast1, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000003840)="a1569dc5a284ef5356c12f2ac7a9e0d0344c6751ea64d77d5c6ac729183722d9b44b3436e6d6270b46d37e1cd150de5d26e0278d7dfd7ea1ee41cf3b95f8702326f3ea7fcf90a07ba2c76c146d4be328b34db56571fe0f150318b7bf725458cfa115211cf88f13d9474e85aeaa89651b443f7d0b0c9ef8e0df942c48dd0a5e3f8962a0b2c37a41a2b2bce719252c7b330075627aeb478ac050328324bdf3fbd55356dc12ffe325a847f11d6c0c1a", 0xae}], 0x1, &(0x7f0000003940)=[@rthdr={{0x48, 0x29, 0x39, {0x33, 0x6, 0x2, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1ee}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x1, 0x88, 0x0, [@local, @private2, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @remote}, @private0, @mcast1, @local, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xa28c}, @jumbo={0xc2, 0x4, 0x3}]}}}, @hopopts={{0x80, 0x29, 0x36, {0x62, 0xd, '\x00', [@hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x2c, "aaffa8a9dd97d6028b559754d6da9afe3ada8e60675c8554199eb88eccf6c64f95a3463e2a90bee666e402e4"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @jumbo={0xc2, 0x4, 0x1f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x8b, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffe0}, @generic={0x4}, @enc_lim={0x4, 0x1, 0x1f}]}}}], 0x208}}, {{&(0x7f0000003b80)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000003bc0)="7d5bd31dee29b0e68feb9c4894a10079b66d85e1a96fab37ff93800ff495fb14a9d055b89de0be612ae5c15d2018be4b94c4996918b4c625dc32501e12", 0x3d}, {&(0x7f0000003c00)="7bf083aa07e4a61d11af3b1ddc1aadbbc3e7d41366be8a9061cd02820a4f3d8454b715cefcca941f1d8132068a8c03ba5684243f50c817ad1682e00d58bb39d2efe6e45cd4c75189adcb2369dd3ffc2c543705c564f3c6824010d08850858eb5d73d99cdb274971c87b69e0ef362ff6247a14b243babe3391ad23a5ae6a8246866bf3f6b2bf0a154212771d2e980c8e6d92b5756e4a9e926f055226ac6b6f3ccd0022404ab29919b1510e26a8aa4834318aa6b78f3c608d5715c199165ffb6954b7dc49cf5411dc8266ff9eaa10ce220fecd8d5642ab1dabbbe242785b93842521fe5fa34eb58923cd2e4655c53ff0", 0xef}, {&(0x7f0000003d00)="33a93eacfb74ff7e4e1d89fa6abc947b11edff1df1010e3aa27cd687bc39c34cbbc6b944c5839124c4f5ea8cbc6e461cd0a650395eec583e308b48a12b364dfb6a567d89469d476f2d4a0026ba8d839002e4078a9ebc8463e0bbe2fef9f4e477b754af09a213911da944c7555131b19588c44a7a42678e6c5b7391c4802d5af4342dae10f11f4eb2ef78a97f84f60dda77cae2d413c4c28b65520fc944b48b92693f14d5cd382a24b3c76a3e57a380d76532e5441046ac446fc1235482e9922098c74ae9542159fc76c76d6e4a364d6da98063bcbdb41ce1c3f3262de9d30d4a9447f2673a92", 0xe6}], 0x3, &(0x7f0000003e40)=[@dstopts_2292={{0xc0, 0x29, 0x4, {0x1d, 0x14, '\x00', [@generic={0x6, 0xa0, "fadfab84af55c6baaddd3a1077bb1acb911ca6b6dfce2bf0308a59dca335c449582dde4c1060859661c2176cc53a949669a9f0692a546e2e6d5996ea0573dcccfe7a15fc705e80d94e252044b5d506a2b408373bea718208cc4e63bf714f521df91b99cdaf7befd582f3fc44ed75e46822bf395527b4c3cc3a855e7511141985a9ee82d40ba33490ef65c2ce49d5e470c230f8432f0fa080b87905ac39db7a32"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}, @dstopts_2292={{0x198, 0x29, 0x4, {0x21, 0x2f, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xf05d, [0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x9, 0x0, [0x20, 0x2, 0x70000000000000, 0x1, 0x53b, 0xffffffffffffffc1, 0x7000000000, 0x2]}}, @generic={0x4, 0xaf, "8b502b4581958a1072efb288e64e6ffc1536cf7f8003cffa8cc30722ecab550d15e537b1a6c9ed1b0f27723c6f4c2f9f203e8cc62e1364118835bb3a4cf3b532afe9efd1255549cd7b05ca630bf8388bcfbdb59152587ab97eb0c19f2edb03fed8b9d988c124121be35731ea2cf928e1c164e2651c3706ee0596d04fc63fb93ee0767ececbb9a0bf3abc6c7d16205331b6078d275e7abc083d80ac52c49e47a979ef98ac9155e658981b41644ae744"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x7, 0x4e, "5b599c5a2d01548ec871b4eaae63de6c4f6273ba3f0cb863eba94b72e1ff21e2fb8bca9506cce6806d26801be221e0809be9d91a7e1be301979d92a739b9737cdae6ef8f5d5e79c2dd7091a6ccf3"}]}}}], 0x270}}, {{&(0x7f00000040c0)={0xa, 0x4e24, 0x40, @local, 0x7}, 0x1c, &(0x7f00000042c0)=[{&(0x7f0000004100)='y', 0x1}, {&(0x7f0000004140)="7c9f04ec60f9e6d7bc21dfcee9c3b182dd785b0ac76d1b1bd0dff5e6f83aa36823dccca3014d56f3a99400dbd91f5b7f32ec023f4f", 0x35}, {&(0x7f0000004180)="4549eb5454165469c440f313462a491e452d5347e746e1580f178fc0242f6442f6983f413d308a3d7bbcc30c398558fd7ba4b0637f4b1c2e78110f8cda6699b0ee02aca5dc0f1a5abfaa7d22e8ce11fef36e5d3dbcd332f0caf76db1a0eb52cdbc4f0b47e6ad17b32dcd9cc4d4118c51df893ca2d546427661238ade118618f46d3c69535bfba9b8940e159a91d1399230f381cf340dfe2ee6858efc661d640f84e1d07360cf56e444b093e09f692522d196393771cd479afe775ecb398ff432ef3778e9ff6e97d4f258c375cbf007086c710649608f9f13b3db4839a354cf54acf3de07aa58166852be", 0xea}, {&(0x7f0000004280)="6b132458f0a55b8f1d722425776c322945d238a234e52c205ab5e58fa4dcb5c8367100e65a7fbad3d4", 0x29}], 0x4, &(0x7f0000004300)=[@rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x0, 0x0, 0x0, [@private2, @empty, @mcast1]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x23, 0xd, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x8, 0x1, [0x0, 0x3f, 0x8, 0x1371ec3a, 0x0, 0x0, 0xfffffffffffffff9, 0x8000, 0x9]}}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0xe8}}], 0x4, 0x4040000)

22:44:57 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000008)

22:44:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xfffff000}}}}, 0xc0}}, 0x0)

22:44:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 36)

[ 2116.379945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2116.380958] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 2116.382192] Buffer I/O error on dev sr0, logical block 0, lost async page write
[ 2116.437323] FAULT_INJECTION: forcing a failure.
[ 2116.437323] name failslab, interval 1, probability 0, space 0, times 0
[ 2116.439385] CPU: 0 UID: 0 PID: 16066 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2116.439416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2116.439430] Call Trace:
[ 2116.439437]  <TASK>
[ 2116.439447]  dump_stack_lvl+0xfa/0x120
[ 2116.439481]  should_fail_ex+0x4d7/0x5e0
[ 2116.439516]  should_failslab+0xc2/0x120
[ 2116.439549]  __kmalloc_node_track_caller_noprof+0xc1/0x760
[ 2116.439579]  ? find_held_lock+0x2b/0x80
[ 2116.439614]  ? __is_insn_slot_addr+0x136/0x290
[ 2116.439635]  ? kstrdup_const+0x57/0x80
[ 2116.439660]  ? lock_release+0xc8/0x290
[ 2116.439692]  ? kstrdup+0x3e/0xc0
[ 2116.439713]  kstrdup+0x3e/0xc0
[ 2116.439737]  kstrdup_const+0x57/0x80
[ 2116.439761]  __kernfs_new_node+0x9c/0x870
[ 2116.439804]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2116.439844]  ? lock_acquire+0x15e/0x2f0
[ 2116.439870]  ? kernfs_root+0x23/0x2a0
[ 2116.439903]  ? find_held_lock+0x2b/0x80
[ 2116.439936]  ? kernfs_root+0xee/0x2a0
[ 2116.439969]  ? lock_release+0xc8/0x290
[ 2116.439993]  ? lock_is_held_type+0x9e/0x120
[ 2116.440026]  kernfs_new_node+0x13c/0x1e0
[ 2116.440058]  kernfs_create_dir_ns+0x4d/0x1a0
[ 2116.440087]  sysfs_create_dir_ns+0x12a/0x2a0
[ 2116.440123]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2116.440155]  ? find_held_lock+0x2b/0x80
[ 2116.440191]  ? lock_release+0xc8/0x290
[ 2116.440214]  ? net_namespace+0x12/0x50
[ 2116.440239]  ? __pfx_net_namespace+0x10/0x10
[ 2116.440263]  ? device_namespace+0x78/0xb0
[ 2116.440312]  kobject_add_internal+0x24c/0x9a0
[ 2116.440352]  kobject_add+0x157/0x240
[ 2116.440384]  ? __pfx_kobject_add+0x10/0x10
[ 2116.440442]  device_add+0x32d/0x1830
[ 2116.440481]  ? __pfx_device_add+0x10/0x10
[ 2116.440518]  ? lockdep_init_map_type+0x4b/0x240
[ 2116.440547]  ? __init_waitqueue_head+0xca/0x150
[ 2116.440582]  netdev_register_kobject+0x1a9/0x3e0
[ 2116.440616]  register_netdevice+0x1332/0x1d70
[ 2116.440652]  ? __pfx_register_netdevice+0x10/0x10
[ 2116.440677]  ? mac802154_llsec_set_params+0x490/0x570
[ 2116.440727]  ieee802154_if_add+0xc73/0x1140
[ 2116.440766]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2116.440801]  ? __pfx___mutex_lock+0x10/0x10
[ 2116.440838]  ? skb_put+0x138/0x1b0
[ 2116.440874]  ? __nlmsg_put+0x159/0x1d0
[ 2116.440916]  ? genlmsg_put+0x265/0x2e0
[ 2116.440955]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2116.440984]  ieee802154_add_iface+0x472/0x970
[ 2116.441023]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2116.441057]  ? trace_kmalloc+0x1f/0xb0
[ 2116.441096]  ? __nla_parse+0x42/0x60
[ 2116.441132]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2116.441165]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2116.441207]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2116.441241]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2116.441291]  ? security_capable+0x2f/0x90
[ 2116.441327]  genl_rcv_msg+0x532/0x7e0
[ 2116.441364]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2116.441397]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2116.441448]  netlink_rcv_skb+0x147/0x430
[ 2116.441477]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2116.441511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2116.441558]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2116.441592]  genl_rcv+0x28/0x40
[ 2116.441619]  netlink_unicast+0x5a7/0x870
[ 2116.441654]  ? __pfx_netlink_unicast+0x10/0x10
[ 2116.441699]  netlink_sendmsg+0x8a3/0xd80
[ 2116.441735]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2116.441782]  ____sys_sendmsg+0xa67/0xc20
[ 2116.441819]  ? copy_msghdr_from_user+0xfb/0x150
[ 2116.441846]  ? __pfx_____sys_sendmsg+0x10/0x10
22:44:57 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000000000)=0x20)
unshare(0x8000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7d1, 0x4, &(0x7f0000000140)=0x1)
unshare(0x10010000)
semget$private(0x0, 0x4000, 0x1a0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x40)
semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000040)=""/212)
r1 = semget$private(0x0, 0x7, 0x0)
semop(r1, &(0x7f0000000040)=[{}, {0x0, 0x9ca9}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000))
semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/110)

22:44:57 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x20000000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2116.441894]  ? lock_acquire+0x15e/0x2f0
[ 2116.441927]  ___sys_sendmsg+0x10f/0x1b0
[ 2116.441955]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2116.441979]  ? perf_trace_lock+0xb5/0x5d0
[ 2116.442014]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2116.442040]  ? proc_fail_nth_write+0x97/0x220
[ 2116.442079]  ? lock_acquire+0x15e/0x2f0
[ 2116.442105]  ? __fget_files+0x34/0x3b0
[ 2116.442134]  ? find_held_lock+0x2b/0x80
[ 2116.442169]  ? __fget_files+0x203/0x3b0
[ 2116.442196]  ? lock_release+0xc8/0x290
[ 2116.442229]  ? __fget_files+0x20d/0x3b0
[ 2116.442272]  __sys_sendmsg+0x150/0x200
[ 2116.442298]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2116.442339]  ? __pfx_ksys_write+0x10/0x10
[ 2116.442386]  do_syscall_64+0xbf/0x390
[ 2116.442417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2116.442440] RIP: 0033:0x7f056dbbbb19
[ 2116.442457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2116.442479] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2116.442501] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2116.442516] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2116.442530] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2116.442544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2116.442556] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2116.442595]  </TASK>
[ 2116.514886] kobject: kobject_add_internal failed for wpan45 (error: -12 parent: net)
22:44:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xffffff7f}}}}, 0xc0}}, 0x0)

22:44:57 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="12f9089dca00292e52e46bad2e1205000000b6785e8c1cf38aef389ae18fee8ab50fd1951c27820551d4f0c5623f7878cc93f2b54831a442037517f9508eae657f9cc03aeb4223bf199e27e6dc1bb3684d033dcba8f6000000000000d6394bef0b626f6d458beb293363109c1ca490741082c3bf6c15f348f2a99e9019ce35f36dbd208bb3"], 0x1c}}, 0x0)

22:44:57 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r2, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91801800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000850)

22:44:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = getpid()
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
pidfd_open(r1, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0xa6, 0x8, 0x0, 0x6, 0x12200, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x44900, 0x4f, 0x80000001, 0x9, 0x1, 0x1, 0x5dc8, 0x0, 0x234, 0x0, 0x36f5270f}, r1, 0xe, r0, 0x9)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

22:44:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 37)

[ 2116.650831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2116.660397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
22:44:58 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x9effffff, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:44:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180))
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x4, 0x30000000, 0x80000001, 0x0, 0x0, 0xb4, 0x275, 0xffffffff00000001, 0x5}}, 0x43)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x80, 0x4, 0x8}, 0x1}}, 0x18)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xa6, 0x29, 0x1be7, {0x8, [{{0x0, 0x1, 0x8}, 0x2, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x6}, 0x3ff, 0x0, 0x7, './file0'}, {{0x1, 0x3, 0x3}, 0x52, 0xf2, 0x7, './file0'}, {{0x8, 0x1, 0x2}, 0x3, 0x20, 0x7, './file0'}, {{0x2, 0x0, 0x3}, 0x17, 0x8, 0x7, './file0'}]}}, 0xa6)
vmsplice(r1, &(0x7f00000007c0), 0x0, 0x1)

22:44:58 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0xf7a2d74521354d0b, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x97, &(0x7f0000000000)="c4952cdf", 0xffffffffffffff04)

[ 2116.785631] FAULT_INJECTION: forcing a failure.
[ 2116.785631] name failslab, interval 1, probability 0, space 0, times 0
[ 2116.787404] CPU: 0 UID: 0 PID: 16084 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2116.787432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2116.787449] Call Trace:
[ 2116.787457]  <TASK>
[ 2116.787465]  dump_stack_lvl+0xfa/0x120
[ 2116.787498]  should_fail_ex+0x4d7/0x5e0
[ 2116.787530]  should_failslab+0xc2/0x120
[ 2116.787562]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2116.787586]  ? kstrdup+0x87/0xc0
[ 2116.787607]  ? device_add+0xc29/0x1830
[ 2116.787646]  ? device_add+0xc29/0x1830
[ 2116.787675]  device_add+0xc29/0x1830
[ 2116.787703]  ? dev_set_name+0xbe/0x100
[ 2116.787725]  ? __pfx_dev_set_name+0x10/0x10
[ 2116.787748]  ? __pfx_device_add+0x10/0x10
[ 2116.787779]  ? lockdep_init_map_type+0x4b/0x240
[ 2116.787808]  ? __init_waitqueue_head+0xca/0x150
[ 2116.787840]  netdev_register_kobject+0x1a9/0x3e0
[ 2116.787873]  register_netdevice+0x1332/0x1d70
[ 2116.787907]  ? __pfx_register_netdevice+0x10/0x10
[ 2116.787930]  ? mac802154_llsec_set_params+0x490/0x570
[ 2116.787976]  ieee802154_if_add+0xc73/0x1140
[ 2116.788012]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2116.788045]  ? __pfx___mutex_lock+0x10/0x10
[ 2116.788068]  ? skb_put+0x138/0x1b0
[ 2116.788100]  ? __nlmsg_put+0x159/0x1d0
[ 2116.788137]  ? genlmsg_put+0x265/0x2e0
[ 2116.788172]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2116.788199]  ieee802154_add_iface+0x472/0x970
[ 2116.788233]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2116.788264]  ? trace_kmalloc+0x1f/0xb0
[ 2116.788306]  ? __nla_parse+0x42/0x60
[ 2116.788338]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2116.788367]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2116.788406]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2116.788436]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2116.788482]  ? security_capable+0x2f/0x90
[ 2116.788516]  genl_rcv_msg+0x532/0x7e0
[ 2116.788549]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2116.788578]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2116.788625]  netlink_rcv_skb+0x147/0x430
[ 2116.788651]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2116.788681]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2116.788725]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2116.788756]  genl_rcv+0x28/0x40
[ 2116.788779]  netlink_unicast+0x5a7/0x870
[ 2116.788811]  ? __pfx_netlink_unicast+0x10/0x10
[ 2116.788867]  netlink_sendmsg+0x8a3/0xd80
[ 2116.788900]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2116.788942]  ____sys_sendmsg+0xa67/0xc20
[ 2116.788975]  ? copy_msghdr_from_user+0xfb/0x150
[ 2116.789000]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2116.789044]  ? lock_acquire+0x15e/0x2f0
[ 2116.789074]  ___sys_sendmsg+0x10f/0x1b0
[ 2116.789099]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2116.789121]  ? perf_trace_lock+0xb5/0x5d0
[ 2116.789153]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2116.789177]  ? proc_fail_nth_write+0x97/0x220
[ 2116.789212]  ? lock_acquire+0x15e/0x2f0
[ 2116.789236]  ? __fget_files+0x34/0x3b0
[ 2116.789262]  ? find_held_lock+0x2b/0x80
[ 2116.789293]  ? __fget_files+0x203/0x3b0
[ 2116.789318]  ? lock_release+0xc8/0x290
[ 2116.789348]  ? __fget_files+0x20d/0x3b0
[ 2116.789387]  __sys_sendmsg+0x150/0x200
[ 2116.789411]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2116.789449]  ? __pfx_ksys_write+0x10/0x10
[ 2116.789490]  do_syscall_64+0xbf/0x390
[ 2116.789518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2116.789540] RIP: 0033:0x7f056dbbbb19
[ 2116.789556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2116.789575] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2116.789595] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2116.789610] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2116.789622] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2116.789634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2116.789646] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2116.789681]  </TASK>
22:44:58 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xffffff9e}}}}, 0xc0}}, 0x0)

[ 2117.153186] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2117.155881] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2117.156962] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2117.159124] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2118.358397] Bluetooth: hci1: command 0x0406 tx timeout
[ 2119.190409] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2119.191474] Bluetooth: hci4: command 0x0406 tx timeout
[ 2119.191501] Bluetooth: hci7: command 0x0c1a tx timeout
22:45:09 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:45:09 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:45:09 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 38)

22:45:09 executing program 6:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="12f9089dca00292e52e46bad2e1205000000b6785e8c1cf38aef389ae18fee8ab50fd1951c27820551d4f0c5623f7878cc93f2b54831a442037517f9508eae657f9cc03aeb4223bf199e27e6dc1bb3684d033dcba8f6000000000000d6394bef0b626f6d458beb293363109c1ca490741082c3bf6c15f348f2a99e9019ce35f36dbd208bb3"], 0x1c}}, 0x0)

22:45:09 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xd8030000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:09 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xfffffff0}}}}, 0xc0}}, 0x0)

22:45:09 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = getpid()
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
pidfd_open(r1, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0xa6, 0x8, 0x0, 0x6, 0x12200, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x44900, 0x4f, 0x80000001, 0x9, 0x1, 0x1, 0x5dc8, 0x0, 0x234, 0x0, 0x36f5270f}, r1, 0xe, r0, 0x9)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

22:45:09 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, 0x0, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000900)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="4b25193cb82bd75af6b81b34302014c9d60ef2298ed2550a0eb49940715397e68df34357e22e68621e"], 0xc8}}, 0x0)
r5 = dup(0xffffffffffffffff)
io_submit(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000000)="91389d36ddf65767cc24fc03fee7e54cf764632c9548734b7a2a033d02fabe6d63b405561ff7ed481a1918676d37c98b139132d32bfba9c8b130e78262ad669a7d4b33ce4ff0d4f3e817ea26d43af2b672bbb35c832c3d59875f8f3b4b44de0c1515bfe65248b6a8aca225e53c70a2302abea562bf9f07dc13bde22cbbf7611e268d729bc3419c6bda158b61dca438170ab1f8ca0f785e1c725e352dbdb81a178db509cea963aa86896a7d290809a5706d04f2c7651b2132d02bc99ded7fee0fcb7d4a73e42b9a79055199710d96b92a8a57e85d", 0xd4, 0x3973b8bc, 0x0, 0x0, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xf9507549d1f749e2, 0xfffa, r4, &(0x7f00000002c0)="205d458564e0d9f238e17287ec22f74a3e2b7aff3981e88c12e4c12cef7b87d24a86555f0de6a3ff3e2d91439f15490987d0660bb4914556946fd1438d4efba76ce0e61edc60b8fd69472cc272d0fe93cb6299160e4dda9df92d644aba0af61f435238026523d26a61e4c17f810cb670080c6b7f13c194f7638a1a340bddf146adccbc9bb5375f6b9583b881b3d96a919eac29735cfa10832aedb1cae1ce5b83b1db2b082c102228ed41c1e23b6a90", 0xaf, 0x0, 0x0, 0x3, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000200)="14848f419eadb3e0ab782d00bc4967beb73684ab5ae161a3db2fd96e19089db1a081e6c89b73b3db7f17d658878ca081789b57ebb6491b6acf82958e583961842b25e0226198c74baaadba515f66cb306698ff3f9de2feb87ec5793c257dee7fe78531299ab17320", 0x68, 0x0, 0x0, 0x0, r5}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = fcntl$dupfd(r1, 0x406, r5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08024b78174b6cbb7a25030000000500020001000000050002f3090000002c0001801400020077d98904315f746f5f6272696467650014000200766c616e30000000000000000d000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1ced01a52829030b9a28b3930eb94aaa9ea64ec27c028f2e2ef5440bd0ba087e0d653c6963b3794bbb78884d43f5732b933d77080e96a5ff203250a8dd734d3c9a0cc7f76baed137e65c05b71fe09e17818f821400"/94, @ANYRES16=r8, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2128.282069] FAULT_INJECTION: forcing a failure.
[ 2128.282069] name failslab, interval 1, probability 0, space 0, times 0
[ 2128.284046] CPU: 0 UID: 0 PID: 16112 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2128.284080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2128.284094] Call Trace:
[ 2128.284103]  <TASK>
[ 2128.284113]  dump_stack_lvl+0xfa/0x120
[ 2128.284151]  should_fail_ex+0x4d7/0x5e0
[ 2128.284188]  ? __kernfs_new_node+0xd3/0x870
[ 2128.284225]  should_failslab+0xc2/0x120
[ 2128.284262]  kmem_cache_alloc_noprof+0x72/0x680
[ 2128.284312]  ? __kernfs_new_node+0xd3/0x870
[ 2128.284347]  __kernfs_new_node+0xd3/0x870
[ 2128.284392]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2128.284443]  ? lock_acquire+0x15e/0x2f0
[ 2128.284487]  ? kernfs_root+0x23/0x2a0
[ 2128.284532]  ? find_held_lock+0x2b/0x80
[ 2128.284570]  ? kernfs_root+0xee/0x2a0
[ 2128.284606]  ? lock_release+0xc8/0x290
[ 2128.284632]  ? lock_is_held_type+0x9e/0x120
[ 2128.284669]  kernfs_new_node+0x13c/0x1e0
[ 2128.284704]  kernfs_create_dir_ns+0x4d/0x1a0
[ 2128.284737]  sysfs_create_dir_ns+0x12a/0x2a0
[ 2128.284776]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2128.284811]  ? find_held_lock+0x2b/0x80
[ 2128.284851]  ? lock_release+0xc8/0x290
[ 2128.284877]  ? net_namespace+0x12/0x50
[ 2128.284904]  ? __pfx_net_namespace+0x10/0x10
[ 2128.284930]  ? device_namespace+0x78/0xb0
[ 2128.284975]  kobject_add_internal+0x24c/0x9a0
[ 2128.285038]  kobject_add+0x157/0x240
[ 2128.285073]  ? __pfx_kobject_add+0x10/0x10
[ 2128.285113]  ? lock_release+0xc8/0x290
[ 2128.285142]  ? kobject_put+0xaa/0x260
[ 2128.285192]  device_add+0x32d/0x1830
[ 2128.285233]  ? __pfx_device_add+0x10/0x10
[ 2128.285270]  ? lockdep_init_map_type+0x4b/0x240
[ 2128.285304]  ? __init_waitqueue_head+0xca/0x150
[ 2128.285343]  netdev_register_kobject+0x1a9/0x3e0
[ 2128.285380]  register_netdevice+0x1332/0x1d70
[ 2128.285420]  ? __pfx_register_netdevice+0x10/0x10
[ 2128.285457]  ? mac802154_llsec_set_params+0x490/0x570
[ 2128.285543]  ieee802154_if_add+0xc73/0x1140
[ 2128.285589]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2128.285629]  ? __pfx___mutex_lock+0x10/0x10
[ 2128.285656]  ? skb_put+0x138/0x1b0
[ 2128.285695]  ? __nlmsg_put+0x159/0x1d0
[ 2128.285742]  ? genlmsg_put+0x265/0x2e0
[ 2128.285784]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2128.285816]  ieee802154_add_iface+0x472/0x970
[ 2128.285858]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2128.285896]  ? trace_kmalloc+0x1f/0xb0
[ 2128.285938]  ? __nla_parse+0x42/0x60
[ 2128.285977]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2128.286013]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2128.286059]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2128.286098]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2128.286152]  ? security_capable+0x2f/0x90
[ 2128.286192]  genl_rcv_msg+0x532/0x7e0
[ 2128.286233]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2128.286269]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2128.286325]  netlink_rcv_skb+0x147/0x430
[ 2128.286356]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2128.286394]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2128.286456]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2128.286506]  genl_rcv+0x28/0x40
[ 2128.286536]  netlink_unicast+0x5a7/0x870
[ 2128.286573]  ? __pfx_netlink_unicast+0x10/0x10
[ 2128.286624]  netlink_sendmsg+0x8a3/0xd80
[ 2128.286664]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2128.286714]  ____sys_sendmsg+0xa67/0xc20
[ 2128.286755]  ? copy_msghdr_from_user+0xfb/0x150
[ 2128.286784]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2128.286838]  ? lock_acquire+0x15e/0x2f0
[ 2128.286873]  ___sys_sendmsg+0x10f/0x1b0
[ 2128.286905]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2128.286930]  ? perf_trace_lock+0xb5/0x5d0
[ 2128.286969]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2128.286997]  ? proc_fail_nth_write+0x97/0x220
[ 2128.287040]  ? lock_acquire+0x15e/0x2f0
[ 2128.287068]  ? __fget_files+0x34/0x3b0
[ 2128.287100]  ? find_held_lock+0x2b/0x80
[ 2128.287139]  ? __fget_files+0x203/0x3b0
[ 2128.287169]  ? lock_release+0xc8/0x290
[ 2128.287208]  ? __fget_files+0x20d/0x3b0
[ 2128.287255]  __sys_sendmsg+0x150/0x200
[ 2128.287283]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2128.287331]  ? __pfx_ksys_write+0x10/0x10
[ 2128.287382]  do_syscall_64+0xbf/0x390
[ 2128.287415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2128.287446] RIP: 0033:0x7f056dbbbb19
[ 2128.287474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2128.287503] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2128.287527] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2128.287544] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2128.287558] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2128.287573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2128.287588] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2128.287630]  </TASK>
[ 2128.362995] kobject: kobject_add_internal failed for wpan45 (error: -12 parent: net)
[ 2129.066143] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2129.067668] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2129.069130] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2129.070643] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2130.262413] Bluetooth: hci1: command 0x0406 tx timeout
[ 2131.094469] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2131.094535] Bluetooth: hci4: command 0x0406 tx timeout
[ 2131.095250] Bluetooth: hci7: command 0x0c1a tx timeout
22:45:20 executing program 1:
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:45:20 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3b3c82, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x1, 0x6, 0x2})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x200, 0x0, 0x80})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0}}, 0x14}}, 0x0)

22:45:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:45:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x28}}, 0x0)

22:45:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xf0ffffff, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 39)

22:45:20 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=<r3=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x88, 0xc0, 0x1f, 0x5, 0x0, 0xff, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x5fb8cccb24c9fb69, @perf_config_ext={0x1f, 0x1000}, 0x17064, 0xfffffffffffffffc, 0x7, 0x7, 0xffff, 0x80000000, 0x6, 0x0, 0x1ff, 0x0, 0x1}, r3, 0xb, r0, 0x8)
fcntl$setstatus(r1, 0x407, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x120, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff40}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xff}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5c}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x81}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xce}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfff}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb7}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x20}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8011)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00d1897932de5181ad030000000300000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:45:20 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x8000000000000}}}}, 0xc0}}, 0x0)

22:45:21 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf0ffffffffffff}}}}, 0xc0}}, 0x0)

22:45:21 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x2400)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x26d}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "59718a55116990a8aca9a1628b824065199462d6a7a2d2ea037a32a38903a57c3069d511e5063e2b231c9497261ca35bd47fb014e4b95951c9b1311740a725ff09d461635d83daf6a20d7bdb7c2bd43fe688a8cfa266591bac599d21a1df6943f37db3387abb67bb73f3d101b92dec02a383b9a71f80bfc6b44646ce11b00f83f2035c46816cf0f1f8a0a1fbba350ddddfd1f3b8df0475ad60af9638af865a7887a1464ab494c51678a54191050d20470d2441c20d0378dbc0b8e661187b22c0807a5836372663"}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x405}]}, 0x130}, 0x1, 0x0, 0x0, 0x24044081}, 0x4040)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:45:21 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xfffff000, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:21 executing program 6:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]})

22:45:21 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x7}}, './file0\x00'})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000800000018000001", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000900)={0x0, 0x3, 0xa8c, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2140.015184] No source specified
[ 2140.016841] No source specified
[ 2140.565061] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2140.566676] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2140.568048] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2140.569190] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2141.782467] Bluetooth: hci1: command 0x0406 tx timeout
[ 2142.614810] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2142.616053] Bluetooth: hci4: command 0x0406 tx timeout
[ 2142.617093] Bluetooth: hci7: command 0x0c1a tx timeout
22:45:33 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x100000000000000}}}}, 0xc0}}, 0x0)

22:45:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

22:45:33 executing program 6:
syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000000000008fffffffc336179f00005c000806"])

22:45:33 executing program 1:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b3530000000000000000190000000300018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4890)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4085d)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:45:33 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xffffff7f, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:33 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x1f10e000)
fcntl$setstatus(r0, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r4, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:45:34 executing program 2:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000003f40)={@mcast1, @loopback, @private0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x840100a2})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@empty, r2}, 0x14)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', <r10=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev, r10}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000000)={@empty, r7}, 0x14)
sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000040)="d10ab1719fdfb0fa720798be56379c8c53a2e9bbd53bf635171b5740ae4a5ca57cd718f8f43b40fdd6d95b", 0x2b}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="b6cade8c394cd617c99349f08aa2ea287f6aeb96ca19fb114a65b45d678e9eecde3a9c2f386b8cbcacabf01f07f9a59e139828d0763ad00a52437bc653169599d07cda20d083eb0f377a6b41e565611eba82a8bdf564ea24e91599eb37da4de44ea18338166dd64213f1c5463edfc5d5b18b97d60a457c1a25ec787c3d95ee862ba5478d2c6bc7139911fda9417b920f8973799ebe10c303b700291566c47052845e2ddc1a0a", 0xa6}], 0x3, &(0x7f0000001180)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x0, 0x3f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @tclass={{0x14, 0x29, 0x43, 0x20}}, @tclass={{0x14, 0x29, 0x43, 0x5f}}, @dstopts={{0xd8, 0x29, 0x37, {0x2c, 0x17, '\x00', [@generic={0x5, 0xb0, "6ab09770aac93b4ffbb7251f35a931db2cb3c6eff0fa8c6276d49328a82a07ff6fffa76d3be50c0c1b635f21d014d1b425267de4d2736c62ad21585d049258ba3eec38f31d1c9826da1b117e54396a6f6ccb7958afd695e9c9ea4d1b521d48d17a44166000c95cfeb803224d05edc55cc86bacf1a095e11ca2183a01ffa9e4b1b64407ab8759effc0af60b339cdf137fb3e249a6d1121f27f1c788240802735c1f15f532d6c9b90bc3805647c70e73cf"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x1030, 0x29, 0x37, {0x89, 0x202, '\x00', [@pad1, @generic={0x5, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1188}}, {{&(0x7f0000002340)={0xa, 0x4e24, 0x7, @loopback, 0x80}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000002380)="0303edaab0435a2796369fabc38daa08e8aa7f1c69c423952462bfa2aca5df9e18d4b899b14df7440af3431a9a1ab60c86bc7c3b3e7e8f81c5faabad1ad163d7c7d110a4ba380cf4efd9cd483b3468a8674a40a078aeb723256bd19b7649ff71efbb4c30d279984370c12c97b2a4cd04d18c7fcfe26cfe065a8e9d4f19135adac44a5107e736f0adc240b2582a9658b0a1c2cb25227e38262f5c3c6547a069d980c3449dbc9283d9d74be7305ad792f06349aa11802863a6858977a5673b0d", 0xbf}, {&(0x7f0000002440)="1baf3a52d35ece0b", 0x8}, {&(0x7f0000002480)="faf66fec7d8a47c655d4119ae17a706f16fc1b800c70f43e2dda844ed2f98b52561afba453f8d99b11668de448e4b7df5c90fbd0e0a7af84ed2fbbdd381074fd1f1699c22b3e3b8a89626266d62b7aba8f0b0c146ffb994ee43fc0b25e3d26f47a1f9324ad0f087c1e5a8e5af2b7b0ce3c618986a46cfd2aa6cbccff5fbd18b5d88e1b39fd5df0fb93bfa6fa519ce2d0c7518886b004f8d7b31a2ce0939deb622d76681658a52bab9b8eb2dacf66b4055bada8686cce2860dbaea46cd1169faf0f9039d7", 0xc4}], 0x3, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x248}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000002800)=[{&(0x7f00000027c0)}], 0x1, &(0x7f0000002d00)=[@dstopts={{0x90, 0x29, 0x37, {0x89, 0xf, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0x4, [0x7, 0x2, 0x4, 0x7228, 0xf6, 0x7]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x7, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x89, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x7f, 0x3, [0x3, 0x80000001, 0x2, 0x6, 0x5, 0x100000001]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbaca}}], 0x1d0}}], 0x3, 0x0)

22:45:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 40)

[ 2152.872593] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2152.873973] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:45:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xffffff9e, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2152.879068] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2152.885738] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:45:34 executing program 6:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e20000000000000005000000000000007f0000000000000000000000000000000000802d00000000010000000400000008000000030000000000f0ff00000000c8f1ffffffffffff0400000000000000874c0000000000000800000000000000b41d6c4bcda78a"])
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f70301002bbd7000fddbdf25070000538bf48c8847d22f66696c65320000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000040)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r2, 0x0, 0xa0103)
r3 = creat(&(0x7f0000000200)='./file1\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xfdef)

22:45:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x200000000000000}}}}, 0xc0}}, 0x0)

22:45:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 41)

22:45:34 executing program 2:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x27}]}, 0xc8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000000080)="8c793346d4961c472aac5244a6c9b18f5bb615eb60f2aced6c631450e385b50bd68862ab169a80591ef1244aeae6400b18ca611877811197ecd983576cfd9fc215e106c786395d5022dcf03a3a993eee47a0f0a0ae9b345110f699a5da63d79c1650a0c7730e21240c7e910abe290f79a00526a2f7ab42b982dbb91220dc10dd838537f8b339669d2590d8fa172defc1403e5173c0759cede1d6040752f58f27c28eddbc0c13fded60bbfade1eb04575b7f556b57325a932673585abe77f2ec6afb7b034d8fb9491ac37198ba6132398f5e6d8bb0ff8673115cfdbc6", 0xdc, 0x6, 0x0, 0x2, r3}])
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000280)='mqueue\x00', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0)

22:45:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

22:45:34 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0)
write$eventfd(r2, &(0x7f0000000040)=0x5, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
splice(r3, &(0x7f0000000180)=0x8, r2, &(0x7f0000000200)=0x7, 0x800, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x3, 0xfc, 0x0, 0x6, 0x0, 0x4, 0x8010, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x80, 0x6, 0x7, 0x9, 0x0, 0x5, 0x0, 0x6, 0x0, 0x80000000005})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2153.062437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
22:45:34 executing program 1:
pipe(&(0x7f0000000880))

[ 2153.083639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
22:45:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xfffffff0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x300000000000000}}}}, 0xc0}}, 0x0)

[ 2153.166687] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2153.167759] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2153.181927] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:45:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}}, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9081}, 0x84)

[ 2153.193725] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:45:34 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000))
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:45:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

[ 2153.402692] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2153.403902] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2153.405051] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2153.406158] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2155.350429] Bluetooth: hci1: command 0x0406 tx timeout
[ 2155.414439] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2155.415432] Bluetooth: hci4: command 0x0406 tx timeout
[ 2155.415560] Bluetooth: hci7: command 0x0c1a tx timeout
22:45:44 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\''}, {0x20, '[[#---!,%-:\''}, {}, {0x20, '}\xbe.'}, {0x20, '/dev/loop#\x00'}, {0x20, '+.*'}, {0x20, '('}, {0x20, '/dev/loop#\x00'}, {0x20, '/dev/sr0\x00'}, {0x20, '$%@%[#'}], 0xa, "f7800d6df919c3332588553cdb1b9e1e0ece36285c17b29d4910f263ff47ad91d6cb24dee2f063d4dce3ec0f1775a09fb50df814ffe48ed2be4ce8008c1461bad7fa79dda897404cb6b074b8fa3ac0fa86d4e86b731c802c473322e98d746f663ab0311fcdea8095ffcdce33f0916f4be2d3d0e3961a16b4ed9eaeaa60ffbf4dd467b795f2c9d2a61d079b16acb41f07134319b43da55752c7395fa3c3e653ce70ad6c90879c881d6032f6cf70da255e041dc6e597b4f9bc238549847a42073e8f6b6a40d1e7ecba05"}, 0x117)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x573440)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

22:45:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 42)

22:45:44 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x70bd2a, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

22:45:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0xffffffff, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:44 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5339c654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1607150a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b5fdba9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5bf9f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefc0e0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e7b4aa6}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26c44f64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dd544b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6757f483}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x674b9e06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50baa752}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdd68281}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f3eeba6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x728410cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b12fc96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43c4a9a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3915c370}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4048000)
poll(&(0x7f0000000000)=[{r0, 0x220}, {0xffffffffffffffff, 0x311}, {0xffffffffffffffff, 0x15000}, {r1, 0x4}, {}, {r2, 0x22}], 0x6, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@expire={0x158, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e24, 0x4, 0x2, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x3c}, @in6=@empty, {0x9, 0x39, 0x51f, 0x8, 0x5, 0x8, 0x4, 0x7f}, {0x400, 0x0, 0x5, 0xffffffffffffff80}, {0x0, 0x80, 0x2}, 0x70bd26, 0x3504, 0xa, 0x3, 0x4}, 0x4f}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1ff}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e23, @in=@local}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd2c, 0x70bd2b, 0x70bd2c, 0x6, [0x7]}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e23, @in6=@private2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004010}, 0x20040040)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x9}, 0x8)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:45:44 executing program 2:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x541b, 0x0)

22:45:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x400000000000000}}}}, 0xc0}}, 0x0)

22:45:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (fail_nth: 1)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:45:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 43)

22:45:44 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
dup3(r1, r2, 0x0)
fadvise64(r2, 0x6, 0x49a, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

[ 2163.540866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2163.547105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
22:45:44 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000009c0)="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")
r7 = signalfd4(r4, &(0x7f0000000580)={[0x101]}, 0x8, 0x800)
io_submit(0x0, 0x4, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0xfff8, r4, &(0x7f0000000300)="ae8d4c1a5a8073d652769ab18980d0b2cce0b38f4a95d4d57022de01c6ed75561372704fcc97ab246bf1c8a1be3b565dd2b4081c305694377fb45d18368fe19e1acffd272b6274428148c340b11ae8420ab81c024fcd017a26e89d7aca3a3f7660e9238c6ab66d20dbd0144114257ff0252d7a8e3dd32517d1339b18134b0d3bd674ce40682d03792281dbf6f118cbe859d3c3d4db11bc100bf88e55e3f1c4413c62cf5dfadd13619a44525ecabb71dd6cd4845df0f90b791bf80cb0d7fb8e4b9b173303405bde91556ddc48e7676dd41a5a2e95ad0fe602", 0xd8, 0x12f4, 0x0, 0x40b4d158dd17e1ab, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000000440)="235dbe5e493d69d670f82e6bb16c797cabf7f219e19f6d2ab6985f5d393a628da034b8fed557b670ff640ec0c4e6cd2563f7419871a2ade82ab5b96c00568dcf830995afc7d27c671b425690ef54dc36f910ec5008843c51fc4eb0161502e91a6c379693e26f266fb5a3d97a3e95ec6cd9d931bf43eaab0c568387914ddb29178aa4e64df44a18d24f9863c1196a553d52ac779ec166b51135e3cbe1caac4458c8f8e133eafb40a1d1fdff6dfb02dadf8fe302e3b2a3c0f35ecee11350402f008898287022a1691efabf60be1c0e899f43a173fb47f6ccef840529ff1309add0576fa44bc916fdb32521bc041e68f754fb", 0xf1, 0x8, 0x0, 0x2, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f00000006c0)="b5275d29f66ad7f8f1794de4d5ea28a4e736c2ac50e00d55b6f0e586614765cedbcd0ab0f661354aea80e6c7a52be58327c52a3b58c135f38c070c2c3361b7963c7f36797a4761d4b82793", 0x4b, 0x3, 0x0, 0x2, r7}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000900)="5d0972da7847f644d30b00cf7a529f99585b4bdc83cead40c065b8ad5c758a62cb990431c807b027f5dbfa492e028d3c024faa618cc767d98da5275a3e8f65483d921e7b67e1d178af2c50826be22405cae5373be882254e7f56af2276f4cd557a1429fcdf6d8e81042d13189d1aa751a64a46de8e02831086c409f713293bfe30d05cc10f7250cc94a5da891e903c2f7ffcc9d3d6b455bd2851f92ebf", 0x9d, 0x7, 0x0, 0x37de1d29351416d6}])
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f00000002c0)={0xfffffed9, [0x0, 0x0]})
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000044ee58937500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000008001f0000000000c1c7e04719d8fbc5f473ad68b639a5df9d7b155645a90492e4510eba06a1dd2ff17abfe39164577692b2cafcb113bf8864f5eb8d34452ed7f9bf1db015591f45a2d8f101ef266ddc278dc055a013c3cd24afef0b8942be8117888a77d312a1e6cf59fa712fd1bbbe22cff5f843774ef1fc5ebc65a70821071a0e675cc316c264d07889ca5df7f5992d66b2b2900bb3fc8d34b99264d8a0bdb976fb5add0278df0fdff236ce8332756ae5e7b71d8d6586a2f84735e3b869e4fd23f76bc6bfbffb7aa6b423558f7cadc8c4e0358528", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
splice(r2, &(0x7f0000000000)=0x3f, r3, &(0x7f0000000040)=0x80000000, 0x0, 0xe)

[ 2163.567795] FAULT_INJECTION: forcing a failure.
[ 2163.567795] name failslab, interval 1, probability 0, space 0, times 0
[ 2163.568803] CPU: 1 UID: 0 PID: 16283 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2163.568849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2163.568868] Call Trace:
[ 2163.568877]  <TASK>
[ 2163.568890]  dump_stack_lvl+0xfa/0x120
[ 2163.568920]  should_fail_ex+0x4d7/0x5e0
[ 2163.568939]  ? getname_flags.part.0+0x48/0x540
[ 2163.568952]  should_failslab+0xc2/0x120
[ 2163.568971]  kmem_cache_alloc_noprof+0x72/0x680
[ 2163.568984]  ? lock_is_held_type+0x9e/0x120
[ 2163.569003]  ? getname_flags.part.0+0x48/0x540
[ 2163.569014]  getname_flags.part.0+0x48/0x540
[ 2163.569029]  getname_flags+0x95/0xe0
[ 2163.569045]  do_sys_openat2+0x9f/0x1b0
[ 2163.569057]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2163.569071]  ? __fget_files+0x20d/0x3b0
[ 2163.569092]  __x64_sys_openat+0x142/0x200
[ 2163.569105]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2163.569116]  ? ksys_write+0x1a3/0x240
[ 2163.569140]  do_syscall_64+0xbf/0x390
[ 2163.569156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2163.569169] RIP: 0033:0x7fcd18a6ab19
[ 2163.569179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2163.569190] RSP: 002b:00007fcd15fe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2163.569202] RAX: ffffffffffffffda RBX: 00007fcd18b7df60 RCX: 00007fcd18a6ab19
[ 2163.569210] RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffffffffffffff9c
[ 2163.569218] RBP: 00007fcd15fe01d0 R08: 0000000000000000 R09: 0000000000000000
[ 2163.569225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2163.569233] R13: 00007fff35d5565f R14: 00007fcd15fe0300 R15: 0000000000022000
[ 2163.569255]  </TASK>
[ 2163.622396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2163.628684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
22:45:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xf, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:44 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:45:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (fail_nth: 2)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2163.793670] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2163.794426] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2163.795062] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2163.797931] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2165.782539] Bluetooth: hci1: command 0x0406 tx timeout
[ 2165.846408] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2165.846446] Bluetooth: hci4: command 0x0406 tx timeout
[ 2165.847598] Bluetooth: hci7: command 0x0c1a tx timeout
22:45:55 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0)

22:45:55 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup2(r0, r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r6 = dup2(r4, r5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r6, 0x0)

22:45:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:45:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000001a00), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='bsddf,sb=0x000000000000ffff,journal_checksum,inode_readahead_blks=0x0000000000000040,commx00000000000000ff,\x00'])
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000580), 0x1000)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0xffff, 0x4, &(0x7f0000000380)=[{&(0x7f0000000480)="04d8300041b975225c778e070836a67c286747aa013365edfe05a03e6145b9853d64a348027abf0be80f652a44fcf6509d5a5502d07009d39fbef3de38b2400b2042594645407edbbe3976ee06d2d4f834893f66888aba6f66cc24aa3bff5566e05bd375eefcfd1032511199e8886c890c4c21eb23dc813f35046d2c54b992629bc90852cdd73a5c08c522c72bb39d6613627e7c8b0098993f5052603fb5", 0x9e, 0x100000001}, {&(0x7f0000000140)="ccbb6ad42845d6aa579baabad79d23b0151e501f23d45b5f6f5c3d1a4658b2e3da6eafa239f5b77e3aa6942bc6e6c7c610e4ea7e8bf4d3e042150c7d44d7d23a052350301dc3d388f045076f7f9bfe4f92280fa34ed48e888524e0c0715cb7c4931946444b8ecb553c787575ac86a1d1d2394e06f02dfc2dfa17e816a1ea47f1cd579eb58d70735460efd8073235f66aa6ed6b7909f37e5cc2b3cd9f2f969cb5a8e9da99208cbaf738d2fd8ca6296b7b627d38c7c5f34690b48f64d60a0876b4a2c31ccb0c96acc0dda4d1e5", 0xfffffdc9, 0x8000}, {&(0x7f0000000240)="aacc1e61a6ee47b8629854d415ee20a99726d45ba4aa63fd0d3ceedf04b4816be79779f1a2d4eb5c5c4b800800cd503ffbe19826027dbcda9a5668a5f5fcaaae80dfa1d833033439b5c65a3c41cb6ae91a5568cc6875004e6be1081fb6894dc048c3eea797be46c910f6b9290f2c971062bff8be2506705220babf4a1d99f0d0d2d1cc9cf02995413de8e64f1e3d705e26ce08662dbb210c280d2b7d8e54063ed163b3c1b095f5a1f3b9c4bb60adbe6c2bde2d4cc80169aca0b81625bee90e0070434438f709eebc1fd4a41506ed2bc7dd5b36f2b57d9f464c9e37cb549df9a034cfd3ab767755df6d62cb1f26638b95", 0xf0, 0xffffffffffff0001}, {&(0x7f0000000340)="6d84129d422a11b373a57459caa22e9962e6e635c1bf8016365e328edb01be498b9cf77457c1329abb6a39082134d8d43086fe023821c8e5a7e5", 0x2, 0x8}], 0x2000010, &(0x7f0000000400)=ANY=[@ANYBLOB='m\x00\x00\x00\x00,measuwe,\x00'])

22:45:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 44)

22:45:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x701000000000000}}}}, 0xc0}}, 0x0)

22:45:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0x180, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:45:55 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2174.786178] FAULT_INJECTION: forcing a failure.
[ 2174.786178] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.787188] CPU: 0 UID: 0 PID: 16326 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2174.787205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.787212] Call Trace:
[ 2174.787217]  <TASK>
[ 2174.787222]  dump_stack_lvl+0xfa/0x120
[ 2174.787244]  should_fail_ex+0x4d7/0x5e0
[ 2174.787263]  ? __kernfs_new_node+0xd3/0x870
[ 2174.787286]  should_failslab+0xc2/0x120
[ 2174.787306]  kmem_cache_alloc_noprof+0x72/0x680
[ 2174.787322]  ? perf_trace_lock_acquire+0xc9/0x700
[ 2174.787343]  ? __kernfs_new_node+0xd3/0x870
[ 2174.787361]  __kernfs_new_node+0xd3/0x870
[ 2174.787384]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2174.787409]  ? lock_acquire+0x15e/0x2f0
[ 2174.787425]  ? kernfs_root+0x23/0x2a0
[ 2174.787443]  ? find_held_lock+0x2b/0x80
[ 2174.787462]  ? kernfs_root+0xee/0x2a0
[ 2174.787480]  ? lock_release+0xc8/0x290
[ 2174.787493]  ? lock_is_held_type+0x9e/0x120
[ 2174.787512]  kernfs_new_node+0x13c/0x1e0
[ 2174.787529]  kernfs_create_link+0xcf/0x240
[ 2174.787549]  sysfs_do_create_link_sd+0x90/0x140
[ 2174.787570]  sysfs_create_link+0x63/0xc0
[ 2174.787589]  device_add+0x581/0x1830
[ 2174.787612]  ? __pfx_device_add+0x10/0x10
[ 2174.787631]  ? lockdep_init_map_type+0x4b/0x240
[ 2174.787647]  ? __init_waitqueue_head+0xca/0x150
[ 2174.787666]  netdev_register_kobject+0x1a9/0x3e0
[ 2174.787686]  register_netdevice+0x1332/0x1d70
[ 2174.787707]  ? __pfx_register_netdevice+0x10/0x10
[ 2174.787721]  ? mac802154_llsec_set_params+0x490/0x570
[ 2174.787750]  ieee802154_if_add+0xc73/0x1140
[ 2174.787771]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2174.787790]  ? __pfx___mutex_lock+0x10/0x10
[ 2174.787804]  ? skb_put+0x138/0x1b0
[ 2174.787823]  ? __nlmsg_put+0x159/0x1d0
[ 2174.787846]  ? genlmsg_put+0x265/0x2e0
[ 2174.787867]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2174.787882]  ieee802154_add_iface+0x472/0x970
[ 2174.787903]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2174.787921]  ? trace_kmalloc+0x1f/0xb0
[ 2174.787942]  ? __nla_parse+0x42/0x60
[ 2174.787962]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2174.787979]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2174.788002]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2174.788021]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2174.788047]  ? security_capable+0x2f/0x90
[ 2174.788068]  genl_rcv_msg+0x532/0x7e0
[ 2174.788087]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2174.788105]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2174.788132]  netlink_rcv_skb+0x147/0x430
[ 2174.788148]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2174.788166]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2174.788191]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2174.788209]  genl_rcv+0x28/0x40
[ 2174.788224]  netlink_unicast+0x5a7/0x870
[ 2174.788243]  ? __pfx_netlink_unicast+0x10/0x10
[ 2174.788267]  netlink_sendmsg+0x8a3/0xd80
[ 2174.788287]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2174.788312]  ____sys_sendmsg+0xa67/0xc20
[ 2174.788332]  ? copy_msghdr_from_user+0xfb/0x150
[ 2174.788347]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2174.788373]  ? lock_acquire+0x15e/0x2f0
[ 2174.788390]  ___sys_sendmsg+0x10f/0x1b0
[ 2174.788405]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2174.788418]  ? perf_trace_lock+0xb5/0x5d0
[ 2174.788437]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2174.788450]  ? proc_fail_nth_write+0x97/0x220
[ 2174.788472]  ? lock_acquire+0x15e/0x2f0
[ 2174.788486]  ? __fget_files+0x34/0x3b0
[ 2174.788501]  ? find_held_lock+0x2b/0x80
[ 2174.788520]  ? __fget_files+0x203/0x3b0
[ 2174.788534]  ? lock_release+0xc8/0x290
[ 2174.788552]  ? __fget_files+0x20d/0x3b0
[ 2174.788575]  __sys_sendmsg+0x150/0x200
[ 2174.788589]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2174.788611]  ? __pfx_ksys_write+0x10/0x10
[ 2174.788636]  do_syscall_64+0xbf/0x390
[ 2174.788654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2174.788667] RIP: 0033:0x7f056dbbbb19
[ 2174.788677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.788689] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2174.788701] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2174.788709] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2174.788716] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.788723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.788730] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2174.788751]  </TASK>
[ 2174.805059] ext4: Unknown parameter 'commx00000000000000ff'
[ 2174.881176] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:45:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 45)

[ 2174.890206] FAULT_INJECTION: forcing a failure.
[ 2174.890206] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.891256] CPU: 0 UID: 0 PID: 16345 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2174.891276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.891283] Call Trace:
[ 2174.891288]  <TASK>
[ 2174.891293]  dump_stack_lvl+0xfa/0x120
[ 2174.891314]  should_fail_ex+0x4d7/0x5e0
[ 2174.891335]  ? __kernfs_new_node+0xd3/0x870
[ 2174.891354]  should_failslab+0xc2/0x120
[ 2174.891373]  kmem_cache_alloc_noprof+0x72/0x680
[ 2174.891389]  ? perf_trace_lock_acquire+0xc9/0x700
[ 2174.891410]  ? __kernfs_new_node+0xd3/0x870
[ 2174.891428]  __kernfs_new_node+0xd3/0x870
[ 2174.891449]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2174.891472]  ? lock_acquire+0x15e/0x2f0
[ 2174.891486]  ? kernfs_root+0x23/0x2a0
[ 2174.891504]  ? find_held_lock+0x2b/0x80
[ 2174.891523]  ? kernfs_root+0xee/0x2a0
[ 2174.891540]  ? lock_release+0xc8/0x290
[ 2174.891553]  ? lock_is_held_type+0x9e/0x120
[ 2174.891571]  kernfs_new_node+0x13c/0x1e0
[ 2174.891589]  kernfs_create_link+0xcf/0x240
[ 2174.891608]  sysfs_do_create_link_sd+0x90/0x140
[ 2174.891629]  sysfs_create_link+0x63/0xc0
[ 2174.891648]  device_add+0x581/0x1830
[ 2174.891670]  ? __pfx_device_add+0x10/0x10
[ 2174.891688]  ? lockdep_init_map_type+0x4b/0x240
[ 2174.891704]  ? __init_waitqueue_head+0xca/0x150
[ 2174.891723]  netdev_register_kobject+0x1a9/0x3e0
[ 2174.891742]  register_netdevice+0x1332/0x1d70
[ 2174.891762]  ? __pfx_register_netdevice+0x10/0x10
[ 2174.891776]  ? mac802154_llsec_set_params+0x490/0x570
[ 2174.891803]  ieee802154_if_add+0xc73/0x1140
[ 2174.891824]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2174.891842]  ? __pfx___mutex_lock+0x10/0x10
[ 2174.891856]  ? skb_put+0x138/0x1b0
[ 2174.891875]  ? __nlmsg_put+0x159/0x1d0
[ 2174.891897]  ? genlmsg_put+0x265/0x2e0
[ 2174.891917]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2174.891933]  ieee802154_add_iface+0x472/0x970
[ 2174.891954]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2174.891972]  ? trace_kmalloc+0x1f/0xb0
[ 2174.891992]  ? __nla_parse+0x42/0x60
[ 2174.892011]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2174.892028]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2174.892050]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2174.892068]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2174.892094]  ? security_capable+0x2f/0x90
[ 2174.892114]  genl_rcv_msg+0x532/0x7e0
[ 2174.892133]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2174.892150]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2174.892176]  netlink_rcv_skb+0x147/0x430
[ 2174.892192]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2174.892209]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2174.892234]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2174.892252]  genl_rcv+0x28/0x40
[ 2174.892266]  netlink_unicast+0x5a7/0x870
[ 2174.892284]  ? __pfx_netlink_unicast+0x10/0x10
[ 2174.892308]  netlink_sendmsg+0x8a3/0xd80
[ 2174.892327]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2174.892351]  ____sys_sendmsg+0xa67/0xc20
[ 2174.892371]  ? copy_msghdr_from_user+0xfb/0x150
[ 2174.892385]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2174.892410]  ? lock_acquire+0x15e/0x2f0
[ 2174.892427]  ___sys_sendmsg+0x10f/0x1b0
[ 2174.892442]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2174.892455]  ? perf_trace_lock+0xb5/0x5d0
[ 2174.892473]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2174.892486]  ? proc_fail_nth_write+0x97/0x220
[ 2174.892507]  ? lock_acquire+0x15e/0x2f0
[ 2174.892520]  ? __fget_files+0x34/0x3b0
[ 2174.892535]  ? find_held_lock+0x2b/0x80
[ 2174.892553]  ? __fget_files+0x203/0x3b0
[ 2174.892567]  ? lock_release+0xc8/0x290
[ 2174.892585]  ? __fget_files+0x20d/0x3b0
[ 2174.892607]  __sys_sendmsg+0x150/0x200
[ 2174.892621]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2174.892643]  ? __pfx_ksys_write+0x10/0x10
[ 2174.892667]  do_syscall_64+0xbf/0x390
[ 2174.892684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2174.892684] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2174.892697] RIP: 0033:0x7f056dbbbb19
[ 2174.892706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.892718] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2174.892730] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2174.892738] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2174.892746] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.892753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.892760] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2174.892781]  </TASK>
[ 2175.013184] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2175.018735] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2175.248250] loop6: detected capacity change from 0 to 264192
[ 2175.252431] iso9660: Unknown parameter 'm'
[ 2175.257850] ext4: Unknown parameter 'commx00000000000000ff'
[ 2175.349187] loop6: detected capacity change from 0 to 264192
[ 2175.351170] iso9660: Unknown parameter 'm'
[ 2176.854628] Bluetooth: hci1: command 0x0406 tx timeout
[ 2176.920490] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2177.046444] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2177.046480] Bluetooth: hci4: command 0x0406 tx timeout
22:46:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 46)

22:46:07 executing program 1:
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x10001, 0x5})
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:46:07 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r3, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xf8, r4, 0x4, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004011}, 0x4)

22:46:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:07 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x800000000000000}}}}, 0xc0}}, 0x0)

22:46:07 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0x33fe0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:07 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002f00)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="b0fafa3b77b8a76f6c840c0064872b6a6116bb404894037a69c802fe85531e5b333c8d94e59a05a97c72fda90818ccb047b697b9d560bc5f4a2bf6a720addf0987b7674a1e82d40d4f1f55ed4a43f5dfc6e8abc7a766616361c26be06ef255a491f807fb023c57b32515d7f3e21d40c51724bb62732cccba2ac77ccebc8a52eefdbebb8bb3a4427511c8c35a7795f1e60a91b1320ae50ac204cc60d536229c91c320cbd1785a1b95afdd0e0010b1411609744093a1253f19761da9f4e8d685ce70debe3812726a9a0e4bcac6976237f3992255e044d08bbf99b3f54e7d56824385f26a9c38209a634b5dcb82069bc01f8e26877c", 0xf4}, {&(0x7f0000000100)="de413d1fd995c3ff494b01db6058a854a0", 0x11}, {&(0x7f0000000140)="9e2d4e0e13967e7e06068e057483c714f8f0eecd90e943230a017b450f7d11", 0x1f}, {&(0x7f0000000180)="8a383316e6ff2addf46d09ef0ab9161b37e3c8dcd3cce71b301f4a1ae02686204af22ced69bb3cc36c0c16cf0393499e681832c54f92bcccb82b541b9216deff33e8d10055d3b38a56128ae562f320878427a010db590fb3e3d75b07a0bc4ff6df03762e85034be4d5f7e9014ff48049ec524939524ea8d344", 0x79}, {&(0x7f00000002c0)="bde06f0ca65a0f9bd2f9b42fbec56faf3cc06d8a6a4549988bb929e9e93e498a3736e078750626616a60c8cccc613e4e92956ab9c0fff8a0ae20e8c05df96f9310911fa912d54384eddc76f80e72fd1d641a6c9ed64aaa39ba1f1fb4d6bd82a993d0235dfe2fdea10ec7a5fc14d3046cd774c21f84467ec60469bffc22bdac5bf1c82d133346aca608f9723c110c1ea5c9de1a8d990212e4044c48d791166c6459046bec67f11ab7a7ecc0ec7953b4115359fac4503fa226e8a533", 0xbb}, {&(0x7f0000000480)="789adb03f8d0c9d37948818fda50d032951c1e909c311e8e1c0d8ee9b84e8fff8efde20cfb3854356f57a8942e6f70422186fd48ddfcd6e98b2d95cf22cdb8e34609563c3ec43ecc1831e41af50f34a7d533269e4f62624bec07a2cefbf18772eb84872fa38aca2f5d6d54ed2c56b6a368110706f26acb6404e41cf5146c0f42720611ec0c00aba7098a52e12bcecb20fd3cf4e5c84246a399644fbf55d013a421da2c642b1ee0ed541e7a4dc045f3f0349f5287b9fae3cda0bd6047da1867afe150379d0b255677e0a11be5ae9087e1575f513f45839576cb9f10", 0xdb}, {&(0x7f00000006c0)="d775577c714be4b54db991396c8022c9e87057a983329a2eecb13d1c92074468401a577a31f18748d363d621a5eeabc1f9e05f40afd4f4e69e59bcbd6c8b915596dfb0a74c0b0a266952a5020db8c7adbc99ef98b7f927331c1c1142238fb05f8ebb5d02ad836827ef02d7f5e9d1938ed9cfb34a9d9fdba7dc719267c4a0e7ae3b89c36849049e824b334c41da5658510411", 0x92}], 0x7, 0x2)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:46:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0x4007, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1f, 0x9, 0x7a, 0x7f, 0x0, 0x4000000000000000, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0xa}, 0x840, 0x80, 0x7ff, 0x4, 0xfffffffffffffea0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x1, r0, 0xa)
renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00')

[ 2186.305911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
22:46:07 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
io_cancel(0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4602c1ff04090000000000000001003e00ff0000001c01000000000000400000000000000016010000000000006a0200000500380002007e0e020089ab00000060e2040000050000000000000004000000000000000900000000000000feffffffffffffffff030000000001000000000001000000749711c0b4582c898d63a691c48f3d9ab93845aece4b6cfe648de7f63a186b31bf0cec75fc3c7b22d7a773977f22e4750c77e192cfab29231f2bed335f93e069878d66232328f4d26807f48e702b35fec137f81047e48b355cc0d5bf6500acaf0838d8b190a2dcadccebd1d391d840bfdec2f98353234c0cfd3758e888e76aca171bac6378640348c9aca73c2663d0a4d759119d80b605475df9d3a200d5683ea727c12868b35a2600000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a9b7eaf7d251c1540418ea2220f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024b80000000001000000000000d15ea33f9e5b9f56d0e43c9cdf5849753929bfddd0400b37b0441f1b1091e80ca981d23870aba9f67d10a9f39fce9467abaf8462d5e0eb740990e9e04cb03c7e61229aacac9d8ee8e9c6ed7c9aea01d08b0263dea8fe6dd5c456550ecc899327197fe8d8133852c66ac8a22da869879800187b951a49e03d63fed6684996c24853ee4e5caf871ccf28ba0004b6991691e265c6a4ef479dfa1e6ffabfb48e66eeee2b91d0f6c7877630f08ff0f9e17b0e8bf2b006d81b6088a3211b5489943f7157a712fc2f11d92fee46d26da0098f9af887307c81999c1ca81b8680bb9db63d7fd871bd057affff0000000000003fa6e9d8ae91dc228b24b1604f14dd5414b7e5cc4982031963dc3bd7dd43b73ad879f5d4082f25677a0971ced1fbe542d8b96473b69248d12175ba611c7feba2c22ab5809a183933a42eb26a14ff21a0686bb31b6e657f2b2efe9f5e5d906f11af517f3313fd3479fb63a0fe3332b17f237e55ab0f3fd87ad00d8a9ba6fe825307fa6dfa9793ad1a1d747518ca36095351b5b7d16c38e7478f8b5dcc12686100000000000000000000000000000088df3feb0fbeabb474"], 0x320)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x84000)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000100)={0x3, 0x342, 0x1000, &(0x7f0000001100)=""/4096})
syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40440, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0xfffffffffffffff8, 0x101c82)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000006c0)={{0xff, 0x43}, 0x0, 0xff, 0x2, {0x81, 0x9}, 0x1, 0x1})
close(r4)

22:46:07 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xfffffdef, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:07 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x900000000000000}}}}, 0xc0}}, 0x0)

22:46:07 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x9c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "bfcbe9ccec3fdceedc26897503cfa23d0f945cfc8a8c9d1a08b0c3ea10ce666bb022cc6b9e101ba544ef0990a894546db1b168e60e0c743bebb8e32423911c55004dd892aae7e6171d9e5d32b30d53fc1964f39943efb494fabf08ac2ee62ee35265a0ed20978ef087815777f088396fa51374c5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)

[ 2186.382210] FAULT_INJECTION: forcing a failure.
[ 2186.382210] name failslab, interval 1, probability 0, space 0, times 0
[ 2186.383179] CPU: 1 UID: 0 PID: 16373 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2186.383196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2186.383203] Call Trace:
[ 2186.383208]  <TASK>
[ 2186.383213]  dump_stack_lvl+0xfa/0x120
[ 2186.383235]  should_fail_ex+0x4d7/0x5e0
[ 2186.383256]  should_failslab+0xc2/0x120
[ 2186.383280]  __kmalloc_node_track_caller_noprof+0xc1/0x760
[ 2186.383301]  ? perf_trace_lock_acquire+0xc9/0x700
[ 2186.383317]  ? kstrdup_const+0x57/0x80
[ 2186.383331]  ? perf_trace_lock_acquire+0xc9/0x700
[ 2186.383350]  ? kstrdup+0x3e/0xc0
[ 2186.383361]  kstrdup+0x3e/0xc0
[ 2186.383374]  kstrdup_const+0x57/0x80
[ 2186.383387]  __kernfs_new_node+0x9c/0x870
[ 2186.383412]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2186.383435]  ? lock_acquire+0x15e/0x2f0
[ 2186.383450]  ? kernfs_root+0x23/0x2a0
[ 2186.383469]  ? find_held_lock+0x2b/0x80
[ 2186.383488]  ? kernfs_root+0xee/0x2a0
[ 2186.383507]  ? lock_release+0xc8/0x290
[ 2186.383520]  ? lock_is_held_type+0x9e/0x120
[ 2186.383538]  kernfs_new_node+0x13c/0x1e0
[ 2186.383555]  kernfs_create_link+0xcf/0x240
[ 2186.383575]  sysfs_do_create_link_sd+0x90/0x140
[ 2186.383597]  sysfs_create_link+0x63/0xc0
[ 2186.383617]  device_add+0x5d7/0x1830
[ 2186.383640]  ? __pfx_device_add+0x10/0x10
[ 2186.383659]  ? lockdep_init_map_type+0x4b/0x240
[ 2186.383675]  ? __init_waitqueue_head+0xca/0x150
[ 2186.383694]  netdev_register_kobject+0x1a9/0x3e0
[ 2186.383714]  register_netdevice+0x1332/0x1d70
[ 2186.383734]  ? __pfx_register_netdevice+0x10/0x10
[ 2186.383748]  ? mac802154_llsec_set_params+0x490/0x570
[ 2186.383776]  ieee802154_if_add+0xc73/0x1140
[ 2186.383799]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2186.383818]  ? __pfx___mutex_lock+0x10/0x10
[ 2186.383832]  ? skb_put+0x138/0x1b0
[ 2186.383852]  ? __nlmsg_put+0x159/0x1d0
[ 2186.383875]  ? genlmsg_put+0x265/0x2e0
[ 2186.383896]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2186.383912]  ieee802154_add_iface+0x472/0x970
[ 2186.383933]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2186.383952]  ? trace_kmalloc+0x1f/0xb0
[ 2186.383974]  ? __nla_parse+0x42/0x60
[ 2186.383993]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2186.384011]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2186.384034]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2186.384052]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2186.384079]  ? security_capable+0x2f/0x90
[ 2186.384099]  genl_rcv_msg+0x532/0x7e0
[ 2186.384119]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2186.384137]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2186.384164]  netlink_rcv_skb+0x147/0x430
[ 2186.384180]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2186.384198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2186.384223]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2186.384242]  genl_rcv+0x28/0x40
[ 2186.384256]  netlink_unicast+0x5a7/0x870
[ 2186.384275]  ? __pfx_netlink_unicast+0x10/0x10
[ 2186.384299]  netlink_sendmsg+0x8a3/0xd80
[ 2186.384318]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2186.384343]  ____sys_sendmsg+0xa67/0xc20
[ 2186.384364]  ? copy_msghdr_from_user+0xfb/0x150
[ 2186.384379]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2186.384405]  ? lock_acquire+0x15e/0x2f0
[ 2186.384422]  ___sys_sendmsg+0x10f/0x1b0
[ 2186.384438]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2186.384450]  ? perf_trace_lock+0xb5/0x5d0
[ 2186.384469]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2186.384483]  ? proc_fail_nth_write+0x97/0x220
[ 2186.384504]  ? lock_acquire+0x15e/0x2f0
[ 2186.384518]  ? __fget_files+0x34/0x3b0
[ 2186.384534]  ? find_held_lock+0x2b/0x80
[ 2186.384553]  ? __fget_files+0x203/0x3b0
[ 2186.384567]  ? lock_release+0xc8/0x290
[ 2186.384586]  ? __fget_files+0x20d/0x3b0
[ 2186.384608]  __sys_sendmsg+0x150/0x200
[ 2186.384623]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2186.384645]  ? __pfx_ksys_write+0x10/0x10
[ 2186.384669]  do_syscall_64+0xbf/0x390
[ 2186.384687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2186.384700] RIP: 0033:0x7f056dbbbb19
[ 2186.384709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2186.384721] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2186.384732] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2186.384741] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2186.384748] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2186.384756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2186.384763] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2186.384783]  </TASK>
22:46:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:07 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000771523f0002ffffe60000000000000010000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2186.482044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
22:46:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 47)

22:46:07 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0xf, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00'])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r2, 0x1, r0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = dup(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4)
ioctl$KDFONTOP_SET_DEF(r5, 0x4bfb, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$setownex(r5, 0xf, &(0x7f00000002c0)={0xdbe7ce31b1875366, r1})
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long}, 0x11)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)

[ 2186.541250] random: crng reseeded on system resumption
[ 2186.609609] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=16400 comm=syz-executor.0
22:46:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2186.630385] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=16402 comm=syz-executor.0
22:46:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:07 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7001)
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x800)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x20, 0x7f, 0x5, 0x26, 0x0, 0x7bc33d49, 0x2407, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x7, 0x8, 0xfffffffffffffff7, 0x6, 0xc1, 0x0, 0x5, 0x0, 0x100}, 0x0, 0x0, r1, 0x8)
socket$packet(0x11, 0x3, 0x300)

22:46:07 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xa00000000000000}}}}, 0xc0}}, 0x0)

[ 2186.680920] FAULT_INJECTION: forcing a failure.
[ 2186.680920] name failslab, interval 1, probability 0, space 0, times 0
[ 2186.682755] CPU: 0 UID: 0 PID: 16403 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2186.682785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2186.682798] Call Trace:
[ 2186.682806]  <TASK>
[ 2186.682815]  dump_stack_lvl+0xfa/0x120
[ 2186.682851]  should_fail_ex+0x4d7/0x5e0
[ 2186.682885]  ? __kernfs_new_node+0xd3/0x870
[ 2186.682921]  should_failslab+0xc2/0x120
[ 2186.682957]  kmem_cache_alloc_noprof+0x72/0x680
[ 2186.682985]  ? perf_trace_lock_acquire+0xc9/0x700
[ 2186.683023]  ? __kernfs_new_node+0xd3/0x870
[ 2186.683058]  __kernfs_new_node+0xd3/0x870
[ 2186.683101]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2186.683144]  ? lock_acquire+0x15e/0x2f0
[ 2186.683171]  ? kernfs_root+0x23/0x2a0
[ 2186.683207]  ? find_held_lock+0x2b/0x80
[ 2186.683242]  ? kernfs_root+0xee/0x2a0
[ 2186.683285]  ? lock_release+0xc8/0x290
[ 2186.683309]  ? lock_is_held_type+0x9e/0x120
[ 2186.683343]  kernfs_new_node+0x13c/0x1e0
[ 2186.683375]  kernfs_create_link+0xcf/0x240
[ 2186.683411]  sysfs_do_create_link_sd+0x90/0x140
[ 2186.683451]  sysfs_create_link+0x63/0xc0
[ 2186.683489]  device_add+0x581/0x1830
[ 2186.683530]  ? __pfx_device_add+0x10/0x10
[ 2186.683565]  ? lockdep_init_map_type+0x4b/0x240
[ 2186.683595]  ? __init_waitqueue_head+0xca/0x150
[ 2186.683630]  netdev_register_kobject+0x1a9/0x3e0
[ 2186.683667]  register_netdevice+0x1332/0x1d70
[ 2186.683703]  ? __pfx_register_netdevice+0x10/0x10
[ 2186.683729]  ? mac802154_llsec_set_params+0x490/0x570
[ 2186.683781]  ieee802154_if_add+0xc73/0x1140
[ 2186.683821]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2186.683858]  ? __pfx___mutex_lock+0x10/0x10
[ 2186.683883]  ? skb_put+0x138/0x1b0
[ 2186.683918]  ? __nlmsg_put+0x159/0x1d0
[ 2186.683961]  ? genlmsg_put+0x265/0x2e0
[ 2186.683999]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2186.684028]  ieee802154_add_iface+0x472/0x970
[ 2186.684067]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2186.684101]  ? trace_kmalloc+0x1f/0xb0
[ 2186.684141]  ? __nla_parse+0x42/0x60
[ 2186.684177]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2186.684211]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2186.684253]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2186.684288]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2186.684344]  ? security_capable+0x2f/0x90
[ 2186.684382]  genl_rcv_msg+0x532/0x7e0
[ 2186.684419]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2186.684452]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2186.684504]  netlink_rcv_skb+0x147/0x430
[ 2186.684532]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2186.684566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2186.684614]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2186.684648]  genl_rcv+0x28/0x40
[ 2186.684675]  netlink_unicast+0x5a7/0x870
[ 2186.684710]  ? __pfx_netlink_unicast+0x10/0x10
[ 2186.684756]  netlink_sendmsg+0x8a3/0xd80
[ 2186.684792]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2186.684839]  ____sys_sendmsg+0xa67/0xc20
[ 2186.684876]  ? copy_msghdr_from_user+0xfb/0x150
[ 2186.684903]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2186.684951]  ? lock_acquire+0x15e/0x2f0
[ 2186.684984]  ___sys_sendmsg+0x10f/0x1b0
[ 2186.685012]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2186.685036]  ? perf_trace_lock+0xb5/0x5d0
[ 2186.685071]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2186.685097]  ? proc_fail_nth_write+0x97/0x220
[ 2186.685136]  ? lock_acquire+0x15e/0x2f0
[ 2186.685163]  ? __fget_files+0x34/0x3b0
[ 2186.685191]  ? find_held_lock+0x2b/0x80
[ 2186.685226]  ? __fget_files+0x203/0x3b0
[ 2186.685254]  ? lock_release+0xc8/0x290
[ 2186.685287]  ? __fget_files+0x20d/0x3b0
[ 2186.685330]  __sys_sendmsg+0x150/0x200
[ 2186.685356]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2186.685397]  ? __pfx_ksys_write+0x10/0x10
[ 2186.685442]  do_syscall_64+0xbf/0x390
[ 2186.685474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2186.685497] RIP: 0033:0x7f056dbbbb19
[ 2186.685514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2186.685535] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2186.685557] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2186.685572] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2186.685585] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2186.685599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2186.685612] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2186.685651]  </TASK>
[ 2186.799984] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2186.801105] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2186.812103] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2186.820704] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:46:08 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf00000000000000}}}}, 0xc0}}, 0x0)

22:46:08 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="260234e14bba96ab8dd377e8ceb0a2a136b3919b885197190b1f042540d565afd27b5cc52e32c26697349fd9dfec4626b4abe4d75e0ad844e1524126eab6d909", 0x40}, {&(0x7f0000000040)="9019bf6a797b3940c051473f4d1aecf58da63a0bbd37d8dc5caac90d92537a8941ecf3eda2391ef080c25516f1db3f96d8cbc455353e57d464611becbccd24996d4c8eedf3718530f5b2b612a5fce5692e68d1f13256eb47264847a320e5221027e7f00b0387672fb77fb02d243f289859532e84", 0x74}, {&(0x7f00000000c0)="1f196a9b6ffef7b2689f9e433c00d223c111c6fcc7e8daca9199622e32ae5c4f6b9cce11a8dfd4bdc62dda18a034c8dbc8c9ef650d40454fd8e23e902d81bdd14b1883969421ba0ba73198999e14bd760832d1f78180e9c3ab8e078d7b66dbd2d9e3c1bcc1cfb99bf49d170bcc0b5668f268edf352f2fb9ab3b6142649173731aaaa3c08f7854a80cb94298f3c551395d4f7f567dc0c62e879f5cc075c7498b47b2406d2a3d01f643e83d764e0361da61e7c5269dc2b7bfc0bfb4a6af8987ca34f1128027f380a0e97810a0158bb5e7160f71c70d2", 0xd5}, {&(0x7f00000001c0)="771f06f648eac285e37785b822a1ae9b8a8692930a24f4591a7f62ae92ee46d60714bd40642c06aff74503c8409dc8e612db188c5988892aef640fbb69860a71b1acb30917b954626bdd2e78fb077b77f30a3667d51200f5ca2ad5826af20b57b86d1d1a791c1a804ba3a5670f11aa8fb664de5af11fca729a1e47cc3163988a7cb260614eb18a51a01e3e83ab9a2dc379e4d726042d", 0x96}, {&(0x7f00000002c0)="8ad41a7f8236a856abf436101579a2d961fa3a1651f96dedf2", 0x19}], 0x5, 0x3)
fcntl$setstatus(r0, 0x407, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:46:08 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000240)=@flushpolicy={0x258, 0x1d, 0x2, 0x70bd25, 0x25dfdbfe, "", [@lastused={0xc, 0xf, 0x2}, @offload={0xc, 0x1c, {0x0, 0x1}}, @srcaddr={0x14, 0xd, @in6=@loopback}, @extra_flags={0x8, 0x18, 0x2}, @algo_aead={0x103, 0x12, {{'rfc4106(rfc4106-gcm-aesni)\x00'}, 0x5b8, 0x100, "6fa804501b4de03d560842cd482cf23636aca3644c7730635c729f177f0046d2dccf7ff1afc3e1d9b0e76d6286e55b6d33f76f269a677893a86929e66b23b65218bedca6cc60dd782c0ce23de155af6c368a31220a03e123d0454ed2bacd6cb8285f829ee2cb40c488cca9a4a987faeec6ef689342868668ebf25a3428aa01ed34078c6f404b9cc2391a7ed0131b29ee6e330f05558693f96a0ff89a5ecbf159ab73a05a6af49bda1ec5e779b50026aabe76750bc8a4bd"}}, @lastused={0xc, 0xf, 0x3ff}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa, 0x7f, 0x1}}, @algo_aead={0xa2, 0x12, {{'morus640\x00'}, 0x2b0, 0x180, "29c87dbc154581f5d8258220fc2a213005849eb6436548fbfa9202bffe0740733dc44d3bdc7a4b635716a83cbf9b201813387b5e18e8f01210114b9b54623acd1c1e4718459c4f877bfcdff6be7874aba745effafa37"}}, @mark={0xc, 0x15, {0x35075b, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}}]}, 0x258}}, 0x4000041)
splice(r0, &(0x7f0000000040)=0x7fff, r1, &(0x7f0000000080)=0x6, 0x8000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3, 0x6, 0x1000, 0x14a0000})

[ 2186.858656] random: crng reseeded on system resumption
[ 2186.919500] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2186.921523] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2186.924955] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2186.927198] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2188.886363] Bluetooth: hci1: command 0x0406 tx timeout
[ 2188.950390] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2188.950456] Bluetooth: hci4: command 0x0406 tx timeout
[ 2188.950916] Bluetooth: hci7: command 0x0c1a tx timeout
22:46:16 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x9effffff00000000}}}}, 0xc0}}, 0x0)

22:46:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393036373937313100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005d00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2003}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4400}, {&(0x7f0000012700)="20000000e42a2b4ce42a2b4c00000000e1f4655f00"/32, 0x20, 0x4480}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4800}, {&(0x7f0000012900)="20000000000000000000000000000000e1f4655f00"/32, 0x20, 0x487e}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4c00}, {&(0x7f0000012b00)="20000000000000000000000000000000e1f4655f00"/32, 0x20, 0x4c80}, {&(0x7f0000012c00)="c041000000300000e1f4655fe1f4655fe1f4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x6800}, {&(0x7f0000012d00)="20000000000000000000000000000000e1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x6880}, {&(0x7f0000012e00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004510229000000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x6c00}, {&(0x7f0000012f00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000682546cf00000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000", 0xa0, 0x7000}, {&(0x7f0000013000)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3239303637393731312f66696c65302f66696c653000000000000000000000000000000000000000000000edc75b2500000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000", 0xa0, 0x7400}, {&(0x7f0000013100)="ed8100000a000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000514905cf00000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x7800}, {&(0x7f0000013200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000060000000020000000100000062000000020000000180000062000000000000000000000000000000c183a18a00000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000", 0xc0, 0x7be0}, {&(0x7f0000013300)="ed81000064000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6bf5894f122e51440f6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c242da4430000000000000000009a700000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000000002ea04073403000000002800000000000000646174610000000001000000", 0xc0, 0x8000}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x83c0}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300002558707dddc15cc60000000000000000000000000013c2000000000000", 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x41400}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000014a00))

22:46:16 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x10, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 48)

22:46:16 executing program 6:
llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/153, 0x99)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0x0)
fork()
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fork()

22:46:16 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x82, 0x6, 0xff, 0x0, 0x8001, 0x1410, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x6}, 0x100, 0x0, 0x2, 0x7, 0x8ac8, 0x8c, 0x0, 0x0, 0x1}, 0x0, 0xa, r0, 0x2)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:46:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:16 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:46:16 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'])
mount$bind(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r0, r2, r0]}, 0x5)

[ 2195.056065] FAULT_INJECTION: forcing a failure.
[ 2195.056065] name failslab, interval 1, probability 0, space 0, times 0
[ 2195.057488] CPU: 1 UID: 0 PID: 16444 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2195.057505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2195.057513] Call Trace:
[ 2195.057517]  <TASK>
[ 2195.057522]  dump_stack_lvl+0xfa/0x120
[ 2195.057544]  should_fail_ex+0x4d7/0x5e0
[ 2195.057564]  ? __kernfs_new_node+0xd3/0x870
[ 2195.057584]  should_failslab+0xc2/0x120
[ 2195.057604]  kmem_cache_alloc_noprof+0x72/0x680
[ 2195.057620]  ? __asan_memcpy+0x3d/0x60
[ 2195.057640]  ? __kernfs_new_node+0xd3/0x870
[ 2195.057659]  __kernfs_new_node+0xd3/0x870
[ 2195.057682]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2195.057705]  ? lock_acquire+0x15e/0x2f0
[ 2195.057721]  ? kernfs_root+0x23/0x2a0
[ 2195.057740]  ? find_held_lock+0x2b/0x80
[ 2195.057760]  ? kernfs_root+0xee/0x2a0
[ 2195.057779]  ? lock_release+0xc8/0x290
[ 2195.057792]  ? lock_is_held_type+0x9e/0x120
[ 2195.057810]  kernfs_new_node+0x13c/0x1e0
[ 2195.057828]  kernfs_create_link+0xcf/0x240
[ 2195.057859]  sysfs_do_create_link_sd+0x90/0x140
[ 2195.057881]  sysfs_create_link+0x63/0xc0
[ 2195.057901]  device_add+0x5d7/0x1830
[ 2195.057924]  ? __pfx_device_add+0x10/0x10
[ 2195.057943]  ? lockdep_init_map_type+0x4b/0x240
[ 2195.057959]  ? __init_waitqueue_head+0xca/0x150
[ 2195.057979]  netdev_register_kobject+0x1a9/0x3e0
[ 2195.057999]  register_netdevice+0x1332/0x1d70
[ 2195.058020]  ? __pfx_register_netdevice+0x10/0x10
[ 2195.058034]  ? mac802154_llsec_set_params+0x490/0x570
[ 2195.058062]  ieee802154_if_add+0xc73/0x1140
[ 2195.058084]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2195.058104]  ? __pfx___mutex_lock+0x10/0x10
[ 2195.058117]  ? skb_put+0x138/0x1b0
[ 2195.058137]  ? __nlmsg_put+0x159/0x1d0
[ 2195.058161]  ? genlmsg_put+0x265/0x2e0
[ 2195.058182]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2195.058198]  ieee802154_add_iface+0x472/0x970
[ 2195.058219]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2195.058237]  ? trace_kmalloc+0x1f/0xb0
[ 2195.058259]  ? __nla_parse+0x42/0x60
[ 2195.058283]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2195.058301]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2195.058324]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2195.058342]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2195.058369]  ? security_capable+0x2f/0x90
[ 2195.058389]  genl_rcv_msg+0x532/0x7e0
[ 2195.058409]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2195.058427]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2195.058454]  netlink_rcv_skb+0x147/0x430
[ 2195.058470]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2195.058488]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2195.058514]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2195.058532]  genl_rcv+0x28/0x40
[ 2195.058546]  netlink_unicast+0x5a7/0x870
[ 2195.058565]  ? __pfx_netlink_unicast+0x10/0x10
[ 2195.058589]  netlink_sendmsg+0x8a3/0xd80
[ 2195.058609]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2195.058633]  ____sys_sendmsg+0xa67/0xc20
[ 2195.058654]  ? copy_msghdr_from_user+0xfb/0x150
[ 2195.058669]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2195.058695]  ? lock_acquire+0x15e/0x2f0
[ 2195.058712]  ___sys_sendmsg+0x10f/0x1b0
[ 2195.058728]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2195.058740]  ? perf_trace_lock+0xb5/0x5d0
[ 2195.058759]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2195.058773]  ? proc_fail_nth_write+0x97/0x220
[ 2195.058795]  ? lock_acquire+0x15e/0x2f0
[ 2195.058809]  ? __fget_files+0x34/0x3b0
[ 2195.058825]  ? find_held_lock+0x2b/0x80
[ 2195.058844]  ? __fget_files+0x203/0x3b0
[ 2195.058859]  ? lock_release+0xc8/0x290
[ 2195.058876]  ? __fget_files+0x20d/0x3b0
[ 2195.058899]  __sys_sendmsg+0x150/0x200
[ 2195.058913]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2195.058935]  ? __pfx_ksys_write+0x10/0x10
[ 2195.058960]  do_syscall_64+0xbf/0x390
[ 2195.058977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2195.058991] RIP: 0033:0x7f056dbbbb19
[ 2195.059000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2195.059012] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2195.059024] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2195.059032] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2195.059040] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2195.059047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2195.059055] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2195.059076]  </TASK>
[ 2195.158407] random: crng reseeded on system resumption
22:46:26 executing program 6:
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
fcntl$getown(r0, 0x9)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc)
getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

22:46:26 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105500, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x180)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendfile(r2, r1, 0x0, 0x80000000)

22:46:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x11, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:26 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
close_range(r0, r2, 0x2)

22:46:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xf0ffffff00000000}}}}, 0xc0}}, 0x0)

22:46:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 49)

22:46:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:26 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[ 2205.166180] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2205.200102] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
22:46:26 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(r0, r0, 0x0)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r4, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r6, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x9, 0x3f, 0x8001, 0x25, @mcast1, @local, 0x8, 0x7, 0x401, 0x20000000}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x40)
close_range(r1, r2, 0x0)

22:46:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x654001, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x2a42, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x100000000000}, 0x0, 0x0, r0, 0x0)
pipe(&(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r2, 0x407, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="cce283b0e0bd03216c87478894f4db7155eaa827b02e3ca6840efce56869"], 0xc8}}, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
statx(0xffffffffffffffff, &(0x7f0000007740)='./file0\x00', 0x0, 0x800, &(0x7f0000000100))
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x34)
r8 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x40000000, &(0x7f00000002c0))
poll(&(0x7f0000000080)=[{r0, 0x440}, {r1, 0x7580}, {r2, 0x20}, {r7, 0x114}, {r8, 0x10}, {r2, 0x20}, {0xffffffffffffffff, 0x10}], 0x7, 0x541)

22:46:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x12, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xffffc90000000000}}}}, 0xc0}}, 0x0)

22:46:26 executing program 6:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e20000000000000005000000000000007f00000000000000ffffffffffffffe00000802d00000000010000000400000008000000030000000000f0ff00000000c8f1ffffffffffff0400000000000000874c0000000000000800"/112])
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0xa6, &(0x7f0000000240)="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"})

22:46:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 50)

[ 2205.427728] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2205.437996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2205.443627] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
22:46:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000))
r1 = getpid()
pidfd_open(r1, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x81, 0xfb, 0x7, 0x0, 0x0, 0x8000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x100a, 0x5f, 0x7, 0x0, 0x4, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1}, r1, 0x10, r0, 0x9)
r2 = getpid()
capset(&(0x7f00000001c0)={0x19980330, r2}, &(0x7f0000000200)={0x5, 0x1, 0xa74, 0x200, 0x200, 0x800})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000300))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1f, 0x7f, 0x4, 0x5, 0x0, 0x4, 0x4000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe3f2, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x12040, 0x6, 0x6, 0x4, 0x4, 0x4, 0x402, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0xe, r4, 0xa)
r5 = pidfd_open(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000))
r6 = getpid()
r7 = pidfd_open(r6, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r7, &(0x7f0000000040)={0xffffffffffffffff, r5})
recvmsg$unix(r4, &(0x7f00000027c0)={&(0x7f0000001500)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001580)=""/43, 0x2b}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/31, 0x1f}], 0x4, &(0x7f0000002700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000009c00000000000000010002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=<r8=>0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}, 0x40010000)
clone3(&(0x7f0000002840)={0x300000400, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0xd}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000001400)=""/224, &(0x7f0000002800)=[0x0, 0x0, 0x0, r8], 0x4, {r4}}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')

[ 2205.451598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2205.512595] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
[ 2205.529533] random: crng reseeded on system resumption
22:46:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x13, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xffffff7f00000000}}}}, 0xc0}}, 0x0)

[ 2205.597442] FAULT_INJECTION: forcing a failure.
[ 2205.597442] name failslab, interval 1, probability 0, space 0, times 0
[ 2205.598607] CPU: 1 UID: 0 PID: 16516 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2205.598627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2205.598637] Call Trace:
[ 2205.598643]  <TASK>
[ 2205.598649]  dump_stack_lvl+0xfa/0x120
[ 2205.598676]  should_fail_ex+0x4d7/0x5e0
[ 2205.598700]  ? __kernfs_new_node+0xd3/0x870
[ 2205.598725]  should_failslab+0xc2/0x120
[ 2205.598749]  kmem_cache_alloc_noprof+0x72/0x680
[ 2205.598766]  ? __kernfs_iattrs+0x9b/0x3f0
[ 2205.598797]  ? __kernfs_new_node+0xd3/0x870
[ 2205.598820]  __kernfs_new_node+0xd3/0x870
[ 2205.598848]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2205.598878]  ? lock_acquire+0x15e/0x2f0
[ 2205.598897]  ? kernfs_root+0x23/0x2a0
[ 2205.598921]  ? find_held_lock+0x2b/0x80
[ 2205.598945]  ? kernfs_root+0xee/0x2a0
[ 2205.598969]  ? lock_release+0xc8/0x290
[ 2205.598985]  ? lock_is_held_type+0x9e/0x120
[ 2205.599009]  kernfs_new_node+0x13c/0x1e0
[ 2205.599031]  __kernfs_create_file+0x55/0x360
[ 2205.599056]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2205.599084]  ? __pfx_dev_attr_store+0x10/0x10
[ 2205.599113]  internal_create_group+0x571/0xeb0
[ 2205.599148]  ? __pfx_internal_create_group+0x10/0x10
[ 2205.599172]  ? kernfs_add_one+0x150/0x830
[ 2205.599194]  ? kernfs_create_link+0x1be/0x240
[ 2205.599218]  internal_create_groups.part.0+0x90/0x140
[ 2205.599239]  sysfs_create_groups+0x29/0x50
[ 2205.599255]  device_add+0x67e/0x1830
[ 2205.599286]  ? __pfx_device_add+0x10/0x10
[ 2205.599310]  ? lockdep_init_map_type+0x4b/0x240
[ 2205.599330]  ? __init_waitqueue_head+0xca/0x150
[ 2205.599355]  netdev_register_kobject+0x1a9/0x3e0
[ 2205.599380]  register_netdevice+0x1332/0x1d70
[ 2205.599406]  ? __pfx_register_netdevice+0x10/0x10
[ 2205.599424]  ? mac802154_llsec_set_params+0x490/0x570
[ 2205.599459]  ieee802154_if_add+0xc73/0x1140
[ 2205.599487]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2205.599511]  ? __pfx___mutex_lock+0x10/0x10
[ 2205.599529]  ? skb_put+0x138/0x1b0
[ 2205.599553]  ? __nlmsg_put+0x159/0x1d0
[ 2205.599582]  ? genlmsg_put+0x265/0x2e0
[ 2205.599608]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2205.599628]  ieee802154_add_iface+0x472/0x970
[ 2205.599655]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2205.599678]  ? trace_kmalloc+0x1f/0xb0
[ 2205.599704]  ? __nla_parse+0x42/0x60
[ 2205.599729]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2205.599751]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2205.599780]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2205.599803]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2205.599838]  ? security_capable+0x2f/0x90
[ 2205.599863]  genl_rcv_msg+0x532/0x7e0
[ 2205.599888]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2205.599910]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2205.599944]  netlink_rcv_skb+0x147/0x430
[ 2205.599964]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2205.599986]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2205.600018]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2205.600041]  genl_rcv+0x28/0x40
[ 2205.600059]  netlink_unicast+0x5a7/0x870
[ 2205.600083]  ? __pfx_netlink_unicast+0x10/0x10
[ 2205.600113]  netlink_sendmsg+0x8a3/0xd80
[ 2205.600138]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2205.600169]  ____sys_sendmsg+0xa67/0xc20
[ 2205.600195]  ? copy_msghdr_from_user+0xfb/0x150
[ 2205.600214]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2205.600246]  ? lock_acquire+0x15e/0x2f0
[ 2205.600268]  ___sys_sendmsg+0x10f/0x1b0
[ 2205.600287]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2205.600304]  ? perf_trace_lock+0xb5/0x5d0
[ 2205.600327]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2205.600345]  ? proc_fail_nth_write+0x97/0x220
[ 2205.600371]  ? lock_acquire+0x15e/0x2f0
[ 2205.600389]  ? __fget_files+0x34/0x3b0
[ 2205.600409]  ? find_held_lock+0x2b/0x80
[ 2205.600433]  ? __fget_files+0x203/0x3b0
[ 2205.600451]  ? lock_release+0xc8/0x290
[ 2205.600474]  ? __fget_files+0x20d/0x3b0
[ 2205.600502]  __sys_sendmsg+0x150/0x200
[ 2205.600521]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2205.600553]  ? __pfx_ksys_write+0x10/0x10
[ 2205.600584]  do_syscall_64+0xbf/0x390
[ 2205.600606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2205.600622] RIP: 0033:0x7f056dbbbb19
[ 2205.600634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2205.600649] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2205.600664] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2205.600675] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2205.600684] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2205.600693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2205.600702] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2205.600728]  </TASK>
22:46:26 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x1003}, 0x0, 0x9, 0x0, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56)

22:46:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2205.718797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2205.733519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2205.739578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
22:46:27 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x14, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:27 executing program 1:
r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2205.912164] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2205.917449] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2205.924782] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2205.926659] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2205.928414] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2205.986470] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2205.989256] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2205.990551] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2205.991806] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2207.958402] Bluetooth: hci1: command 0x0406 tx timeout
[ 2208.022430] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2208.022470] Bluetooth: hci4: command 0x0406 tx timeout
[ 2208.023499] Bluetooth: hci7: command 0x0c1a tx timeout
22:46:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 51)

22:46:36 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xc, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:36 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x15, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:36 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0xfffffffffffff000}}}}, 0xc0}}, 0x0)

22:46:36 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:46:36 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300ff", 0x7, 0x800}, {0x0, 0x0, 0x8000000000006800}], 0x0, &(0x7f0000012c00))
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="fbf302195ee21b9170b2971f2125a9cb6bc3857f310f560d786e60ebddd4c1d372492dee5bbad798d34ee5e46ea3f7814d25d18926558a4643653126eda4755e2e2155a4c3161ff5beb196000d410f0b831e4ec078c4f6490e9771ccba96f3a986cc3f5af03a9cbac3c9da3f4d27a2625a62cf076107cfc103bd58af8b13804a8bf96ba3e477b5af16cce235decf8cda8b35cabceb5372c66334a26e8c0fed6e920ebadbd58ce06cbc6a6da0f1a2444039a0b8346554247f29861b99", 0xbc, 0x10001}], 0x30000, &(0x7f0000000280)={[{@fat=@errors_continue}, {@fat=@check_normal}, {@dots}, {@fat=@nfs_nostale_ro}, {@dots}, {@nodots}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x38, 0x37, 0x39, 0x30, 0x64, 0x61, 0x31], 0x2d, [0x62, 0x38, 0x35, 0x64], 0x2d, [0x0, 0x61, 0x64, 0x38], 0x2d, [0x63, 0x66, 0x64, 0x63], 0x2d, [0x31, 0x30, 0x62, 0x31, 0x66, 0x65, 0x31, 0x38]}}}, {@permit_directio}]})

22:46:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
inotify_rm_watch(r0, 0x0)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:46:36 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x0, 0x0, 0x7, 0x0, 0x9, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
r2 = dup(r1)
ioctl$BLKSECTGET(r2, 0x227b, &(0x7f0000000040))

22:46:36 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = eventfd2(0x800, 0x0)
splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040)=0x5, 0x0, 0x7)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:46:36 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x14, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2215.710219] __nla_validate_parse: 1 callbacks suppressed
[ 2215.710244] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
22:46:37 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x7fff, 0xa8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1040}, 0x4040000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00010000000000b6d8006800000008000300", @ANYRES32=r3, @ANYBLOB="1400c70000000000000000001bae63230cbb2c11"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x5a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7e}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x40040)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x6, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x200000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000880)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r6, 0x407, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
shutdown(r8, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r10, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4a, 0x1}, {0x3f, 0x5}, {0x3, 0x1}, {0x80, 0x3}], "b877caf200b00035"}}]}, 0x30}}, 0x0)

[ 2215.750457] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2215.776926] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:46:37 executing program 6:
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x8)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x800, 0x69)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10000000)
read(r0, &(0x7f0000000000), 0x2000)

[ 2215.784761] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2215.794512] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2215.804941] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:46:37 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:37 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 52)

[ 2215.859107] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'.
22:46:37 executing program 6:
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf251900000008000300", @ANYRES32=0x0, @ANYBLOB="b65062fa6052c2e5523d391da934bd3089a1"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200400, &(0x7f0000000300)={'trans=virtio,', {[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_role}, {@audit}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}]}})
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x444000, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x68}, 0x1, 0x0, 0x0, 0x200080d4}, 0x2000c050)
bind$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4e0000000000000000000000000000806d7ab5b5e26526e6226e02cd27dccd899ca6e185908eeca7b02a5ce4b883b7661f924aaa6bbfd126aac227df539044a5d8cc7f8476e928d288dce6748737d9274ea2c1b647964d28a836b095cc4aa2cea91a5b61758f396d537e96e5330374db3cf765d8ecbdf26bc2deed73262ba95c0b798bf2d8f4d9c00e5283e681dad48bf6c6dee271b5146ec6fdc6d94337ceee17a39be2f7192853291ad9ab595501b5965dd96cd92c3bdffe968d9fca09a83045f31527667a", @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',access=any,\x00'])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@private}, {0x3}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
sendfile(r4, r1, &(0x7f0000000040)=0x1, 0x20)

22:46:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4efaceaeb810000008384f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf5c710d0f9b7d5e0f1f834c5a9b602ac6"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31)
fchown(r1, r2, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000017c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x42800, &(0x7f0000001800)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}], [{@measure}, {@uid_lt={'uid<', r3}}, {@permit_directio}]}})
r4 = fork()
r5 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000580)=[{&(0x7f00000001c0)="57da741a9eca356fe40d2a0c8816cb76abbfa8679a9d7379b1b678dd1336b9ab824b9d723f4ec05350017e1c5d4bfc2afea2b5a4", 0x34}, {&(0x7f00000002c0)="ff9bd62e5ae5017a3d7ac0319b40a81fe8a2da0a06d6c4d0cbffb573373a23ee18b3a6091e34b418bbad3b7252d5475bff39a6b5a86abc17647dfc14f6a51639f4a4cc81b0025b7f6ba3258a905ad61c038f24462bbb84d6f3fd227259cdc80db2ec8e04cfe9fc76f46d5caa62d4d490fa606cf5decfcb7b172807366b0be832170529e53806d822d7061065d1793b7e3cc24a64215bcfdf8ac512d8d7b67bc537c9ea5ae31c0df04dcd07ff9d365dd6c7799ef600", 0xb5, 0xe182}, {&(0x7f0000000380)="854bda3c8722109d846f41456eb7b04dd25571ffc0fba4867cec5551a06da623109ba53402ebf82c715c09da7d1c844643f8a9ad7ee73cace139c0ae22cbf2601ed142c1906eb5932a487ca066f541", 0x4f, 0x5}, {&(0x7f0000000400)="2a484531551055d7b0fbf40c84ca18017b3c07b0e5f6e20350a8bbd8e2d9932deabe92295420db8711e93bd1b429be448d91e66b3139bcd914f380d6e86c7ad741974c2da7c14cce817bc3c01f19f70fc1b52ace6c5f3881873916e79482d9ec8b3a41c9f0c82138cc75043cbd41d7a982ae3962d0bcd8f6e2031dec2958d38833266f1d505c36249541d912fb05f82d28f3a122baab15236a57057a095b62d4e253f736401351ac7d9ba61e781e85f03b90c9c6370a1909a9c147cc3bcc7727e49482787f3e590941f662afcb4e5cad7ad5cad23caa572342dd7f2ff4185356bff14dff0f940e533f0047a590ad5f08cd3e6eeaf622f2cd34f7e4ef9b19", 0xfe, 0x3}, {&(0x7f0000000500)="82ac1ad2c435b6a0f8cd1a7345e71067c5f56202bd840bd7fb76d8aae3d6a5245ea7997c2ebbf2918e5bdecb5dfee0e9a871dc052e4787cddf2761f931db5e3cf28e188f148f560442527c517e110c5f4302f5", 0x53, 0x3}], 0x11000a6, &(0x7f0000001900)={[{@fat=@quiet}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@dots}, {@dots}, {@nodots}]})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r5}, 0x0, 0x4, @unused=[0x6, 0x1f, 0xc62, 0x6], @devid})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0/file0\x00')

[ 2215.922578] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2215.936388] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2215.946416] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2215.954216] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2215.957243] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 2215.970572] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 2216.036397] FAULT_INJECTION: forcing a failure.
[ 2216.036397] name failslab, interval 1, probability 0, space 0, times 0
[ 2216.037351] CPU: 1 UID: 0 PID: 16593 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2216.037368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2216.037375] Call Trace:
[ 2216.037380]  <TASK>
[ 2216.037386]  dump_stack_lvl+0xfa/0x120
[ 2216.037412]  should_fail_ex+0x4d7/0x5e0
[ 2216.037433]  ? __kernfs_new_node+0xd3/0x870
[ 2216.037454]  should_failslab+0xc2/0x120
[ 2216.037473]  kmem_cache_alloc_noprof+0x72/0x680
[ 2216.037494]  ? __kernfs_new_node+0xd3/0x870
[ 2216.037513]  __kernfs_new_node+0xd3/0x870
[ 2216.037535]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2216.037559]  ? lock_acquire+0x15e/0x2f0
[ 2216.037574]  ? kernfs_root+0x23/0x2a0
[ 2216.037594]  ? find_held_lock+0x2b/0x80
[ 2216.037614]  ? kernfs_root+0xee/0x2a0
[ 2216.037633]  ? lock_release+0xc8/0x290
[ 2216.037646]  ? lock_is_held_type+0x9e/0x120
[ 2216.037665]  kernfs_new_node+0x13c/0x1e0
[ 2216.037682]  __kernfs_create_file+0x55/0x360
[ 2216.037703]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2216.037724]  ? __pfx_dev_attr_store+0x10/0x10
[ 2216.037748]  internal_create_group+0x571/0xeb0
[ 2216.037776]  ? __pfx_internal_create_group+0x10/0x10
[ 2216.037795]  ? kernfs_add_one+0x150/0x830
[ 2216.037812]  ? kernfs_create_link+0x1be/0x240
[ 2216.037832]  internal_create_groups.part.0+0x90/0x140
[ 2216.037848]  sysfs_create_groups+0x29/0x50
[ 2216.037860]  device_add+0x67e/0x1830
[ 2216.037881]  ? __pfx_device_add+0x10/0x10
[ 2216.037900]  ? lockdep_init_map_type+0x4b/0x240
[ 2216.037916]  ? __init_waitqueue_head+0xca/0x150
[ 2216.037936]  netdev_register_kobject+0x1a9/0x3e0
[ 2216.037956]  register_netdevice+0x1332/0x1d70
[ 2216.037976]  ? __pfx_register_netdevice+0x10/0x10
[ 2216.037990]  ? mac802154_llsec_set_params+0x490/0x570
[ 2216.038019]  ieee802154_if_add+0xc73/0x1140
[ 2216.038041]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2216.038060]  ? __pfx___mutex_lock+0x10/0x10
[ 2216.038074]  ? skb_put+0x138/0x1b0
[ 2216.038094]  ? __nlmsg_put+0x159/0x1d0
[ 2216.038128]  ? genlmsg_put+0x265/0x2e0
[ 2216.038149]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2216.038165]  ieee802154_add_iface+0x472/0x970
[ 2216.038186]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2216.038205]  ? trace_kmalloc+0x1f/0xb0
[ 2216.038226]  ? __nla_parse+0x42/0x60
[ 2216.038245]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2216.038263]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2216.038290]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2216.038309]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2216.038335]  ? security_capable+0x2f/0x90
[ 2216.038355]  genl_rcv_msg+0x532/0x7e0
[ 2216.038376]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2216.038394]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2216.038421]  netlink_rcv_skb+0x147/0x430
[ 2216.038436]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2216.038455]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2216.038480]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2216.038498]  genl_rcv+0x28/0x40
[ 2216.038513]  netlink_unicast+0x5a7/0x870
[ 2216.038531]  ? __pfx_netlink_unicast+0x10/0x10
[ 2216.038556]  netlink_sendmsg+0x8a3/0xd80
[ 2216.038576]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2216.038601]  ____sys_sendmsg+0xa67/0xc20
[ 2216.038621]  ? copy_msghdr_from_user+0xfb/0x150
[ 2216.038636]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2216.038662]  ? lock_acquire+0x15e/0x2f0
[ 2216.038680]  ___sys_sendmsg+0x10f/0x1b0
[ 2216.038695]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2216.038707]  ? perf_trace_lock+0xb5/0x5d0
[ 2216.038727]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2216.038741]  ? proc_fail_nth_write+0x97/0x220
[ 2216.038762]  ? lock_acquire+0x15e/0x2f0
[ 2216.038776]  ? __fget_files+0x34/0x3b0
[ 2216.038792]  ? find_held_lock+0x2b/0x80
[ 2216.038811]  ? __fget_files+0x203/0x3b0
[ 2216.038826]  ? lock_release+0xc8/0x290
[ 2216.038843]  ? __fget_files+0x20d/0x3b0
[ 2216.038866]  __sys_sendmsg+0x150/0x200
[ 2216.038881]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2216.038903]  ? __pfx_ksys_write+0x10/0x10
[ 2216.038928]  do_syscall_64+0xbf/0x390
[ 2216.038945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2216.038958] RIP: 0033:0x7f056dbbbb19
[ 2216.038967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2216.038979] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2216.038991] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2216.038999] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2216.039007] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2216.039014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2216.039021] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2216.039042]  </TASK>
[ 2217.881438] Bluetooth: hci1: command 0x0406 tx timeout
[ 2217.942447] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2218.006447] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2218.007534] Bluetooth: hci4: command 0x0406 tx timeout
22:46:46 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
read(r0, &(0x7f0000000000)=""/82, 0x52)

22:46:46 executing program 6:
r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3f]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000100)={0x1, 0x9, 0x9})
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:46:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x17, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:46 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r1, &(0x7f0000000900)='^', 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
sendfile(r1, r2, 0x0, 0xfdf1)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6", 0x89)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0xfdef)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r2, @out_args}, './file0\x00'})
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000000c0)={{0x7fffffff, 0x3}, 0x100, './file0/file0\x00'})

22:46:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 53)

22:46:46 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x12, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:46 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd000061bcbc919794b3dbec190287dbd64ef9a3a473b8815fe00000d43b41b3e26415e0e8b3878d40ff9ac27a87a310e94f8cd86469fc11279c22a358eb3557063d856d4228bbc6f8fff3acfc1ea37334eceb937725db9c64698150de4c09c5c92b6aff724f9985a014627d26bc6c1b936adb78e9e0b8c449cbe915a8340b68ad2d57c297364579c7932e7e85e5473fad1b2c8c202aad546ee994bfcd19d6a52f8ab4646df5007bc97407438432f3e895b124dd0a4f68ccf4f79edfe57e73b174dcd34735f0ca986ab05dede2260b023cf5", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:46:46 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x3}}}}, 0xc0}}, 0x0)

22:46:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:46 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xfffe}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000040)=0x7)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x2)
r3 = syz_io_uring_complete(0x0)
recvmsg$unix(r3, &(0x7f0000000280)={&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/62, 0x3e}], 0x2}, 0x40)

22:46:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 54)

22:46:46 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x18, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x19, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2225.446543] FAULT_INJECTION: forcing a failure.
[ 2225.446543] name failslab, interval 1, probability 0, space 0, times 0
[ 2225.447824] CPU: 1 UID: 0 PID: 16639 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2225.447841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2225.447849] Call Trace:
[ 2225.447854]  <TASK>
[ 2225.447859]  dump_stack_lvl+0xfa/0x120
[ 2225.447884]  should_fail_ex+0x4d7/0x5e0
[ 2225.447905]  ? __kernfs_new_node+0xd3/0x870
[ 2225.447925]  should_failslab+0xc2/0x120
[ 2225.447944]  kmem_cache_alloc_noprof+0x72/0x680
[ 2225.447957]  ? __kernfs_iattrs+0x9b/0x3f0
[ 2225.447979]  ? __kernfs_new_node+0xd3/0x870
[ 2225.447996]  __kernfs_new_node+0xd3/0x870
[ 2225.448018]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2225.448041]  ? lock_acquire+0x15e/0x2f0
[ 2225.448056]  ? kernfs_root+0x23/0x2a0
[ 2225.448074]  ? find_held_lock+0x2b/0x80
[ 2225.448093]  ? kernfs_root+0xee/0x2a0
[ 2225.448111]  ? lock_release+0xc8/0x290
[ 2225.448123]  ? lock_is_held_type+0x9e/0x120
[ 2225.448142]  kernfs_new_node+0x13c/0x1e0
[ 2225.448159]  __kernfs_create_file+0x55/0x360
[ 2225.448179]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2225.448199]  ? __pfx_dev_attr_store+0x10/0x10
[ 2225.448223]  internal_create_group+0x571/0xeb0
[ 2225.448249]  ? __pfx_internal_create_group+0x10/0x10
[ 2225.448268]  ? kernfs_add_one+0x150/0x830
[ 2225.448290]  ? kernfs_create_link+0x1be/0x240
[ 2225.448309]  internal_create_groups.part.0+0x90/0x140
[ 2225.448328]  sysfs_create_groups+0x29/0x50
[ 2225.448340]  device_add+0x67e/0x1830
[ 2225.448360]  ? __pfx_device_add+0x10/0x10
[ 2225.448378]  ? lockdep_init_map_type+0x4b/0x240
[ 2225.448394]  ? __init_waitqueue_head+0xca/0x150
[ 2225.448414]  netdev_register_kobject+0x1a9/0x3e0
[ 2225.448433]  register_netdevice+0x1332/0x1d70
[ 2225.448454]  ? __pfx_register_netdevice+0x10/0x10
[ 2225.448467]  ? mac802154_llsec_set_params+0x490/0x570
[ 2225.448495]  ieee802154_if_add+0xc73/0x1140
[ 2225.448516]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2225.448534]  ? __pfx___mutex_lock+0x10/0x10
[ 2225.448548]  ? skb_put+0x138/0x1b0
[ 2225.448567]  ? __nlmsg_put+0x159/0x1d0
[ 2225.448589]  ? genlmsg_put+0x265/0x2e0
[ 2225.448610]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2225.448626]  ieee802154_add_iface+0x472/0x970
[ 2225.448647]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2225.448665]  ? trace_kmalloc+0x1f/0xb0
[ 2225.448685]  ? __nla_parse+0x42/0x60
[ 2225.448704]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2225.448721]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2225.448744]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2225.448761]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2225.448788]  ? security_capable+0x2f/0x90
[ 2225.448808]  genl_rcv_msg+0x532/0x7e0
[ 2225.448827]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2225.448844]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2225.448871]  netlink_rcv_skb+0x147/0x430
[ 2225.448887]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2225.448904]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2225.448929]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2225.448947]  genl_rcv+0x28/0x40
[ 2225.448961]  netlink_unicast+0x5a7/0x870
[ 2225.448979]  ? __pfx_netlink_unicast+0x10/0x10
[ 2225.449004]  netlink_sendmsg+0x8a3/0xd80
[ 2225.449023]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2225.449047]  ____sys_sendmsg+0xa67/0xc20
[ 2225.449066]  ? copy_msghdr_from_user+0xfb/0x150
[ 2225.449081]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2225.449106]  ? lock_acquire+0x15e/0x2f0
[ 2225.449123]  ___sys_sendmsg+0x10f/0x1b0
[ 2225.449138]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2225.449151]  ? perf_trace_lock+0xb5/0x5d0
[ 2225.449169]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2225.449183]  ? proc_fail_nth_write+0x97/0x220
[ 2225.449204]  ? lock_acquire+0x15e/0x2f0
[ 2225.449217]  ? __fget_files+0x34/0x3b0
[ 2225.449233]  ? find_held_lock+0x2b/0x80
[ 2225.449251]  ? __fget_files+0x203/0x3b0
[ 2225.449265]  ? lock_release+0xc8/0x290
[ 2225.449282]  ? __fget_files+0x20d/0x3b0
[ 2225.449305]  __sys_sendmsg+0x150/0x200
[ 2225.449319]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2225.449340]  ? __pfx_ksys_write+0x10/0x10
[ 2225.449365]  do_syscall_64+0xbf/0x390
[ 2225.449382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2225.449394] RIP: 0033:0x7f056dbbbb19
[ 2225.449405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2225.449417] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2225.449429] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2225.449437] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2225.449445] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2225.449452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2225.449459] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2225.449480]  </TASK>
22:46:46 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'xfrm0\x00', {0x2, 0x0, @multicast1}})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x200, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, {}, 0x0, 0x1}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x10)
fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000d20f7180108d6ede134a4cb10da45e0f61f5e07c8bc60f85d80a59e6e000271300", @ANYRES16=r6, @ANYBLOB="040025bd7000fddbdf254300000008000300", @ANYRES32=r9, @ANYBLOB="0c00990002000000200000000c00580017000000000000000c00580073002000000000000c0058005a000000000000000c0058007e000000000000000c00580049000000000000000c00580008000000000000000c0058004d000000000000000c0058001800000000000000"], 0x88}}, 0x1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x4, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:46:46 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x100002)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x1f, 0x1, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8, 0x9, 0x10000}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44040)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r2, 0x20, 0x0, 0x100000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', r4, 0x29, 0x0, 0x3, 0x7, 0x40, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x80, 0x1f, 0x401}})
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fallocate(r3, 0x0, 0x0, 0x29)

22:46:46 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000))
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2225.585950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2225.606473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2225.634409] audit: type=1400 audit(1759099606.915:25): avc:  denied  { relabelto } for  pid=16646 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=44290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:ldconfig_cache_t:s0 tclass=netlink_xfrm_socket permissive=1
[ 2225.671217] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2225.687778] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2225.704227] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2225.708901] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2225.773678] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2225.774550] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2225.775912] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2225.776826] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2227.734339] Bluetooth: hci1: command 0x0406 tx timeout
[ 2227.798390] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2227.798492] Bluetooth: hci4: command 0x0406 tx timeout
[ 2227.798922] Bluetooth: hci7: command 0x0c1a tx timeout
22:46:56 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000000000000000aba0870aeeb47cd20300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:46:56 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x4}}}}, 0xc0}}, 0x0)

22:46:56 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r1, &(0x7f0000000900)='^', 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
sendfile(r1, r2, 0x0, 0xfdf1)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6", 0x89)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0xfdef)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r2, @out_args}, './file0\x00'})
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000000c0)={{0x7fffffff, 0x3}, 0x100, './file0/file0\x00'})

22:46:56 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1e, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 55)

22:46:56 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_secret(0x80000)
dup2(r1, r0)
readv(r0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
socket$unix(0x1, 0x5, 0x0)

22:46:56 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1a, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:56 executing program 1:
vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

22:46:56 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x8}}}}, 0xc0}}, 0x0)

22:46:56 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000000)="ae", 0x1}], 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x2, 0x1a73, 0x6, 0x1, 0x9, "083632fb30a753c0"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'})

22:46:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 56)

22:46:57 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x28, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x9}}}}, 0xc0}}, 0x0)

22:46:57 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000000000000000006800000008004d01682e5937b68bca60121463a25548084277552ba55ad155a1878cf22a01fde3a99628113c4a8eed8f9cacc823016fd4f27fddd6397ef60b3a08cc14792bc0a2551d7bd73db03dec", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:46:57 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x104d, &(0x7f0000000100), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180))
poll(&(0x7f0000000280)=[{r0}], 0x1, 0x8b)
syz_io_uring_setup(0x3b8c, &(0x7f00000001c0)={0x0, 0x4f3c, 0x4, 0x1, 0x14d, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000240))

22:46:57 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xb, 0x200)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000000040)="0123f2257e9f7fa37c917442f636ce868bee08059a8b21353a8b7cd72c30144826ac4dda76fc532ea54b2f7dc7fcc9c47c9ce3c681fc96008887c5997e4e43d15a597a746d4153509bfca1", 0x4b, 0x1000, 0x0, 0x3, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x3ff, r4, &(0x7f0000000140)="c42a743781644ea5ee741672b918be3efa159cdfcdead615a8d6592e4afaea28f9b2068138a1dac990f3101e21708ec495da3f8ae1d2", 0x36, 0xd89c, 0x0, 0x1, r5}])
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2235.910965] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'.
22:46:57 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x24, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:46:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 57)

22:46:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xa}}}}, 0xc0}}, 0x0)

22:46:57 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x2, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:46:57 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
splice(r0, &(0x7f0000000000)=0x6ad, r2, &(0x7f0000000040)=0x3, 0x594, 0xb)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2236.051842] FAULT_INJECTION: forcing a failure.
[ 2236.051842] name failslab, interval 1, probability 0, space 0, times 0
[ 2236.052974] CPU: 1 UID: 0 PID: 16717 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2236.052993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2236.053001] Call Trace:
[ 2236.053006]  <TASK>
[ 2236.053012]  dump_stack_lvl+0xfa/0x120
[ 2236.053035]  should_fail_ex+0x4d7/0x5e0
[ 2236.053057]  ? __kernfs_new_node+0xd3/0x870
[ 2236.053078]  should_failslab+0xc2/0x120
[ 2236.053100]  kmem_cache_alloc_noprof+0x72/0x680
[ 2236.053125]  ? __kernfs_new_node+0xd3/0x870
[ 2236.053145]  __kernfs_new_node+0xd3/0x870
[ 2236.053170]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2236.053196]  ? lock_acquire+0x15e/0x2f0
[ 2236.053214]  ? kernfs_root+0x23/0x2a0
[ 2236.053235]  ? find_held_lock+0x2b/0x80
[ 2236.053256]  ? kernfs_root+0xee/0x2a0
[ 2236.053282]  ? lock_release+0xc8/0x290
[ 2236.053297]  ? lock_is_held_type+0x9e/0x120
[ 2236.053318]  kernfs_new_node+0x13c/0x1e0
[ 2236.053338]  __kernfs_create_file+0x55/0x360
[ 2236.053361]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2236.053385]  ? __pfx_dev_attr_store+0x10/0x10
[ 2236.053412]  internal_create_group+0x571/0xeb0
[ 2236.053443]  ? __pfx_internal_create_group+0x10/0x10
[ 2236.053465]  ? kernfs_add_one+0x150/0x830
[ 2236.053485]  ? kernfs_create_link+0x1be/0x240
[ 2236.053507]  internal_create_groups.part.0+0x90/0x140
[ 2236.053525]  sysfs_create_groups+0x29/0x50
[ 2236.053539]  device_add+0x67e/0x1830
[ 2236.053563]  ? __pfx_device_add+0x10/0x10
[ 2236.053584]  ? lockdep_init_map_type+0x4b/0x240
[ 2236.053603]  ? __init_waitqueue_head+0xca/0x150
[ 2236.053625]  netdev_register_kobject+0x1a9/0x3e0
[ 2236.053648]  register_netdevice+0x1332/0x1d70
[ 2236.053672]  ? __pfx_register_netdevice+0x10/0x10
[ 2236.053687]  ? mac802154_llsec_set_params+0x490/0x570
[ 2236.053720]  ieee802154_if_add+0xc73/0x1140
[ 2236.053744]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2236.053766]  ? __pfx___mutex_lock+0x10/0x10
[ 2236.053782]  ? skb_put+0x138/0x1b0
[ 2236.053804]  ? __nlmsg_put+0x159/0x1d0
[ 2236.053830]  ? genlmsg_put+0x265/0x2e0
[ 2236.053854]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2236.053873]  ieee802154_add_iface+0x472/0x970
[ 2236.053897]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2236.053918]  ? trace_kmalloc+0x1f/0xb0
[ 2236.053942]  ? __nla_parse+0x42/0x60
[ 2236.053964]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2236.053984]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2236.054010]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2236.054031]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2236.054062]  ? security_capable+0x2f/0x90
[ 2236.054086]  genl_rcv_msg+0x532/0x7e0
[ 2236.054108]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2236.054128]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2236.054160]  netlink_rcv_skb+0x147/0x430
[ 2236.054177]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2236.054198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2236.054228]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2236.054249]  genl_rcv+0x28/0x40
[ 2236.054265]  netlink_unicast+0x5a7/0x870
[ 2236.054287]  ? __pfx_netlink_unicast+0x10/0x10
[ 2236.054316]  netlink_sendmsg+0x8a3/0xd80
[ 2236.054338]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2236.054377]  ____sys_sendmsg+0xa67/0xc20
[ 2236.054403]  ? copy_msghdr_from_user+0xfb/0x150
[ 2236.054421]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2236.054452]  ? lock_acquire+0x15e/0x2f0
[ 2236.054472]  ___sys_sendmsg+0x10f/0x1b0
[ 2236.054490]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2236.054505]  ? perf_trace_lock+0xb5/0x5d0
[ 2236.054528]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2236.054545]  ? proc_fail_nth_write+0x97/0x220
[ 2236.054569]  ? lock_acquire+0x15e/0x2f0
[ 2236.054586]  ? __fget_files+0x34/0x3b0
[ 2236.054605]  ? find_held_lock+0x2b/0x80
[ 2236.054627]  ? __fget_files+0x203/0x3b0
[ 2236.054644]  ? lock_release+0xc8/0x290
[ 2236.054666]  ? __fget_files+0x20d/0x3b0
[ 2236.054693]  __sys_sendmsg+0x150/0x200
[ 2236.054709]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2236.054735]  ? __pfx_ksys_write+0x10/0x10
[ 2236.054765]  do_syscall_64+0xbf/0x390
[ 2236.054785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2236.054800] RIP: 0033:0x7f056dbbbb19
[ 2236.054811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2236.054825] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2236.054839] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2236.054849] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2236.054858] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2236.054867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2236.054875] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2236.054899]  </TASK>
[ 2236.122473] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2236.127228] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2236.134086] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:46:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf}}}}, 0xc0}}, 0x0)

22:46:57 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0xa)
fcntl$setstatus(r0, 0x407, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe6, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x1666, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000000)=r0, 0x1)
r4 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
fcntl$getflags(r4, 0x401)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e20000000000000005000000000000007f0000000000000000000000000000000000802d00000000010000000400ff00000000c8f1ffffffffffff0400000000000000874c0000000000000800"/112])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x2, 0x7}, 0x1}}, 0x18)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000", @ANYRES16=r6, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2236.157893] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2236.263067] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2236.270078] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2236.292637] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2236.293232] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2238.230436] Bluetooth: hci1: command 0x0406 tx timeout
[ 2238.294577] Bluetooth: hci4: command 0x0406 tx timeout
[ 2238.295448] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2238.358365] Bluetooth: hci6: command 0x0c1a tx timeout
22:47:08 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x19, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22:47:08 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r6, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x22, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x94)

22:47:08 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_destroy(r1)
r2 = creat(0x0, 0x42)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000001c0)=0xc)
r4 = dup2(r0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x3f, 0x0, 0x8, 0x0, 0x0, 0x200, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fffffff, 0xfffffffffffffffd}, 0x11c, 0x2, 0x200, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1f}, r3, 0x0, r4, 0xa)
syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r5, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e", 0x162)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r5, 0x4, 0x44000)
socketpair(0x0, 0x2, 0x58, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000200)={0x0, 0x79, 0xffffffffffffff7f})
sendfile(r4, r2, &(0x7f00000000c0)=0x3, 0x100000001)
sendfile(r5, r6, 0x0, 0xfdef)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

22:47:08 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:47:08 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4008090)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x1)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000003f40)={@mcast1, @loopback, @private0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x840100a2})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', <r4=>0x0, 0x80, 0x20, 0xffffffff, 0x5, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x64, 0x0, 0xc0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x8, "b73993c97503"}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x3, [{@rand_addr=0x64010100}, {@broadcast, 0x846a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast2, 0x50}, {@empty, 0x4}, {@empty}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x51, r4})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:47:08 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf0}}}}, 0xc0}}, 0x0)

22:47:08 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 58)

[ 2247.551182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2247.642378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
22:47:19 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:19 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x107}}}}, 0xc0}}, 0x0)

22:47:19 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000000040)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

22:47:19 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x30, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:47:19 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 59)

22:47:19 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
fcntl$setstatus(r2, 0x4, 0x40000)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:47:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_setup(0x4, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}])
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r5=>0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x8b)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="d3", 0x1}])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0xa002, 0x0)
io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5a21, r6, &(0x7f0000000140)="faacbacc4ee193b401a2948f2707489a54a45b59f8f74a86344c3404d099a8592fc44c9ce5f6697c62e16c2604ae14d171535146470c9ff43d2f8711d19c851fb016eea0f4ada83d3de115de0166e6c585b008fefeb80868c77bdb310400961764a9f37a3c884b40f52fdd051ddcfe2fb4809bbce9980a95b579072b7a6f9d567acd59d0e3c5bfa47871c10ca6bc46423671a9d39ef665651ea9da0320094272efbae04a762a8bcd50cfdfe5b0b0a018bb8fae2419", 0xb5, 0x100, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000280)="e16240977ec039cf1bae8124a9662afd95859adc20b8161767f9bac78e5f1ee4ff5222a81dae17966730f4836ea467d624766c6ceb2b695263fc3024b4b7855f173ce101297059cb7334403dbbc07b2a7cb7549c3e8029ac27f6859f4aa71336213b986b6020933440386729286e94e9c8f35a1806975068fe8e6d2b", 0x7c, 0x8, 0x0, 0x2, r7}])
io_submit(0x0, 0x0, 0x0)

22:47:19 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/netconsole', 0x80000, 0x100)
splice(r2, &(0x7f0000000080)=0x31c, r0, &(0x7f00000000c0)=0x400, 0x30, 0x5)
vmsplice(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f00000008c0)='7', 0x1}], 0x2, 0x0)

22:47:19 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 60)

[ 2257.886187] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2257.892178] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2257.893473] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2257.897539] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2257.954515] FAULT_INJECTION: forcing a failure.
[ 2257.954515] name failslab, interval 1, probability 0, space 0, times 0
[ 2257.955617] CPU: 1 UID: 0 PID: 16811 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2257.955634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2257.955642] Call Trace:
[ 2257.955647]  <TASK>
[ 2257.955652]  dump_stack_lvl+0xfa/0x120
[ 2257.955674]  should_fail_ex+0x4d7/0x5e0
[ 2257.955694]  ? __kernfs_new_node+0xd3/0x870
[ 2257.955714]  should_failslab+0xc2/0x120
[ 2257.955734]  kmem_cache_alloc_noprof+0x72/0x680
[ 2257.955755]  ? __kernfs_new_node+0xd3/0x870
[ 2257.955773]  __kernfs_new_node+0xd3/0x870
[ 2257.955796]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2257.955819]  ? lock_acquire+0x15e/0x2f0
[ 2257.955835]  ? kernfs_root+0x23/0x2a0
[ 2257.955854]  ? find_held_lock+0x2b/0x80
[ 2257.955874]  ? kernfs_root+0xee/0x2a0
[ 2257.955893]  ? lock_release+0xc8/0x290
[ 2257.955905]  ? lock_is_held_type+0x9e/0x120
[ 2257.955924]  kernfs_new_node+0x13c/0x1e0
22:47:19 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000009d00000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="530d775606c1e2fe92b9cb64780334d902d43bd287481d2683eac5fd038fa50eb0dcbb6e7196c7f47ca267525696cc203795c2f00b32ac2d4a088832ce18c9288b22d0a35a9df6fbbc3123587654ee799482b013e8741b04d4e7b1ec8e64db183d8cc60c5968b69773a908088ea392c9eb3a39584df85df3f30ae3c6e2a6a2b4d39258257708ae70cb5ba50291940481dd8d9b032f00cf3ee4e93c4ee3c961ad99744e415912"], 0x1c}}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000100), 0xff, 0x200200)
getdents64(r5, &(0x7f0000000200)=""/216, 0xd8)

[ 2257.955941]  __kernfs_create_file+0x55/0x360
[ 2257.955962]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2257.955983]  ? __pfx_dev_attr_store+0x10/0x10
[ 2257.956007]  internal_create_group+0x571/0xeb0
[ 2257.956034]  ? __pfx_internal_create_group+0x10/0x10
[ 2257.956054]  ? kernfs_add_one+0x150/0x830
[ 2257.956071]  ? kernfs_create_link+0x1be/0x240
[ 2257.956090]  internal_create_groups.part.0+0x90/0x140
[ 2257.956105]  sysfs_create_groups+0x29/0x50
[ 2257.956117]  device_add+0x67e/0x1830
[ 2257.956139]  ? __pfx_device_add+0x10/0x10
[ 2257.956158]  ? lockdep_init_map_type+0x4b/0x240
[ 2257.956174]  ? __init_waitqueue_head+0xca/0x150
[ 2257.956194]  netdev_register_kobject+0x1a9/0x3e0
[ 2257.956214]  register_netdevice+0x1332/0x1d70
[ 2257.956235]  ? __pfx_register_netdevice+0x10/0x10
[ 2257.956248]  ? mac802154_llsec_set_params+0x490/0x570
[ 2257.956282]  ieee802154_if_add+0xc73/0x1140
[ 2257.956304]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2257.956323]  ? __pfx___mutex_lock+0x10/0x10
[ 2257.956337]  ? skb_put+0x138/0x1b0
[ 2257.956357]  ? __nlmsg_put+0x159/0x1d0
[ 2257.956380]  ? genlmsg_put+0x265/0x2e0
[ 2257.956401]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2257.956417]  ieee802154_add_iface+0x472/0x970
[ 2257.956438]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2257.956457]  ? trace_kmalloc+0x1f/0xb0
[ 2257.956479]  ? __nla_parse+0x42/0x60
[ 2257.956498]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2257.956516]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2257.956538]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2257.956557]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2257.956583]  ? security_capable+0x2f/0x90
[ 2257.956603]  genl_rcv_msg+0x532/0x7e0
[ 2257.956623]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2257.956641]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2257.956668]  netlink_rcv_skb+0x147/0x430
[ 2257.956684]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2257.956702]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2257.956727]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2257.956746]  genl_rcv+0x28/0x40
[ 2257.956760]  netlink_unicast+0x5a7/0x870
[ 2257.956779]  ? __pfx_netlink_unicast+0x10/0x10
[ 2257.956803]  netlink_sendmsg+0x8a3/0xd80
[ 2257.956823]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2257.956848]  ____sys_sendmsg+0xa67/0xc20
[ 2257.956869]  ? copy_msghdr_from_user+0xfb/0x150
[ 2257.956884]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2257.956909]  ? lock_acquire+0x15e/0x2f0
[ 2257.956927]  ___sys_sendmsg+0x10f/0x1b0
[ 2257.956942]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2257.956955]  ? perf_trace_lock+0xb5/0x5d0
[ 2257.956974]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2257.956988]  ? proc_fail_nth_write+0x97/0x220
[ 2257.957009]  ? lock_acquire+0x15e/0x2f0
[ 2257.957023]  ? __fget_files+0x34/0x3b0
[ 2257.957039]  ? find_held_lock+0x2b/0x80
[ 2257.957058]  ? __fget_files+0x203/0x3b0
[ 2257.957073]  ? lock_release+0xc8/0x290
[ 2257.957090]  ? __fget_files+0x20d/0x3b0
[ 2257.957113]  __sys_sendmsg+0x150/0x200
[ 2257.957130]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2257.957151]  ? __pfx_ksys_write+0x10/0x10
[ 2257.957176]  do_syscall_64+0xbf/0x390
[ 2257.957193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2257.957206] RIP: 0033:0x7f056dbbbb19
[ 2257.957216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2257.957228] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2257.957240] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2257.957248] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2257.957255] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2257.957262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2257.957270] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2257.957290]  </TASK>
[ 2258.003672] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:47:19 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:47:19 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x300}}}}, 0xc0}}, 0x0)

22:47:19 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x2, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2258.034814] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2258.046733] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2258.059646] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:47:19 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x19, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:19 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x3, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:19 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x36, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:47:19 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400c00, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r6, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x4bc, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x578025399535b2ec}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xec80008769c9cf4f}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x140, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4bc}}, 0x80)
r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r8, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:47:19 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x701}}}}, 0xc0}}, 0x0)

[ 2258.344155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2258.458204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2259.991379] Bluetooth: hci1: command 0x0406 tx timeout
[ 2260.054405] Bluetooth: hci4: command 0x0406 tx timeout
[ 2260.055469] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2260.118374] Bluetooth: hci6: command 0x0c1a tx timeout
22:47:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 61)

22:47:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x4, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:31 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000003f40)={@mcast1, @loopback, @private0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x840100a2})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev, r7}, 0x14)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1c, r7})
r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r8, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:47:31 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x2, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:31 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3c, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:47:31 executing program 2:
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/devices.allow\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x25000000, 0x200)
sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000140)="77945c0bc772ea98e3a41b3d94c538fad388f4e9cdf0d5dd72d977aea32a349a8daeeb6141674752b8cb9c5aac4ed2e56b80119be47d474d1a2d7179b046dda7022408fe12f5398908f76f76169f152aaebd951907d9b55103281d3798d7f09708322810e463afa376b804f26b2d8b413b299c6282cef8c6a8311bcbf0288ebf3ceef6af3c80aae7ded0cad372ea8f54cbc1e8c10d3278b57bcf066bd060b4343c9cea64e6d776e02407553bf0dbf3551979bdaa74a76a00c05426dcdc53fb26bc5348eb3ccf81bf3f2c589e", 0xcc}, {&(0x7f0000000240)="b64013e513eabc8a4f6786aad5019de4408928dbb4b9db7ef170c90e92a5cc32e40ef1b83ca0902b8a8022fa43c308d71cfbd0e2174b250110fe2a6af59061a9aa99407724291234a441c3dd1e2a81bbc3d146cf75958db9fadb2e95de6953bdbc4e7b99890d4a61bec9618cb4fddfbe66a4d122", 0x74}, {&(0x7f0000001340)="584955923c7359f9471ebcfc87ef8f2f1ad3b99e02f559abbd2b906003943cc5ab7a657dda28cb3ce9860e36203ca2c9c7a85738da10bb8ddd5c2819d210b725ca0d90910745cedc59e0178c145b7c976b57fe6d5be5133c83932bf2ff748ba603d9bc2434a6f054a0db2b284de9e049a4d3bb07d197a631f554db61f99bcfd0d7ab5474d9511a832d5e645765baaab1787ed4e3deaca4d3dd23d29c6b001e5e2990f88f4159423e18cdeb3f619a77cf417ed2de56769a66953f811a43767f5f80fe8dcff4f1415d1e37", 0xca}, {&(0x7f00000002c0)="963224305696e5cc2834a3f52eb79a5289cfb5f0a6c3e295f0c98d0516b56e3160dc24181bc162d229d24011c9af769b", 0x30}, {&(0x7f0000001440)="ec766c91336dbc974953848d4539e37f62496ab7151ba4ecc6beb319074e627ac7fd77d4db96bb91a691b4854ad08511a31d54dc2b7d5300d67634fa9862a4ea1c8073f393865e8d7249dd3ab4b68eff73e43b010bb78cab835c05208b2650b620744f6ee4718429663250c00b064e40f70702d95ccc7ee0eca80e5338314c90ec1b8bbff93dc53172307e77c47c6ac7967fdd703fca7aa8426a4c5a07a13b5499564f9fb751963427a8e5", 0xab}, {&(0x7f0000001500)="329713a55ffefa11baf7725469d6a44871eeaf6586271a47528dbcafb93ec4b71dea5f4053b3acd1443d84db8a01226c65b3e47083ef848734a85935429dae3c465a05582c6eb8968daece8e3f9023ea3b5a1589e4cff477f5052520bb67b33bf603366c9867d5f67594b3452467a4915fe48f6174d5ada6", 0x78}, {&(0x7f0000001580)="5fff2a3d3061961e09c055f20517765477d784fbdf5d3e0b7e4ce9ba95d010bd25f1cd83a5ac05a9e5e200a890661cf3171affc4c680e648c876777464b1d3ca40588d0f1a566b89d91251643e1d4255f793535548ccf9bb5c84dc0228086866fbdf2e90dafb1438445466cfb4caa28e9a4950887ca134d42611e5b50ea6d3895af661b58339a7ac98c4aa84cb8d1ac7539ae42fe81f36", 0x97}, {&(0x7f0000001640)="94a4ea655ad29e7db6bf859116c26b6c58bfc17847e29710b2da9487f595b4b52d05c654719ce832f0bccd1edd32b853619b285a11cc2bd2ae9dcc9b70eafde86dc7fad5a67bbacea12a9bba7cd9e8673b458fde8b45a63afede329b7602c33c8d58175494cb6d7c54fdd6b5903a264740fee249727d4efa52b40de6523ce2eb5646bc931d8c0ae608e4d7037659cce01e128cd6e2d96c9b8d335b51987b1577166d6527af7078a46039a745e330b37f8c93195177927d595fdc71941e6801adede71fcfc3d3097ddd24", 0xca}], 0x9, &(0x7f0000001800)=[@timestamping={{0x14, 0x1, 0x25, 0x3f}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{&(0x7f0000001840)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000018c0)="fe07167b141910281c9c41ba2a2f8f7a8288053a591bfb06a81c09f4f44d1714a6eb7d28163d73aa266023cb5103e1f2b5e80c157e314e2a669584f2eb78610fd52e445c1e747324f5f87f6f97dce9423992f722b73481570bb3325d82b9b1e63026d063ae154afce27f81f147fbe59073e99b8969e25f0f8282981d9b3afee5ffb6fc1cfbb75676e85e9c54d86f556f9fc1628a9900bd15cbc8328aa3a7bfeca88efa67ebaa6950a3edd46a62abcc9b0af31f3219ff3e9cd5950892fc0295d44fc92a5f8705147c4c0ce2f9dbf494df49f2988b", 0xd4}, {&(0x7f00000019c0)="882d321068e8d792a8968f3d07b32729579ff3ff95243aab8e78bc811966ee63f9f3452b66e504d068791d3d3a6dfc78acdf78534b3554066b99c488fdc3dd90879d814e14846a881c8a9dde70c4322d4d6ae6394b49ece06b69eeb776e473c250ac4e688b324de30f8290e4214ec386b4fa1b5f278186c2b29751d07831458558d9039f53f9f1d34af7bdcb9ecf4ff82cdbd6414d24d5549615184606d47fdfdea0cde4", 0xa4}, {&(0x7f0000001a80)="789c50f87bb24cd54fb8cf43fbe000324bb0bf933ef1b2af6c837caeb30df1c0a1452b6de040bd52531fb1f4234457cf796d89752a6a52e992d7179ec27be61d7a6dc6a5ad9c0c01677ae2657493d7a33d93b28264a0614a41a1d4636177c44871e9dd20a828c6fb8ce5860f7c82e537d2e45ca4758f449512809e5c871c222f20b47250c0f87233cf810c801c0d4052a05d9bd46fd6b683748e1a449f02bbaef967a4400a6b2d765d1d1ab7d2c5a601c3e7f8fb31fcd9c5df1b358ab6fc1f526abe8f4449278ef3ac72aa0277486acd425aa0b755fbb6fafa6da1295d9d12ec5ac0baadcce5", 0xe6}, {&(0x7f0000001b80)="a2f51bbdc983886c55d3fdf724bacb56a148e4ca359a3ce9fb8192415c444729063fc49836e0a6d82e845c0efae39a00b54d5336e658624120df03f05c6625d4627bfb1d4aeada03dbd7238f97753ea95fd3e451a6fe09b5a99459d8d9809de5755699900a76cbaeed57622f17", 0x6d}, {&(0x7f0000001c00)="e9fd7a820fced5883c4aae9f5f58b7c129", 0x11}, {&(0x7f0000001c40)="39e619b710aa3faa4228841157aeb99a1f2aa5247b73560c613aade5b66d72c6eac8eecb2ba89283d9f7b1cfa5171412180fd526ef26c533f6dbcbffc09afd3d7af7508d43593dccdfb0d2ff8a4f2b1fbb9d38a95a773503e423031d7f0f341fdb37cae0e27b115daf16f1ed9fb8d5695d4c3a35bb78def2c3f82ea7dae5f47492f21958f48542ab90c223c80b23432f42330ba4f6f2b16ebb56e718c188813014227ba753ea390925d00698d654a84fcb83c3b65bbe697d", 0xb8}, {&(0x7f0000001d00)="4efbd0ad7ab76d1a14d972af7c21a1ec7eae661a4f163cbd25fb99a2c25fe76e6a85361431757c529fcac2da60ac585f7b86423b7655f0ef67fee5d2147bedce24e02cf85a83421a8648d088a0510fc43a3ed8b37eaafa885fe37d8a8067947ca3c24cd2fef1eea412ad", 0x6a}, {&(0x7f0000001d80)="5e4bcd85fd5430eeac08425b91d0562f8fdb5e2bb10b8ba8e9bb4c69d8718b6695411d6cd424fc7402c368396b63016592db3db88699cbad05f36f1d06ffedc5487a3683bbdb9651410b587f53333b09d0e2e673f91fd4e2a9afec98d190e7b4a9466cbcc11f85f73040eb80fc3490add9071f40e3c3f509d643f7f39cf224ae488136034d4b3f7e4f678c393798336197197c7942d8ccf0b998c61e561213643457b8d7ef242d4a8da4c7dbce873f940f620f8e73c923e4d29fa813f8f991c77c", 0xc1}], 0x8, &(0x7f0000001f00)=[@timestamping={{0x14, 0x1, 0x25, 0x17}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x89ff}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001fc0)="37070d22f6a63edc76a69d78fcfba34ea707c87641fb3142db96e53a6578b630b2f3ff6daefbec47282b8e9b77bf4489b38710eabe4c03466c45dd355a1b7b79e3ab0e438e17ec95674034ebd8aa17eb905c0b4efff55fecf02ea2811930d68327e6b6", 0x63}], 0x1, &(0x7f0000002080)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}], 0x3, 0x50)
write$P9_RREADDIR(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="3d0000002901f5ede11fae1a4ccdfa5dac152e0003040000000400000000000000020000000000000000c00000000067726f757078ebe30a42499460b76365732e616c6c6ff7a93457eb79f7db3126cee57dcc860000001742000000000000000000000006aa674d1d6442ff98349b156c4759b9385a662a07ac8c58ba639a"], 0x3d)

22:47:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x900}}}}, 0xc0}}, 0x0)

22:47:31 executing program 1:
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xad00002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x368, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x427d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a6548c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49bd}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b4be85c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x46e0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50cc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2269.913671] FAULT_INJECTION: forcing a failure.
[ 2269.913671] name failslab, interval 1, probability 0, space 0, times 0
[ 2269.915010] CPU: 0 UID: 0 PID: 16861 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2269.915033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2269.915043] Call Trace:
[ 2269.915049]  <TASK>
[ 2269.915056]  dump_stack_lvl+0xfa/0x120
[ 2269.915083]  should_fail_ex+0x4d7/0x5e0
[ 2269.915109]  ? __kernfs_new_node+0xd3/0x870
[ 2269.915136]  should_failslab+0xc2/0x120
[ 2269.915163]  kmem_cache_alloc_noprof+0x72/0x680
[ 2269.915192]  ? __kernfs_new_node+0xd3/0x870
[ 2269.915218]  __kernfs_new_node+0xd3/0x870
[ 2269.915250]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2269.915288]  ? lock_acquire+0x15e/0x2f0
[ 2269.915309]  ? kernfs_root+0x23/0x2a0
[ 2269.915336]  ? find_held_lock+0x2b/0x80
[ 2269.915363]  ? kernfs_root+0xee/0x2a0
[ 2269.915389]  ? lock_release+0xc8/0x290
[ 2269.915408]  ? lock_is_held_type+0x9e/0x120
[ 2269.915434]  kernfs_new_node+0x13c/0x1e0
[ 2269.915458]  __kernfs_create_file+0x55/0x360
[ 2269.915486]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2269.915515]  ? __pfx_dev_attr_store+0x10/0x10
[ 2269.915547]  internal_create_group+0x571/0xeb0
[ 2269.915586]  ? __pfx_internal_create_group+0x10/0x10
[ 2269.915613]  ? kernfs_add_one+0x150/0x830
[ 2269.915637]  ? kernfs_create_link+0x1be/0x240
[ 2269.915664]  internal_create_groups.part.0+0x90/0x140
[ 2269.915686]  sysfs_create_groups+0x29/0x50
[ 2269.915703]  device_add+0x67e/0x1830
[ 2269.915738]  ? __pfx_device_add+0x10/0x10
[ 2269.915764]  ? lockdep_init_map_type+0x4b/0x240
[ 2269.915787]  ? __init_waitqueue_head+0xca/0x150
[ 2269.915814]  netdev_register_kobject+0x1a9/0x3e0
[ 2269.915841]  register_netdevice+0x1332/0x1d70
[ 2269.915869]  ? __pfx_register_netdevice+0x10/0x10
[ 2269.915888]  ? mac802154_llsec_set_params+0x490/0x570
[ 2269.915928]  ieee802154_if_add+0xc73/0x1140
[ 2269.915958]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2269.915986]  ? __pfx___mutex_lock+0x10/0x10
[ 2269.916005]  ? skb_put+0x138/0x1b0
[ 2269.916032]  ? __nlmsg_put+0x159/0x1d0
[ 2269.916064]  ? genlmsg_put+0x265/0x2e0
[ 2269.916093]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2269.916115]  ieee802154_add_iface+0x472/0x970
[ 2269.916144]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2269.916171]  ? trace_kmalloc+0x1f/0xb0
[ 2269.916200]  ? __nla_parse+0x42/0x60
[ 2269.916227]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2269.916252]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2269.916284]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2269.916309]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2269.916347]  ? security_capable+0x2f/0x90
[ 2269.916374]  genl_rcv_msg+0x532/0x7e0
[ 2269.916403]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2269.916428]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2269.916466]  netlink_rcv_skb+0x147/0x430
[ 2269.916488]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2269.916514]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2269.916554]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2269.916579]  genl_rcv+0x28/0x40
[ 2269.916600]  netlink_unicast+0x5a7/0x870
[ 2269.916626]  ? __pfx_netlink_unicast+0x10/0x10
[ 2269.916660]  netlink_sendmsg+0x8a3/0xd80
[ 2269.916688]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2269.916722]  ____sys_sendmsg+0xa67/0xc20
[ 2269.916751]  ? copy_msghdr_from_user+0xfb/0x150
[ 2269.916772]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2269.916808]  ? lock_acquire+0x15e/0x2f0
[ 2269.916832]  ___sys_sendmsg+0x10f/0x1b0
[ 2269.916854]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2269.916872]  ? perf_trace_lock+0xb5/0x5d0
[ 2269.916898]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2269.916918]  ? proc_fail_nth_write+0x97/0x220
[ 2269.916948]  ? lock_acquire+0x15e/0x2f0
[ 2269.916968]  ? __fget_files+0x34/0x3b0
[ 2269.916989]  ? find_held_lock+0x2b/0x80
[ 2269.917016]  ? __fget_files+0x203/0x3b0
[ 2269.917037]  ? lock_release+0xc8/0x290
[ 2269.917062]  ? __fget_files+0x20d/0x3b0
[ 2269.917094]  __sys_sendmsg+0x150/0x200
[ 2269.917114]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2269.917145]  ? __pfx_ksys_write+0x10/0x10
[ 2269.917180]  do_syscall_64+0xbf/0x390
[ 2269.917204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2269.917221] RIP: 0033:0x7f056dbbbb19
[ 2269.917234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2269.917250] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2269.917267] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2269.917279] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2269.917289] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2269.917299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2269.917309] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2269.917337]  </TASK>
[ 2269.965374] hpet: Lost 3 RTC interrupts
[ 2269.984376] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2269.987973] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2269.999426] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2270.004333] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:47:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x8, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:31 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0, 0x44}, {&(0x7f0000000000)="670f04d361bb090af008e70375f398f470a22815c8fe9ae5e9b2d6f9dd588ec00b8850f25c807b2896ccc4a0104b42b0394a3722566b3221550a314f53d0c0431fbeba21b52503fcac9d4af6b0a1a7fa982c08ace0ca4c6423ef411524526703871e87998b388fde52b0646b30f8e0335d2233920887e9befe396562c93790575100eb30daa0c99d315bd9d4171adac410121afa6ceed2f9d491d2848c0b1ed84d95d858d5"}], 0x0, 0x8)

[ 2270.081423] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2270.083063] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2270.094614] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2270.116126] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2272.086468] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2272.087586] Bluetooth: hci1: command 0x0406 tx timeout
[ 2272.153659] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2272.154719] Bluetooth: hci4: command 0x0406 tx timeout
22:47:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x9, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xa00}}}}, 0xc0}}, 0x0)

22:47:43 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x5}, {&(0x7f0000010200)="a5d59c7c5d225e5d000000000000000d0004", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x100010, &(0x7f0000000080)=ANY=[@ANYBLOB="000bbaafe1393e25d9cc7b5c41211c4e895c8b677dbdc4db"])
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/172, 0xac)

22:47:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:47:43 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x40, r2, &(0x7f0000000040)="58ff76aee1b27505bbfe3e0c9f05c4e78a63b713362795607e95c337af4e25b549f0f4012e2cc4f35513e6dcf552e076e56939c068908bb35cf3e128b7143beca89e4be6a7b74ef24e79f13c8dcb6c9ea55aaa349e5faf99d1baaa777486e26ec0fabd4218d4f22b0d2a6b4c166c358e9855c7aa17cad9f69a72ee10978a36a03ac37bcd55d037cc8dad3149b70167fb484b", 0x92, 0x5, 0x0, 0x2}])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:47:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 62)

22:47:43 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b3000003000180080001960000000000000040000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000000}, 0x40004)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', <r6=>0x0, 0x4, 0x6, 0x1f, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x80, 0xc082c000, 0x8}})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @private, <r7=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x90}}, 0x10)
[ 2282.312278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2282.333078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000540)="db55d562be9be0a21d5b8670014fd5b1b30db0ee2507691e0cc4523979775769ac32188981d4167f0f351ebda55636ab381f5ce97c", 0x35}, {&(0x7f0000000580)="fb", 0x1}, {&(0x7f0000000900)="92f4871ac388186abfe0c1c38c16071b6f46c5d7b07f380aa3f042d9e0c89995d03cdf2b130a51a9ba3da0123919fbb7841392c28fdddb22f3da4e1c3267760349ff78a99c119ebe88834926d74f1e69a23a86cd88f8315c2a4b8a7446a95d8b3446b109571268766a9f43101ebd4078cbe45c78a093766ba875ca75c0a0e1e2d74c8b1133ca1557b47f984f39531dcfd4a48b68717cf604037ce39ab0ca18f3a20eec9a955398ecf5dcabd29bd3b9148752cc82632edc5c89e97a0ff8862f421cf2fb8652e089524bf682f09693ddc80914d94b11b2ac1117ce65453d5946", 0xdf}, {&(0x7f00000005c0)="a440b2556a4d0d850dd9e8c331fb26664613fddceb1358a81914442a34c86c7767d8b4ca5baa33ac00febde757e14f85448373a14215ceb0c81e6618ae6de1752de5317af86ddd2fa48c483ca9cc18b8badb1abb2ec9848f01477eb277325c5c1a5850ec47201281868f2bd139f4077a79e18107f0de956e0ef78a1ec214d529ce6cbf868a291adf5e7d916861a08d626ac4e7a843", 0x95}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="457407b1871b2174bdf3ffa49fb64adf4433c55120270a5ed73529cf17ad594b212803769937180901064621c8f5e403f86716cbb7dab984a52229ebe7e69ab7c862f37a6d10fd45897b79b19ec21f774b60b836644dbcc6b34804c10a9e453dca0d5fc9d5df40e922452469b8867a947d395e37179bf89116dfcd675d14421492e5ba4aa57a31f26893abfbda7abad6eb60724fbf6c8fb97d8803083b42d387a278dc83978f14f0cb20ad3b55da59721fa32452fb849cce6212d6b589ce7bc7113a0551c74294ea7458678c29343e51b2cb1157ccae5891d7cd3b0fb1d38861150f3f61b5f51e94c8a5c35dc8a8ad6f65", 0xf1}, {&(0x7f0000000700)="0d0224f78380f2929d096f0862b7402fe7960c9b18788547ed02588530dd12049157ac212a198c7bc4605b4250c716bbc8c4b207c0d678274efd1221cfbb0f377be45bed64238c08f57438d377315e0ce62dc849508346578f40ea7532b9650d0da028bc5b5f9486640271631261aa3a9c5e6d5ed02e7dc4d1dac5129059d665741eb62407e2725c879a17b5770dc32762a69c6e", 0x94}], 0x7)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010000}, 0x10)

22:47:43 executing program 6:
r0 = syz_usb_connect(0x4, 0xc1d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xe4, 0x38, 0x16, 0x10, 0x729, 0x1284, 0x4715, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0b, 0x4, 0x6, 0x0, 0xe0, 0x1, [{{0x9, 0x4, 0xfe, 0x38, 0x6, 0x2, 0x68, 0xe9, 0xde, [@uac_control={{0xa, 0x24, 0x1, 0xfffc, 0x48}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x5, 0x2, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x6, "a0"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x4, 0x3, 0x1, 0x7, 0x20}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x81, 0x2, "4bac8b"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x1, 0xffd6, 0x5, 0x3}]}], [{{0x9, 0x5, 0x8, 0x10, 0x58, 0x80, 0x3e, 0x22, [@generic={0xfe, 0x21, "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"}, @generic={0xb0, 0x31, "7a75eec2deb810dab9fff9f2d56840ddb5ccf3ce32893294cd2ded2f784b855a412f93c82dd7cfec507665383333677215f42dee488cc86c1bd9e1722e0522fd9bf4728c1514d5358656f7c5bd66a2aa327b5e131372592fadae560dab5d093516eeccb4bd14a952a637ff01b8dcb1fa78b1c983d0280eef69465d71cb7592e67298dcc8bb800a2cbfc4978b92c592db03bcaf06424aac7b23ac1131e232df794ed6f87d6d778a3749806a8ef9fd"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xcb3c}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xb4, 0x0, 0x7f, [@generic={0x87, 0xe, "3ee894e2b819098c3e1ad7766fae54b8fb681d91697c9a1780195099ca15b98d95c3228f3873b7bdf32a2293963c93aaf46f96bbadb433e723bc0c5e129dffeb0a47d02a55afa83d588a7f18af0cb8a579db7e6cf4d9fe98437fc41907d12b8d890a838af3f311a22f91c9d376775d93d44a939a7928e559cd66a67fdfbf82135987da0fce"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x55, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8f, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x6, 0x1, 0x0, [@generic={0x97, 0x6, "04a7746a76faa1de2965f030db4ed621bf2f6fb66936e2c230e2cdcb96ff893ced8a939e27d7a5a4b0b808d5a6bbd4f1d7bf0a79bbe17e826de633e587933266702b24449101abaa75d57b10e71835def6c1418047a557384042ff2b8a2f2bcefa82b262db8afe1f3475798aa1eb2e924f404bc8cf7b18d9d208963d668aeac99224fb7b8431ec5926f3d2f16dacc0a2ced4c5f9c0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xcbd}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x9, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x71, 0x2, 0xd, 0xff, 0xff, 0xff, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7e3, 0x40, 0x2}}], [{{0x9, 0x5, 0xc, 0x1, 0x20, 0x1f, 0x2, 0x54, [@generic={0x93, 0x31, "9381ecfd8fe55aabc882ead8c55523cccd1e70851670a369d904cf94062b224948c0f5f19c822ca3a23ab1e1782ef639127b5f8be490cc75e0cdb7e74d2e25c76ff5656e31aee61b1fed3fc7782b65b22fff4da349e489b1635ed0f2db94d5573e015978e7ddf6e4a2c355d6c00a530abe458bb888615abde2a3758a0fded46c3d0eac60a750ff965766c6341fd7b0d999"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x200}, @generic={0x1a, 0xa, "66c9d9666571443ccf29262b595bb8406bf7c17309306e30"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x0, 0xda, [@generic={0x8e, 0xb, "1079ccff1cf3ae13a1f0d5ae8c04e4bfe98d7ea2ed3823e1ec039977b66617ed2f86dd1cc2d727c94999e6a52ff3b9a28725197bc59d6606f92645806317d1a8094410343b8efa9bf90358a3fd9ab519c42551ace2f001cfd5bec0c39df7d04ed1218620d60daec39f6b2fe6cbb625c11c698aa472859d2b6ef88f4c382b52d0f16b3f9c3c4df908a900151b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x57, 0xc2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x513d}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xff, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1}, @generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x80, 0x8, 0x30, 0x7, 0x5, 0x20, [@generic={0x76, 0x2, "6ad2a9b9c3b286f4e2b3bacd6183398ef2bb187161a4d1b5e7c0dac472b0afe711df58a73ea972d65b7b9e40aa9c624cf31b9f3ff6a5ec7d522d796fff7bd2e2480b642980960e08c9cf1032412eb159480a04e79f2821ddc67e8acdcc0231e5af03d8f9fd793addf8254b77d43d1367145ba89b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x9, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5c2c}]}}, {{0x9, 0x5, 0x8707efef703a31ed, 0x2, 0x8, 0x0, 0x81, 0x6}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x4, 0x40}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x0, 0x7f, [@generic={0x3d, 0x10, "9fdb7ff056035b5ffbcf6567730d0eebb33c8f8f009f6c88178e5552e556d795885076956ed19f5efb9476cc53c25e1416f711b4507c7af8bb02ce"}, @generic={0xa7, 0x8, "3575696d24e0ee1dfd1501f014919658ff5a638d1a39232d22bcd7c9d62eca67b74baad45485dbed7b0ab3b6e60f15cb0d623936e2c872637ebca5f63ed89d571d7f5ecdf22fafa095da8192fbeaab6620ec433763f8af131e79c9fa5a477905ee6066653d7c2a9afb90fdfbb600f25933dd660559aec6103b7fe3cc01bd44d3c94d609ad6ee0a977bec16ba4ef953edec68a5d97074587b10cde6cabbc820522b0e333f89"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x9, 0xa8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x2, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}]}}, {{0x9, 0x4, 0xa6, 0x81, 0x10, 0xb8, 0x1e, 0xbc, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0x62, "d0f0e5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x4, 0x1, 0xba9, 0xba, 0x9}]}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x9, 0x91, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xb9}, @generic={0xfa, 0x2, "f57e35908d63787a6721527d2e76fe668cf461d052df387025c90b54e38d41385ada7f9655395b572adb7e35a47f4429c944fbe5290961223e14a5fba60ef74dfbe81fedb46ff906a4d0865f9e938ed030da3ae01139debf73e8206888fe1009fba187359a69efa260c8947c759478a73b14a8bbfc3c043189e4a4d3aea4e690c2d3a94fbe225c9618b623f611814130428cc8aece82928e02f69673b8c43929726f2cab9c5888564b68fb7e1cd71312fc7bbbbdcdae3af9d18074fba81986917d942ba8549fd8f0e75c82efeff9fb49b84165046d5adb0f1ba6b6f2f1218b9039c40301d127e1aa267f2e2b9c033e0fea88002de13cb577"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x5, 0x81, 0x7}}, {{0x9, 0x5, 0xf, 0x2, 0x0, 0xdb, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x5bb8}, @generic={0xa6, 0x1, "ff2a9cbfd9abaa87783190011c2b56342ca8e2b21789230ec0557fe3bc25c8db53771a24afcd94f7654f261017f1ddfa8f72422d79909a0112419f8bc2d2292bb6fb96385ba2a19c650d34372c7d0acc9ef68d5f36134b09793c17610cddcb2099ef4af387ed48f57fa22d04006e4de5d3f5f54672f3cc64da240b02a933370a38f21bdf4439dc3ebd6e91b834b05153ca0df219cb3a9d39b9cc95a486faba09f5502c18"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x9, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x20, 0x6, 0x5, [@generic={0xd0, 0x22, "f8f2fcbf583900a0b9e953b2eed9525af1e361077e27a2e92000b716fe4ea9c5223aacbea0410971959c40b6e3d325c944c91703b558e13a14dcaa0b693d7ed363a3a6483f0beaf3609f8df00986301cbee1b9527e894c2a4d9eaa7e3af370129e0fb66bf6be8c7f2a1ba3c2c9d77725d2c5f3e43443c18f51d4073adbfd046a6a31845d90104d2c1bb31bd7d5f4fe34a9970054ee29747e90e891cf64c903ca5a676e9d81879c886117293d8c8ed70bb9ddd9aba217e32cfce0cb27d1ebd347654c4f225b58024c073c5e24a67c"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x9, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xfffa}, @generic={0x83, 0xf, "5d7ad1612c688642d13d649e6fd1261c1a7e8df81d3c0272e0cbfed86e087df7f52270f10728d0cb5db52e5e4c321c74ecc3b1b1cf63b8c837bbae245f37571a54eb7f7a77bce1866a6075b2e09210dae5c7da43c59de4f720ec9f1d21229c7f1756c393872bdb3ee59c754f283b2b52e46cec7f5faa5d3f5feab98fb37f774f6f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x80, 0x80, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2a, 0x3}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xff, 0x2, 0x20}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x4, 0x81, 0xff, [@generic={0x21, 0x24, "40fb23ea77460cfe652252d875c45e5979c77748326e9626988876ce45b36a"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x6, 0x55, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1, 0x484b}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0xad, 0x5}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x2, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xff, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x1f, 0x6, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x9, 0xf801}]}}, {{0x9, 0x5, 0xd, 0x2, 0x458, 0x80, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x208, 0x5, 0x6, 0x80, [@generic={0xf1, 0x4, "130184a0cd11a5bd44fbeb3647ccdc3b6b32b14a7bf2378c6060f951725f02eb82900481408b9a620c26a581649d3e5046d8379948ab4981ed7308a25110dc12063ca8902459e7f714634b28b054dc91419976b52f3a2dc40d97182be6edb1e1539f4976e1a01ff3f5e07a9c92d9e845b69fa09aaea8c180c939a68a29aac16449ec5315ee845bd95da7460fdf87eb4f18db13b526531f42ff2afbd8c7c428434893e7f464d22526dc586f875d37f0b6915518c67cf2102f52520b7ccd81205d911f9c95b6d64e89b7052d383897f8639c9d4176a93dcaf6180d4c2c71bfaee198714290e33bdc8cc72798f3fa437a"}, @generic={0x28, 0x24, "de19a5483014e18f23817af5d471a0f4390c17c9b67ff2417933a8f10c4f7e0ce7f7a8c2b34b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x81, 0x8b, 0x1}}]}}, {{0x9, 0x4, 0xea, 0x9, 0x1, 0xff, 0xff, 0xff, 0x1f, [], [{{0x9, 0x5, 0x6, 0x2, 0x400, 0x20, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0xdb, 0x66, 0x16, 0xf7, 0x3f}, 0x1b, &(0x7f0000000c80)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xb4, 0x0, 0x7f, 0xf0f, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x3, 0xff}]}, 0x3, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_disconnect(r0)
io_setup(0x5, &(0x7f0000000dc0)=<r1=>0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001000), 0x608801, 0x0)
r4 = accept$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001180)=0x14)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001240), 0xc00, 0x0)
r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0)
io_submit(r1, 0x6, &(0x7f00000023c0)=[&(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000e00)="af6732935adf14b906651e208c0812e40fe6341e77030f024c7636e007537e1dcff75843378da9d56d866496868e6c4fab850e94bec7c387053026725084276f226457765d5ec7fc95415808a39d7233e4b1c0b50b4c7a657d20bf093818e6f65a36ab7604546c8f1a18bac13bd39251247a1cbcfaf76326d31e331fbea906b09deb6ad43c27e76e59b506a897a991ad83eb583df89d515505c78a64b0781634206b775bc4ce88df6cd5e07554b8ad0b354da3de9249c138d6d9134c275ae9036411e2cd786b38ba1e", 0xc9, 0x713f, 0x0, 0x2}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000f80)="a49680f47581aa51883057902aeeae2a00a5b53fe130c17bc3f7e79fca8bbd7bb2fa7c0f5ceb832020303b57f4cc589c8045dd5971bd941aa6b5c2f19bbe37187d616aa2632564a71197dc9af023e1493e7cdaa1c76789", 0x57, 0xfffffffffffffffe, 0x0, 0x2, r3}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000001080)="d1d021cc4f6ae6122f703f661dae5188363889f950b3e7d6cfa30c266d1a694c2b6927991cc715ea46d9fb6d376de045c3e3205aa27652fb7e37a6c3540a4afbe0e546224a4e3b6564ee331d2870f6aeab1c5d9d6dcf39d16f6529f11b84e4cd6bbc7cc9539fe6619eb60362ec57ba79df507514a4dfdc37d6b9738c229b4b2a", 0x80, 0x3ff, 0x0, 0x1}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f00000011c0)="85909ef183610db6d3f5e4db1d615a8981d440a9eb8904ea69c687bbd98c255340a66b6c3e29cc8f98d50cc21ddf276fa4012bb573789c006d7c3c3d5c101ccd6e62", 0x42, 0x8, 0x0, 0x2, r5}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000012c0)="b6c690e6485825ff2ed03c333118ad7234b252fd381564b2268ecf5b21e01005425f06b86455", 0x26, 0x3, 0x0, 0x3}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x401, r6, &(0x7f0000001380)="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", 0x1000, 0x8000, 0x0, 0x2}])
r7 = accept4$inet(r3, &(0x7f0000002400)={0x2, 0x0, @local}, &(0x7f0000002440)=0x10, 0x80000)
pread64(r7, &(0x7f0000002480)=""/26, 0x1a, 0x2)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000024c0)={{0x0, 0x0, 0x0, 0x0, 0x7}, 0x40, 0x9790})
r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6)
setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000002540)=0x5, 0x4)
syz_usb_connect$cdc_ncm(0x1, 0x71, &(0x7f0000002580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x80, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "8600da"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x4, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x20, 0x94}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x1f, 0xe1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x4, 0x20}}}}}}}]}}, &(0x7f00000028c0)={0xa, &(0x7f0000002600)={0xa, 0x6, 0x250, 0x7f, 0x40, 0x4, 0x40, 0x80}, 0x20, &(0x7f0000002640)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0xc, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xe1, "676987aec098d95dea8790b0e3695856"}]}, 0x7, [{0x1e, &(0x7f0000002680)=@string={0x1e, 0x3, "132449df646585ff5cf5cb2db0efc27b37fda5c7b7c6b106dbfbe22e"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x402}}, {0x82, &(0x7f0000002780)=@string={0x82, 0x3, "3f3df72708e21d11959e6b14c733914ddba23a776c29b544b273ab8343fa2a6cc6925084bd2074e28179290571ccb0b0418d564d809c36f2eda973a8962bb08f621acb1b8e9c4b1c3eed1d7376fa8eb8e56b1e9c3bd6a7c46687c47464baceb55bb9b015904ea7fb1ac3852b0311f005e2b5b04eca4aaa498eadcca4de1220cf"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x413}}]})
r9 = socket$inet(0x2, 0x2, 0x9)
getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000002940)={'HL\x00'}, &(0x7f0000002980)=0x1e)
pipe2(&(0x7f00000029c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80800)
ioctl$int_in(r10, 0x5421, &(0x7f0000002a00)=0x10000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000077440)={0x53, [], 0x8, "b1e55ab4a91995"})

22:47:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2282.400679] FAULT_INJECTION: forcing a failure.
[ 2282.400679] name failslab, interval 1, probability 0, space 0, times 0
[ 2282.402522] CPU: 1 UID: 0 PID: 16899 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2282.402551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2282.402563] Call Trace:
[ 2282.402570]  <TASK>
[ 2282.402578]  dump_stack_lvl+0xfa/0x120
[ 2282.402612]  should_fail_ex+0x4d7/0x5e0
[ 2282.402644]  ? __kernfs_new_node+0xd3/0x870
[ 2282.402677]  should_failslab+0xc2/0x120
[ 2282.402710]  kmem_cache_alloc_noprof+0x72/0x680
[ 2282.402745]  ? __kernfs_new_node+0xd3/0x870
[ 2282.402776]  __kernfs_new_node+0xd3/0x870
[ 2282.402815]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2282.402855]  ? lock_acquire+0x15e/0x2f0
[ 2282.402881]  ? kernfs_root+0x23/0x2a0
[ 2282.402914]  ? find_held_lock+0x2b/0x80
[ 2282.402947]  ? kernfs_root+0xee/0x2a0
[ 2282.402994]  ? lock_release+0xc8/0x290
[ 2282.403017]  ? lock_is_held_type+0x9e/0x120
[ 2282.403048]  kernfs_new_node+0x13c/0x1e0
[ 2282.403078]  __kernfs_create_file+0x55/0x360
[ 2282.403112]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2282.403149]  ? __pfx_dev_attr_store+0x10/0x10
[ 2282.403189]  internal_create_group+0x571/0xeb0
[ 2282.403236]  ? __pfx_internal_create_group+0x10/0x10
[ 2282.403276]  ? kernfs_add_one+0x150/0x830
[ 2282.403306]  ? kernfs_create_link+0x1be/0x240
[ 2282.403339]  internal_create_groups.part.0+0x90/0x140
[ 2282.403366]  sysfs_create_groups+0x29/0x50
[ 2282.403387]  device_add+0x67e/0x1830
[ 2282.403424]  ? __pfx_device_add+0x10/0x10
[ 2282.403456]  ? lockdep_init_map_type+0x4b/0x240
[ 2282.403484]  ? __init_waitqueue_head+0xca/0x150
[ 2282.403517]  netdev_register_kobject+0x1a9/0x3e0
[ 2282.403551]  register_netdevice+0x1332/0x1d70
[ 2282.403585]  ? __pfx_register_netdevice+0x10/0x10
[ 2282.403609]  ? mac802154_llsec_set_params+0x490/0x570
[ 2282.403657]  ieee802154_if_add+0xc73/0x1140
[ 2282.403695]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2282.403728]  ? __pfx___mutex_lock+0x10/0x10
[ 2282.403752]  ? skb_put+0x138/0x1b0
[ 2282.403785]  ? __nlmsg_put+0x159/0x1d0
[ 2282.403824]  ? genlmsg_put+0x265/0x2e0
[ 2282.403859]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2282.403887]  ieee802154_add_iface+0x472/0x970
[ 2282.403923]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2282.403955]  ? trace_kmalloc+0x1f/0xb0
[ 2282.403991]  ? __nla_parse+0x42/0x60
[ 2282.404024]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2282.404055]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2282.404094]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2282.404125]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2282.404172]  ? security_capable+0x2f/0x90
[ 2282.404205]  genl_rcv_msg+0x532/0x7e0
[ 2282.404239]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2282.404270]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2282.404317]  netlink_rcv_skb+0x147/0x430
[ 2282.404344]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2282.404375]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2282.404419]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2282.404450]  genl_rcv+0x28/0x40
[ 2282.404475]  netlink_unicast+0x5a7/0x870
[ 2282.404507]  ? __pfx_netlink_unicast+0x10/0x10
[ 2282.404550]  netlink_sendmsg+0x8a3/0xd80
[ 2282.404583]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2282.404626]  ____sys_sendmsg+0xa67/0xc20
[ 2282.404660]  ? copy_msghdr_from_user+0xfb/0x150
[ 2282.404686]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2282.404730]  ? lock_acquire+0x15e/0x2f0
[ 2282.404760]  ___sys_sendmsg+0x10f/0x1b0
[ 2282.404787]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2282.404809]  ? perf_trace_lock+0xb5/0x5d0
[ 2282.404841]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2282.404865]  ? proc_fail_nth_write+0x97/0x220
[ 2282.404902]  ? lock_acquire+0x15e/0x2f0
[ 2282.404926]  ? __fget_files+0x34/0x3b0
[ 2282.404953]  ? find_held_lock+0x2b/0x80
[ 2282.404985]  ? __fget_files+0x203/0x3b0
[ 2282.405011]  ? lock_release+0xc8/0x290
[ 2282.405041]  ? __fget_files+0x20d/0x3b0
[ 2282.405081]  __sys_sendmsg+0x150/0x200
[ 2282.405106]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2282.405144]  ? __pfx_ksys_write+0x10/0x10
[ 2282.405186]  do_syscall_64+0xbf/0x390
[ 2282.405215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2282.405236] RIP: 0033:0x7f056dbbbb19
[ 2282.405253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2282.405273] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2282.405293] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2282.405307] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2282.405320] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2282.405332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2282.405345] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2282.405380]  </TASK>
[ 2282.498380] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2282.507068] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2282.515887] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2282.520017] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:47:43 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
open_by_handle_at(r0, &(0x7f0000000040)=@ocfs2={0xc, 0x1, {0x8000, 0x6579, 0x2}}, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2, {0x1}}, './file0\x00'})
vmsplice(r3, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0xfffffffffffffec1}], 0x2, 0x0)

22:47:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ppoll(&(0x7f0000000140)=[{r1, 0x80}, {r0, 0x2292}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000040)={[0x200000000000]}, 0x8)

22:47:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf00}}}}, 0xc0}}, 0x0)

[ 2282.607652] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:47:43 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
open_by_handle_at(r5, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0x1, {0x7, 0x7fff}}, 0x12400)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="dec268e5021076ea31a9a77337f421f54d8e38d0", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2282.621641] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2282.629873] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2282.647796] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:47:43 executing program 1:
pipe(&(0x7f0000000880))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x8)

22:47:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2282.733623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2282.736069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
22:47:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 63)

22:47:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf000}}}}, 0xc0}}, 0x0)

22:47:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2283.031950] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2283.040946] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2283.052853] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2283.055207] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2283.116070] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2283.117753] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2283.119552] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2283.122123] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2283.552943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2283.554989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2285.078403] Bluetooth: hci1: command 0x0406 tx timeout
[ 2285.142387] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2285.143486] Bluetooth: hci4: command 0x0406 tx timeout
[ 2285.144515] Bluetooth: hci7: command 0x0c1a tx timeout
22:47:54 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a0983e9183445be00000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
ioctl$FIONCLEX(r2, 0x5450)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/87)
socket$nl_route(0x10, 0x3, 0x0)

22:47:54 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040090}, 0x40000)

22:47:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x300, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:47:54 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)=0x47)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newpolicy={0x268, 0x13, 0x100, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast1, @in=@multicast2, 0x4e20, 0x7, 0x4e22, 0x1000, 0xa, 0xa0, 0x0, 0x32, 0x0, 0xee00}, {0xfff, 0xc000000000, 0x9, 0x8, 0x80000001, 0x4, 0xffffffffffffff1e}, {0xbe2, 0x5, 0x8d, 0x2}, 0x0, 0x6e6bb7, 0x1, 0x0, 0x1, 0x1}, [@algo_auth={0xfa, 0x1, {{'poly1305-arm\x00'}, 0x590, "71bc84fbb5b2659e4389c41ff284eda3e917a8cb6021eb1cd144fb87f2081116e408920779e6ea0eca53a0957c7504f86db630d9b59e49e1721bb4b958bc4edde8038031e1d556653e3349c53046b03f41fbfff52993c2a9b845f431c3dfe97a6d310fbf01cf79c84c2bdc2b0565184af26559606de742b657b1063605ac01e1a7cf3ab786c7754f6ba16e897fb856efe41155f6976a26650f1a2db8e351b37e6ba3c240ba279ca790c8f47c11ffa5f1bb32"}}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0x32, 0x70}}, @tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d5, 0x3c}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x2, 0x1, 0x1000, 0x8, 0x9}, {{@in=@broadcast, 0x4d5}, 0x2, @in6=@private0, 0x3507, 0x0, 0x2, 0x7f, 0x5, 0x8}]}, @replay_thresh={0x8, 0xb, 0x8001}]}, 0x268}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xafc}}, './file0\x00'})
read(r1, &(0x7f0000000400)=""/118, 0x76)

22:47:54 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00eea700f715000094f9ffff90526bbc0253533fbc370836efba0ca8443a5303000000bf14a9c1e4ecaad9449580695cb1b55bace3"])

22:47:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x80000}}}}, 0xc0}}, 0x0)

22:47:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 64)

22:47:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2293.167631] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
22:47:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pwrite64(r0, &(0x7f0000000200)="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", 0x1000, 0x24000000000000)
syz_genetlink_get_family_id$nl80211(0xfffffffffffffffe, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
fork()

22:47:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xc9ffff}}}}, 0xc0}}, 0x0)

22:47:54 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02000000000000000080680000002e00c7000c0205040507e244ff031f000305000067044d060007040185017d0505058301dd08c4ec77106a5ce5730000"], 0x44}}, 0x0)
r5 = getpid()
pidfd_open(r5, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0xff, 0x8, 0x1, 0x0, 0x5, 0x1200, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp, 0x93, 0x8, 0x7, 0x6, 0x7, 0x5, 0x2, 0x0, 0x401, 0x0, 0x1000}, r5, 0x9, r6, 0x1)

22:47:54 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58)
setxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27, 0x0)

22:47:54 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
write$bt_hci(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1007)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8000, 0x1ff, 0x5, 0xfffffffffffff000, 0x200, 0x10000000000000}, {0x7, 0x597c8d40, 0x5, 0x80, 0x1d52}], ['\x00', '\x00', '\x00', '\x00']})

[ 2293.318397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:47:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x3d8, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2293.335327] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:47:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf0ffff}}}}, 0xc0}}, 0x0)

[ 2293.386572] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2293.393390] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2293.475940] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2293.476739] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2293.485757] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2293.486755] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2295.510395] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2295.511710] Bluetooth: hci4: command 0x0406 tx timeout
[ 2295.512725] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2295.513720] Bluetooth: hci1: command 0x0406 tx timeout
22:48:04 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
pread64(r0, &(0x7f0000000000)=""/8, 0x8, 0x4)
flistxattr(r0, &(0x7f0000000040)=""/238, 0xee)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)

22:48:04 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}, {{&(0x7f0000001480)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0}}], 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="5782c5df2f158fb835651a3cb2d0cd65588edac0ba7eb30ae3dc6aa1524cc7b33d2bd7dcdbd01c38044e02cdd1d7254cc3d5553ba60f6c7e5e0fa5c8551b47c0b07f7b4e224787f500607d2a79a424d05024eafab7b1f2300728f3558f3627712433ab6092a00b82b7b5d68325364c819cb052f685c1", 0x76}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000180)="dc8f234b4f377bd81d5e90a0260be66ea3d393a5fd4680b6d642698f9deed4d904f11c5406a75693d5ec7647d5c4d7b72707941dd07dfacd057921413a4507358ebf160f19ed110f5152130887b9e5e495f0ae45964ece92e1e19cc48baba891dbd95885a54dd41d6b21ab262320c8d574abbb3130c05434015b3f", 0x7b}, {&(0x7f0000000200)="31c71b3297b9802528791cd2ed84a0a3b0a8c079bc9e35a809b0a1fdaf68b05fbe00869da37f229afcdcfa9ec0100b94cb9ffa7ed52a02200f3dd8c6362b4d9e0c03078761e0f7615705b28102402ae0add9432f2d54daafac94bd55b54f00e95ff95474b5869eca012f44a081d09522167b490bbf51960349fc93423da3c1355a6a77eda2615244a6", 0x89}, {&(0x7f00000002c0)="7e369edb65e30849026df20cbdd3a535509cad7667c7f32a7454ddb077299eeb3301e1290193916ce52a2cb658ec76be29caab8c89596562fe650910b3bbfd62c66a06c5d2ba2cd194ea97a2dd23975fe73951dec53e999c34bb4372658c58ea7a444ff366021aa7e48880fb5c23fc4fc0d30ef3b2b9fa4bb8d44cfa", 0x7c}], 0x5, &(0x7f00000003c0)=[@rthdrdstopts={{0xf0, 0x29, 0x37, {0x2b, 0x1b, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @generic={0xff, 0xa1, "f6d521931d91a64f9e7ec6f54be131de7e6d70ee830ff4ef79963fc1ea005ae450fdffeb28800b5f5743009a134a7a0d6883cd5cef2d2f37120b144205cb0dc61154d0f3036c7ca4ae17d9182404f12da6fb5250cdfb2b4b9c0355be54e9b55213017986cff748e248aa5d60532a1cc2e592f599907b1d4fa7cc8cb25940fdfa7b6573878e5148da6d80b1f316c73a030afae87acaf47d0a7c9e6b63a3a3833d1d"}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0xf0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000003480)="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", 0x1000}, {&(0x7f00000004c0)="e7005b0f9f92d87a82db", 0xa}, {&(0x7f0000000500)="ffc9eaaa06a15615b4754e4fefac5760413780429da29a3fa35bf36624c3c7fd399152e9df4933a4c179f7549947ab963819d235f302fa708dd81f08db4ffd59ce1942dac3e16c0251cf71aa3eaff892a2d87c", 0x53}, {&(0x7f0000000580)="cb4aac99125f9288c3d02d9b06be842a1411b4c7530f4319a325307336", 0x1d}, {&(0x7f00000006c0)="537d3679a2a77fdea8080929a3c8cf9e7e232816bc6b6ccdac09fb74ac5b783b513fbff4e88aedecf2c02b1fe510743102745359465f8faae901afc92f3af7531f7c319bd92a882d728dbf9febab77b2f81f34f9edb53e068cfcab03ba85b7a86b62f3f9e0846edddf126a16ce63d41342a48173800b61c4288206583cbb1b88742e96864665df8d9c5d8ffde109661e42a741d138d37cf2fa277f105ff4c0f683ac", 0xa2}, {&(0x7f0000000780)="46e221756f7ad9e2083e2e363c15e3", 0xf}, {&(0x7f00000007c0)="1a253d57bcb34438d9ab067c7a5b57e2e90efeb701e48111fa4e8dc6552a876a117c97b059c130716f062bb344ee27b5f0278a0d034ee5073eff2e780c305423e0167b8eb010f87b3bce38ef9cbd7ff1ca85e3c4c14bcfea9c0cf1576d858daaf1567a42f94656c10a72", 0x6a}, {&(0x7f0000000840)="14373cc30ff04d16957475cae6db1a263cece2e064c8ade95b9f67237bae644c4172e4c9ffc13f", 0x27}, {&(0x7f0000000880)="13993a447f2cd449c6a99665f7c7abc179dbb67136eeb860a7aa28061abb365737d1658216d71e914b352eaeed49282ff4098bab60e62a4e33c9e9e8777d852dbd427c684afc7451ade50190eb94f628ee8ca429cd412f2b763946d2a728b98f022224e6f127aa65e78119ce5854a3ce767cfe409b5776981d273c976049b2337e554f3abc30ed0e0c27131e87c1e9e5dd209ae06541d8063861657c619b03c7d2c885baa10294ddd40c50", 0xab}], 0x9, &(0x7f0000000a00)}}], 0x2, 0x20004016)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac14140900000000000000000100000023db0000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)

22:48:04 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x0, 0x4, 0x0, 0x3ff, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x3}, 0xb691e59ae1c90c06, 0x0, 0xffffffff, 0x4, 0x2, 0x3, 0x3, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, r0, 0x18)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:48:04 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x3}, 0x1c)
getpeername(r0, 0x0, &(0x7f0000000180))
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in=@rand_addr=0x6, 0x4e21, 0x0, 0x4e22, 0x2, 0x2, 0x60, 0x20, 0x33, 0x0, r1}, {0x101, 0x4, 0x2c9, 0x7fffffff, 0x0, 0xfffffffffffffffa, 0xe6e, 0x9}, {0x4, 0x76e4, 0x5, 0x3}, 0x5, 0x6e6bb8, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x33}, 0xa, @in6=@mcast2, 0x3501, 0x3, 0x0, 0x0, 0x14a, 0x1}}, 0xe8)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000001c0)={0x3, 0x101, @start={0x0, 0x1, "80b7c203b0c9a9bdfbb7108e55d7afc34d7ae5887fd1bd6d564b6961856a7ea6ac3084827380dcb98a058513addb94e03fd765b00c3b9b031cca764c99b736d50735356dfd8f5f0aa4c9e7f4b57d1a5cc0f2a042e6050e6f091034def1445b9cc79ed282489b75b91ffd577e903e44ce625105a5e1a312d3d8788faf7daa56f7b50423753f09f1253dea70551f94d551b3b2f1363a4ca81b836800b3f2735932b334c1c11079af29e82db3ff5528be4d42f0d4736c1ed741f3cfd0a685f33c094312ea253eaa4ca9ee1915a14392ec70da5d55f1385ba6c0c4be56ccdfc7bc379b620776ce01aa6038feda2ead37d9a0bcb7911041385a0c4f41f14c6a5da6c17614567c288d25a122365c72003aeb4d8ab595bc2f2f8cca958060a61f938e553af83940b006a2ea26a412c5574184e5023fd40d0267d639de4b99afa1ad3af42b3506cb59e23913e0b093e35b58a2018c5a507e1fafbf654dbcb9875c466506df1097d1144d987a00675f53329c77187f9c489565b1d666dceede718044d7332d7f9a5d1bac17b74f5d375baedbadf8040299f1b8ac39645746edf3cdea030aa2aec82f6a475aab1f3bc7e1de066157117337e7400b5aa8f1fceb977ed417a7418b6f770e939568c198f3ad0e189ef0ae07d756467ca40fed265363634c85771c9fc6045cbf962faa4d673e653cb1089d458cd491e1abf22b5a815b204055590fe92e83cb03a7322575cea40227c32c1e87cc18178823c6c8d78e9df4f485d880ff9ecb3c837e618ed83f696e5a5f74d56d48c00f73511fb98d2f1510bbe07fcd0c85da6f28027e82bf2c429fb9956e4ee707f978389e5bfd4c2f8668710323b94e5d0048c96cbb1d5d4b0e5e0b0ab380c59917a3d2bbeec56ac8e5bdb0422448031ebc15426b616b62028c4d1425160a9330a699b6af3382c6a9d113e4b0b42d396f978118b7dd2e3f3ba270e746c3fd43f0af3479b664bb531ab8253aa228f6e4f68082b6c479a5497a7cd6c2a279f94730511a21676ee151477057640f53f4d27c175f38a2e2fa5d7c73f7389d392a0ed6015005da1998ab0159b1be6e653d5f079d4d400a931fde59d684df8d9749e35c9aa2a3459a01f51b54983f31073e08ad0bc2633111e0de79d22fe0646036d5f0d627e3444320e5a51f312a91fad6dde316c2bad4891e93bbdd4cea5b9c375f1dc612c93452bf740b979f467b0b82a46430879ed9c0915abe2fc053bf8dd84e0a8d30d493023b7d036aa2ed6145abba05491e45bce293d82f2027419645641d102124ec7b4aac0512a33a8709504c105e8a89d2ca8fe315aa0529b5e63c0e7db78f46417d049ae8c697e9d6ed26d4951505fdcdf3b6cc1ba64d559d5222c53e795c31591ca16884bafbc1adf6d0f993a54cfd32d9b6cb18acf64b045d14558dc434c4989df929e750495dfa4340e7", "48abb0f9555f8ddf5f131680d9744648a8a7e9fc900b76d7aa9b87cf23b85b6b2d380b0732f4a32a6c362fdf0e165ef48767731e383341dc1eb5588100fdd94d96bd12ef9087240a5be3332f4063b275f86dacffe39feedc1da1436a8665e3e8cabafc59c78e180ebe637399934fbd7cb8aa65a29820f7b223462c3f8d761a4611ae3622db7be771c5016137b2f47a15bc6f65756fc2ed40db08c16452e9f7804a266afe09d948b15dcff65738540ad6c2272dc7dc129c12762cd89f8a6c7e0058b3fc9b61e5f624a2f4896deb6dacb8d7b8bbb921950064fe98c29b25e4fa8f9e9dba88046a11080fe6c400632a3a3e03ac655b7c75e9bfdafcb98a4ec524454d7b76cc38648ac130a4be4183d8a272baff0f6c4c7018b31a013c0c64cff4c9fe6d218f450b874c9a4d1480175409758c95a6ec587a65fb8e7c8a23b28b2dbe2c294a6d7cb4a73915bcee8290d6fe2a5370d7aa9a91e0d5c9ca48708e4700ffb50201ccdd3d7672bbab398d4ee3ff858b1054fe4fe3e3b14def6ab1a2415a7fe0eabc458011f2279388a663157e4d412955f25607809a189c56fc3815960b3dcf91f983082ba03a2a37a5f8c36fb0094a7f792a721570e8f7d8db79fc9c8591759ce8bf219a425c6636bab1ee95faafd4ebb537186550991104393528f0b6cafe949b4f9250b527a694de26b836051e7c1ae7678d160d4b8f19371011c1b4c310cd3b4971277a1375c038c80806546a87cb8010b4fefb73971eca92d698dd9f3faeb6db87f3bd6d506d23014bde2c26221b0f8914000648fa901d0e14bca007a7654b72050470b1ffeb91dfb077c0f156c9227354cdfd053358fcd575cd1847d6046a2d09287140e9e04b21e5d590a9a79ffe92d75314210e427b5c46aa4e2dbe971787f3f30d4fe87ccf79c80135e1e75309f479c2ee11dceb0aa660efcce3ff3c4482de2b8bf5fbd0863c9bc70b03aa7b90dc23f708bddc6ea22b5ea7587ac346d940b98b232e4b6a726fc8b9183e3bda3e80e0194d66a39376472809db0b5d0a0e90b200d6159a733bec29a306733a630a0b127f91913067f83010b0b74f45e618f040d6c86b1b86716f651b9876eb3e95185c0d3af1404e60c3358706ac1e8366e2f5aa239e68208cb5ff8251b558fb68d7708757bb06120949e6466ecac4dca314f42508162fbe9180384ffaa3b30dc1c8e7efc44badb976dfa5d4bd0d6dcd955bd8de8e2eaaf29a80ad173fd346e570b69d22db8b4225edb0f1da9f8e17c82e449e5fa0af6f23c392b0501fdac26484700258ee9bcc729f8204f5bf610b32c186a820fb03cdcb6d9a7d5f191f54d6e6df13bf0155c0444115849cc6c105ac476e1a9a6ac36915fbf00e5e2de38b184528249c3d711eb61c14b02239f829f81fbf92d241e0ef49f78bc5754a05604f6115114c19736c97ab508335e0d504"}, [0x4053, 0x7308, 0x5, 0xffffffffffffffff, 0x81, 0x12f, 0x9, 0x9, 0x0, 0x4, 0x8, 0x1f, 0x0, 0x101, 0x3ff, 0xffffffffffffffe2, 0x2, 0x1, 0x4, 0x1f, 0xf13, 0xff, 0x4, 0x0, 0x3, 0x8b, 0x200, 0x6, 0x401, 0x7ff, 0x2, 0x9ce, 0x7, 0x3, 0x6, 0x10000, 0x80, 0x10001, 0x21, 0x5, 0xfa, 0x80000000, 0xffffffffffffffff, 0x9, 0x3ff, 0x3, 0x5, 0x1, 0x0, 0x4, 0x1, 0x8001, 0x3, 0x3f, 0x6, 0x5, 0x401, 0x92, 0xffffffffffff7fff, 0x100000000, 0x6, 0x3ae509f7, 0x289e, 0x8]})

22:48:04 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x1000000}}}}, 0xc0}}, 0x0)

22:48:04 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x900, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:04 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x700, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 65)

22:48:04 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
r3 = pidfd_open(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000))
r4 = getpid()
r5 = pidfd_open(r4, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)={0xffffffffffffffff, r3})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x1100)
setresuid(0x0, r6, 0x0)
getgroups(0x9, &(0x7f0000002540)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, <r7=>0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0x0])
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
setfsgid(r9)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000001b0001000000000002000000ac14140000000000000000000000000000000000000000000000000000000000000000ca268f45c0515375db46fc5f3f00"/77, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
sendmmsg$unix(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="a6b94b4e851ffe3a462f12ba86a1580ff3009764539c7337a5327bd6daeb6288ef61a5469aa6f2c987871396b00ee4d811afc968a193c99ff3900bd6", 0x3c}, {&(0x7f0000000080)="7ea3a2c31b2fac609e2b993adbc03b930e7d113f8fe9a0a0354a4572f2ad29f5e2cc0adc3d48ad02a4b8ee33cf2dfbbc7fdce9354093ee70d7a5a83c62c9b115192e8bae4b8440f05d0565275fc0c91c23c87f576b2db4d66f95cc1fda", 0x5d}, {&(0x7f0000000100)="dedcb80dc0d34c7c199c199904e33acaca6d0f21609547a57d7fe287345f6536490daef1088f2460d178e6796837ec2056e4bbd373add22f84028b8f2015f981d76579e19e22b46d4d1f3fc53425e5934555", 0x52}, {&(0x7f0000000180)="d887a839f63d283c1630e5e41726cd29d817e711bad67fd44c43d3f2089717a93defb9e0c2aafe037da4518422ac320b1beec84031dcb5a3e74c6a592c6b910b0a51db4564da01eaa1a975333d365935af53fab14d9e8675e9e0428a7b7c4e0e29989c8db8bd40c33ca08717457977711f5df8e42d4112aadba1cea3f5f38bf3e20fd3d982be81007301dad7d73f22a975899f7d8ff3ff47907a2defb6d4de07c63ff46f15d0514345b019d324e8f976c21d51892573750db95d3d04820e548234e20f2ec1299f0afa62a0d20ddb8fc69490262d0e0d166dd4", 0xd9}, {&(0x7f0000000280)="c5a5d10397eb495fbb1ad9835a261867c0f1d5900c9374d4f660ab4026515bd73e9aec86df7dbde291b5e6548e4f9c156c6dc2ff2a2f8468e4ff26b692204eb3bab50314451a7eed61a48fc93e83e97b18a44e4ef5aafa2fe54a401737f39448461ce97699c64bce1a862299ee7cfa03696e8937ba789e", 0x77}], 0x5, &(0x7f0000002580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}, @rights={{0x24, 0x1, 0x1, [r10, r11, r0, r1, r0]}}], 0x170, 0x20004005}}], 0x1, 0x20040000)
write$binfmt_aout(r0, &(0x7f0000000980)=ANY=[], 0xfdef)
recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2303.472601] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2303.482600] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2303.485859] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2303.496203] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:48:04 executing program 1:
vmsplice(0xffffffffffffffff, &(0x7f0000001340)=[{}, {&(0x7f0000000040)="f1e5917ead7927cca47da9fe04eb2627731f4529c3c9bac5e86cc6d310f0f789ddcb75d28e2e92ab86a6f47a2ae636ecd0f274994a321c30f105091bd1462d91e45c4eb1e8ccb0d6ce1187604f383d27b9ec102abf8cbb7fbb37ba9286d3bd6e22da7a283ec838e273c066b7e8d2da8b1ca755edc32956a958f337733412dfeb916d5e680fa88263d5e228642db5b4a3cea5ac732836afa2beb7305f9013f65b81911d163ed6e8ed77433153e15d43", 0xaf}, {&(0x7f0000000100)="44a612d158c8be127e332c19e2eb96022d342168b6aeb25490ef7fd79ac4bcbffe71d5af87586ed85eb8fa947f9b4f1596d2478a3fa408eb71ad9032081cff876d9c165c342d250fbf224268c6f9262755ec44f6ea942e09bffa587ab13c4ee3582a0e0eda80df93e82c78efb7592e3aee08132e63e3e392a1b39bdcc8322d", 0x7f}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="5837166652e5291c935c5853af07a8c926a4b1f68a7d28a2feb49631ba0bf8488c071f356809e550e229359be7b9a2e488ec19c6407d2ddf1b5a2fbf0a7f994f2bfa1987fbf3c05ce5c5113a39739acb0cab4aa6d750bc315eb8a8e18a", 0x5d}, {&(0x7f0000001200)="ec576c4eab3f0c518b09d73256f6f329ad80d7661da1810e9eaa2d247aa6f0b3b1346585891338e34702ba481ae7dca43855221437ee06619e7bcc9e80992b929e0bb0287a29ef", 0x47}, {&(0x7f0000001280)="90430a80dc9c1ebdb954aba35e8abb1a3f6553aad2aca4305b8a79b47cac193398da4e6dfa46d40b2d4da19af77395e76979735eb4671b8b66e54014d028474e690afde41f3aa8a1bd58f52ca06d21c5cfd645fcedcfac4403825fb78e271e12d7f393a1febeb64bbb3448590f", 0x6d}, {&(0x7f0000001300)="6de0916c", 0x4}], 0x8, 0x0)

22:48:04 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x2000000}}}}, 0xc0}}, 0x0)

22:48:04 executing program 6:
syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x9)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e08c422e7d253e73500"], 0xb)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{}, @hci_ev_le_data_len_change={{}, {0xc8, 0x2, 0x7f, 0xc65c, 0x5}}}}, 0xffffffffffffff3d)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x2ab40, 0x0)
syz_emit_vhci(&(0x7f0000000800)=@HCI_VENDOR_PKT, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000005c0)=ANY=[], 0x54)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0xa)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x17)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x7f, 0xc9}}}, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x3ff, 0x323800)
faccessat2(r0, &(0x7f0000000040)='./file1\x00', 0x1a1, 0xa00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffff85ffffff89112576fe610c7e3ef659cdd25a9c60f67ddf05a746b9f91dcb98b1a7b77d80dcbeae032327fd7f2073c02fd7406edae7ac"])
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7c333252fb20607e)
syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYRES16=r1], 0x90)
clone(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

22:48:04 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf00, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2303.561569] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2303.565003] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2303.565718] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2303.568743] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:48:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 66)

22:48:04 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2303.643886] Bluetooth: hci6: unexpected event for opcode 0xe722
[ 2303.645064] Bluetooth: hci6: unexpected event for opcode 0x0400
22:48:04 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
r3 = pidfd_open(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000))
r4 = getpid()
r5 = pidfd_open(r4, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)={0xffffffffffffffff, r3})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x1100)
setresuid(0x0, r6, 0x0)
getgroups(0x9, &(0x7f0000002540)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, <r7=>0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0x0])
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
setfsgid(r9)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000001b0001000000000002000000ac14140000000000000000000000000000000000000000000000000000000000000000ca268f45c0515375db46fc5f3f00"/77, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
sendmmsg$unix(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="a6b94b4e851ffe3a462f12ba86a1580ff3009764539c7337a5327bd6daeb6288ef61a5469aa6f2c987871396b00ee4d811afc968a193c99ff3900bd6", 0x3c}, {&(0x7f0000000080)="7ea3a2c31b2fac609e2b993adbc03b930e7d113f8fe9a0a0354a4572f2ad29f5e2cc0adc3d48ad02a4b8ee33cf2dfbbc7fdce9354093ee70d7a5a83c62c9b115192e8bae4b8440f05d0565275fc0c91c23c87f576b2db4d66f95cc1fda", 0x5d}, {&(0x7f0000000100)="dedcb80dc0d34c7c199c199904e33acaca6d0f21609547a57d7fe287345f6536490daef1088f2460d178e6796837ec2056e4bbd373add22f84028b8f2015f981d76579e19e22b46d4d1f3fc53425e5934555", 0x52}, {&(0x7f0000000180)="d887a839f63d283c1630e5e41726cd29d817e711bad67fd44c43d3f2089717a93defb9e0c2aafe037da4518422ac320b1beec84031dcb5a3e74c6a592c6b910b0a51db4564da01eaa1a975333d365935af53fab14d9e8675e9e0428a7b7c4e0e29989c8db8bd40c33ca08717457977711f5df8e42d4112aadba1cea3f5f38bf3e20fd3d982be81007301dad7d73f22a975899f7d8ff3ff47907a2defb6d4de07c63ff46f15d0514345b019d324e8f976c21d51892573750db95d3d04820e548234e20f2ec1299f0afa62a0d20ddb8fc69490262d0e0d166dd4", 0xd9}, {&(0x7f0000000280)="c5a5d10397eb495fbb1ad9835a261867c0f1d5900c9374d4f660ab4026515bd73e9aec86df7dbde291b5e6548e4f9c156c6dc2ff2a2f8468e4ff26b692204eb3bab50314451a7eed61a48fc93e83e97b18a44e4ef5aafa2fe54a401737f39448461ce97699c64bce1a862299ee7cfa03696e8937ba789e", 0x77}], 0x5, &(0x7f0000002580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}, @rights={{0x24, 0x1, 0x1, [r10, r11, r0, r1, r0]}}], 0x170, 0x20004005}}], 0x1, 0x20040000)
write$binfmt_aout(r0, &(0x7f0000000980)=ANY=[], 0xfdef)
recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2303.707434] Bluetooth: hci6: unexpected event for opcode 0xe722
[ 2303.712161] Bluetooth: hci6: unexpected event for opcode 0x0400
22:48:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x3000000}}}}, 0xc0}}, 0x0)

22:48:05 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x11, 0x22, 0x13, 0x1c, 0xb, 0x3, 0x5, 0xeb, 0x1})

[ 2303.765144] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2303.770833] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2303.774502] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2303.775215] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2303.804242] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2303.806777] ata1.00: non-matching transfer count (0/1)
[ 2303.810360] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2303.812275] ata1.00: non-matching transfer count (6656/1)
22:48:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x2000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:05 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000540)={0x1, 0x0, 0x5195, "ca"})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)

22:48:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x4000000}}}}, 0xc0}}, 0x0)

[ 2303.846828] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:48:05 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 67)

[ 2303.849495] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2303.855313] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2303.856048] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2305.814434] Bluetooth: hci1: command 0x0406 tx timeout
[ 2305.878391] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2305.878455] Bluetooth: hci4: command 0x0406 tx timeout
[ 2305.878941] Bluetooth: hci7: command 0x0c1a tx timeout
22:48:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 68)

22:48:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xd803, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:14 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0), 0x0, 0xc)
openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22440, 0x0, 0x10}, 0x18)

22:48:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x703, 0x0, 0x0, {{0xa}, {@void, @void}}}, 0x14}}, 0x0)

22:48:14 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xd16, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x7010000}}}}, 0xc0}}, 0x0)

22:48:14 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, 0x0, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x15a1619f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000100), 0x10001, 0x14900)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01cb9219da79f768a500000008000300", @ANYRES32=r10, @ANYBLOB="1400c70000000000000000001bae63230cbb2c11"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0xa438510dbe654489}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000e8ffffff0000006800000008000300", @ANYRES32=0x0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)

22:48:14 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = dup2(r0, r0)
fgetxattr(r2, &(0x7f0000000080)=@random={'system.', '=\x1b-*!\x00'}, &(0x7f00000000c0)=""/44, 0x2c)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400006})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000040)='c', 0x1}], 0x1, 0x498a, 0x0)
pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0x1000, 0x0)

22:48:14 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1)

22:48:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 69)

22:48:14 executing program 6:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x800049)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0xb0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

22:48:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2313.584128] FAULT_INJECTION: forcing a failure.
[ 2313.584128] name failslab, interval 1, probability 0, space 0, times 0
[ 2313.586401] CPU: 0 UID: 0 PID: 17131 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2313.586432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2313.586445] Call Trace:
[ 2313.586452]  <TASK>
[ 2313.586461]  dump_stack_lvl+0xfa/0x120
[ 2313.586495]  should_fail_ex+0x4d7/0x5e0
[ 2313.586528]  ? __kernfs_new_node+0xd3/0x870
[ 2313.586561]  should_failslab+0xc2/0x120
[ 2313.586594]  kmem_cache_alloc_noprof+0x72/0x680
[ 2313.586632]  ? __kernfs_new_node+0xd3/0x870
[ 2313.586664]  __kernfs_new_node+0xd3/0x870
[ 2313.586704]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2313.586746]  ? lock_acquire+0x15e/0x2f0
[ 2313.586772]  ? kernfs_root+0x23/0x2a0
[ 2313.586805]  ? find_held_lock+0x2b/0x80
[ 2313.586839]  ? kernfs_root+0xee/0x2a0
[ 2313.586873]  ? lock_release+0xc8/0x290
[ 2313.586896]  ? lock_is_held_type+0x9e/0x120
[ 2313.586929]  kernfs_new_node+0x13c/0x1e0
[ 2313.586961]  __kernfs_create_file+0x55/0x360
[ 2313.586997]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2313.587036]  ? __pfx_dev_attr_store+0x10/0x10
[ 2313.587080]  internal_create_group+0x571/0xeb0
[ 2313.587129]  ? __pfx_internal_create_group+0x10/0x10
[ 2313.587163]  ? kernfs_add_one+0x150/0x830
[ 2313.587195]  ? kernfs_create_link+0x1be/0x240
[ 2313.587230]  internal_create_groups.part.0+0x90/0x140
[ 2313.587259]  sysfs_create_groups+0x29/0x50
[ 2313.587289]  device_add+0x67e/0x1830
[ 2313.587329]  ? __pfx_device_add+0x10/0x10
[ 2313.587375]  ? lockdep_init_map_type+0x4b/0x240
[ 2313.587405]  ? __init_waitqueue_head+0xca/0x150
[ 2313.587441]  netdev_register_kobject+0x1a9/0x3e0
[ 2313.587477]  register_netdevice+0x1332/0x1d70
[ 2313.587514]  ? __pfx_register_netdevice+0x10/0x10
[ 2313.587540]  ? mac802154_llsec_set_params+0x490/0x570
[ 2313.587592]  ieee802154_if_add+0xc73/0x1140
[ 2313.587633]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2313.587669]  ? __pfx___mutex_lock+0x10/0x10
[ 2313.587694]  ? skb_put+0x138/0x1b0
[ 2313.587730]  ? __nlmsg_put+0x159/0x1d0
[ 2313.587772]  ? genlmsg_put+0x265/0x2e0
[ 2313.587810]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2313.587840]  ieee802154_add_iface+0x472/0x970
[ 2313.587879]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2313.587913]  ? trace_kmalloc+0x1f/0xb0
[ 2313.587953]  ? __nla_parse+0x42/0x60
[ 2313.587988]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2313.588021]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2313.588068]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2313.588102]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2313.588152]  ? security_capable+0x2f/0x90
[ 2313.588188]  genl_rcv_msg+0x532/0x7e0
[ 2313.588225]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2313.588258]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2313.588310]  netlink_rcv_skb+0x147/0x430
[ 2313.588339]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2313.588373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2313.588420]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2313.588454]  genl_rcv+0x28/0x40
[ 2313.588481]  netlink_unicast+0x5a7/0x870
[ 2313.588516]  ? __pfx_netlink_unicast+0x10/0x10
[ 2313.588562]  netlink_sendmsg+0x8a3/0xd80
[ 2313.588598]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2313.588644]  ____sys_sendmsg+0xa67/0xc20
[ 2313.588681]  ? copy_msghdr_from_user+0xfb/0x150
[ 2313.588709]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2313.588757]  ? lock_acquire+0x15e/0x2f0
[ 2313.588790]  ___sys_sendmsg+0x10f/0x1b0
[ 2313.588819]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2313.588843]  ? perf_trace_lock+0xb5/0x5d0
[ 2313.588877]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2313.588904]  ? proc_fail_nth_write+0x97/0x220
[ 2313.588943]  ? lock_acquire+0x15e/0x2f0
[ 2313.588969]  ? __fget_files+0x34/0x3b0
[ 2313.589003]  ? find_held_lock+0x2b/0x80
[ 2313.589038]  ? __fget_files+0x203/0x3b0
[ 2313.589066]  ? lock_release+0xc8/0x290
[ 2313.589099]  ? __fget_files+0x20d/0x3b0
[ 2313.589142]  __sys_sendmsg+0x150/0x200
[ 2313.589168]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2313.589210]  ? __pfx_ksys_write+0x10/0x10
[ 2313.589256]  do_syscall_64+0xbf/0x390
[ 2313.589286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2313.589309] RIP: 0033:0x7f056dbbbb19
[ 2313.589327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2313.589349] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2313.589371] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2313.589386] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2313.589399] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2313.589412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2313.589425] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2313.589463]  </TASK>
[ 2313.655081] hpet: Lost 4 RTC interrupts
22:48:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x8000000}}}}, 0xc0}}, 0x0)

22:48:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 70)

22:48:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x80000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:26 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
io_submit(0x0, 0x4, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000140)="8d9aba4a5bfcef44689297d190cf28c4908aa54cc4762734a1d859042c552a7f47101fd58deb5a38806d83ecd9d4572188f6fde8a211a567da1a2b4768e969434a476905646b2240d91c7d33e2c25ee9f2674d46e4ee9bebf3b47e466ea730a557e74c6d223e1a7fad12066ddab3be0c238020b2de91d99e448efb5bda9cd9e809b2ef8b47fa96b7ac22ec1bdfad5cb3f0fea1c91516b591a3e9842a11133c227eedab5a3b2186080830837521b900a802d686b2facdc1df3171d2a09edf7dcb3325ae", 0xc3, 0x5, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280)="a023b88795edec59d891f704129e9e6bbf8d607c82ffaca65522c9d37c0160f04b904bacb4d91a1b012e66c4ee34b4ef8ca616786045e9425c1cf7e20973f48324cad9c82e895866f66c9673be73ae9e11509ce14c3b011608c25f5d1b2ba41498665a635afbcae89ad2cdea920b28b0e430b0011dbac24f400afbe40c406125727d9d4a383d159854753362b6fecb3ef0d08e628ab95db0839b5914881dad7c9fb4517409d3cf26d1518de0f216cbc5653f68dad344d43287ae8999183e5d7a5bb3d814a6a3da743552fb60435f1a2bd9a7e0e9", 0xd4, 0x400, 0x0, 0x0, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="7714b87f02387e9220805d5697b4f5eb9fc062303196cceb819d7e1f0e1187fbdfa7edfa893795b51dbb18762cac985662a4d61c6f1963d13f60f94174b91839e228195aed977d00bbb112d4e4cafd559534d1b8a485ed67cf7fc5805d2a5da66742bde0bb597c5fa3abd8482361380f60da12ee74e4c67e90d449e87221844e56440b346dcdba65507463a967771b6001beb5b38c8adde899d21ab1470e8e61e6a43dfbf59304cd1bf00171a9ade45e7ddb014be7b66b5a6f8d1b12df43b030d3790ca8b7fa1c0503644e3d9c400db99afc98647c11a2d5", 0xd8, 0x80000000, 0x0, 0x2, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000000500)="8832cba8f90c0c078855160c5bbc23109f633eb6e608a0e37887276c36e915da4068f0f06ab4a307a5ef76f3b4ff", 0x2e, 0x2, 0x0, 0x71582163939cd6a}])
vmsplice(r2, &(0x7f00000007c0)=[{0x0, 0x15}, {&(0x7f0000000040)="00e1c4e13fc1cbbd19b947597492088bc176ad16bbcf41f2da2e52d0bd77de63657158b94333f8b3be4ba33e46a1e668981855562c0031df66d85d9fc7898a36fdf15827fd69817fe36f8f230e151cd05356f43d4d330cffe4963c2fec7c36b5da000029f23d26fdcd6ba481ba34a66a466100a0a31ad6197380fcf248773559665e59e9ef0a5abaea1e7ed836c0c2399cafcc1fdc1b2116a20616ce47f2192bed92ffbfd767f1b10e1bc74a79ed0bd96ee12b9f415ea57e6430b6b56c139b603fc43f712a36ddd780626000"/216, 0xd8}], 0x2, 0x0)

22:48:26 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000006dc0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0])

22:48:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xf16, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:26 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}})
r4 = syz_io_uring_complete(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b000070070ab773641394af56b66ad59191b2a5f477ad560b80f6ab6bfa4f0ceaff48002368e2827d7a784a1ad8630eeb5e4d231dd62d6eece704708be815ef2a333fc22bbc3c960b0eb3edd58219270b505080c98c06fd8a04928ace200133fbe18d707b782ad218f8328bc41a2597ed0e707b1a0c701a51215eb8f8d29a8b077e35e7af189e14fc07186b550aa860bf1b28a7ba3ef", @ANYRES16=r8, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB="1400c70000000000000000001bae63230cbb2c11"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x77}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040840}, 0x44000)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
flistxattr(r5, &(0x7f00000000c0)=""/170, 0xaa)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='vxcan1\x00'})

22:48:26 executing program 6:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x10200, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
statx(r2, &(0x7f0000007740)='./file0\x00', 0x0, 0x800, &(0x7f0000000100))
renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x7, 0xff, 0x2, 0x80000001, 0x7, [{0x2, 0x5e6, 0x0, '\x00', 0x800}, {0x2, 0xfc, 0x8000, '\x00', 0x2}, {0x2, 0x2, 0x5, '\x00', 0x1203}, {0x3, 0x7, 0x4, '\x00', 0x400}, {0x8, 0x1, 0x80, '\x00', 0xd}, {0xfffffffffffffffd, 0x10000, 0x6, '\x00', 0x2}, {0x101, 0xffffffffffffffc1, 0x5, '\x00', 0x10e}]})

[ 2324.871983] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2324.886336] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
22:48:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:26 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="37eaa7bd52f0b78467ff17c1faaa9d546e6da27e9f87ef5e57535504214dc4a734833199458695b8e91dc2533edb02fd03d999ce455e81b11b6c932d9e96331e50224e881676b080e21ea95ba565525bba53a742edc6bb4034b46a9f3f6a4ce4a27314fbc3c4794684ac1a02a8989a9120179c9c0ca4cc81eb125f938a6f0a971a37ed0c43f672fbdc37ad878f694265b23dcd2a4eb3e7aa0b36c06e01b1c4b6cd5c7fd60d7c3095f5dfbda972dfa788ca2ace60ef2de577bb61b537b494b96bbbdfe4", 0xc3}, {&(0x7f0000000140)="9b560b1971ab8d5eab29844410cf2fcefb5cdef897b2179fcd15084dada4df08db90e51a9e9c3c770cf32e08df2d36a23b82197b9a8285120a6b1c00d6a37f3f3e312779c8abf7a508944b676fbfd69420b565511381b63adbc7a78b1ca3eb175aab8b79ab6af1090ba63426f7985a05be0c6ebe86b8adb03c1f447f14b987021180b5d17130739a587d7420d6f655a25abe8d43ab1e4ebe024ab063510f0ff1b5a87ac58f393499410daeede6e073be56904599fe35958519b6048868bd72d7578139602cef344d3f72adafbffa799384fd4807b66f4ef2f9f9eb8243ed6350c9", 0xe1}, {&(0x7f0000000240)="adb3072551af6147524c808d3dfe620347193a7cb06638958613043c70f871d117f7167478fc526d2a5dc216e59e194877d4c227a09c9f9dc53378f54b7ffb27aef210152542f96485d12cc02ecbbfb587f570a15477", 0x56}, {&(0x7f00000002c0)="85e4e966a7a57fec99dba1b679a44d414cd1077109d92186d5b37ffb1fa1a72493cf75f85e6b4b5ab3652ec20334dd74317d2b804b9cf62e4f7297f8819ae8266bc425cfdb22325d0b0212eecf6ef47ba0c3853d7b8add681327655e90671cde28e60d26c1bea505a6c8eb1370b852e2f096fe4f0dfbd0cab087f8417691df862c6708763fae07ec3d1197831c909d56ad1cf48872eecc8ecb85676b9095fc37d5702913661cf1635cd4a14db34d92", 0xaf}], 0x4, 0x4)
shutdown(r1, 0x0)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:48:26 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x980, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
msgsnd(0x0, &(0x7f0000000180)={0x1}, 0x8, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)

[ 2324.955042] FAULT_INJECTION: forcing a failure.
[ 2324.955042] name failslab, interval 1, probability 0, space 0, times 0
[ 2324.956097] CPU: 1 UID: 0 PID: 17172 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2324.956114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2324.956121] Call Trace:
[ 2324.956126]  <TASK>
[ 2324.956131]  dump_stack_lvl+0xfa/0x120
[ 2324.956154]  should_fail_ex+0x4d7/0x5e0
[ 2324.956174]  ? __kernfs_new_node+0xd3/0x870
[ 2324.956193]  should_failslab+0xc2/0x120
[ 2324.956213]  kmem_cache_alloc_noprof+0x72/0x680
[ 2324.956234]  ? __kernfs_new_node+0xd3/0x870
[ 2324.956251]  __kernfs_new_node+0xd3/0x870
[ 2324.956277]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2324.956300]  ? lock_acquire+0x15e/0x2f0
[ 2324.956315]  ? kernfs_root+0x23/0x2a0
[ 2324.956333]  ? find_held_lock+0x2b/0x80
[ 2324.956352]  ? kernfs_root+0xee/0x2a0
[ 2324.956370]  ? lock_release+0xc8/0x290
[ 2324.956383]  ? lock_is_held_type+0x9e/0x120
[ 2324.956402]  kernfs_new_node+0x13c/0x1e0
[ 2324.956419]  __kernfs_create_file+0x55/0x360
[ 2324.956438]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2324.956459]  ? __pfx_dev_attr_store+0x10/0x10
[ 2324.956482]  internal_create_group+0x571/0xeb0
[ 2324.956509]  ? __pfx_internal_create_group+0x10/0x10
[ 2324.956527]  ? kernfs_add_one+0x150/0x830
[ 2324.956544]  ? kernfs_create_link+0x1be/0x240
[ 2324.956563]  internal_create_groups.part.0+0x90/0x140
[ 2324.956578]  sysfs_create_groups+0x29/0x50
[ 2324.956590]  device_add+0x67e/0x1830
[ 2324.956611]  ? __pfx_device_add+0x10/0x10
[ 2324.956629]  ? lockdep_init_map_type+0x4b/0x240
[ 2324.956645]  ? __init_waitqueue_head+0xca/0x150
[ 2324.956664]  netdev_register_kobject+0x1a9/0x3e0
[ 2324.956684]  register_netdevice+0x1332/0x1d70
[ 2324.956705]  ? __pfx_register_netdevice+0x10/0x10
[ 2324.956718]  ? mac802154_llsec_set_params+0x490/0x570
[ 2324.956746]  ieee802154_if_add+0xc73/0x1140
[ 2324.956767]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2324.956785]  ? __pfx___mutex_lock+0x10/0x10
[ 2324.956799]  ? skb_put+0x138/0x1b0
[ 2324.956818]  ? __nlmsg_put+0x159/0x1d0
[ 2324.956840]  ? genlmsg_put+0x265/0x2e0
[ 2324.956861]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2324.956877]  ieee802154_add_iface+0x472/0x970
[ 2324.956897]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2324.956915]  ? trace_kmalloc+0x1f/0xb0
[ 2324.956936]  ? __nla_parse+0x42/0x60
[ 2324.956955]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2324.956972]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2324.956994]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2324.957012]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2324.957038]  ? security_capable+0x2f/0x90
[ 2324.957058]  genl_rcv_msg+0x532/0x7e0
[ 2324.957078]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2324.957095]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2324.957121]  netlink_rcv_skb+0x147/0x430
[ 2324.957136]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2324.957154]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2324.957179]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2324.957197]  genl_rcv+0x28/0x40
[ 2324.957211]  netlink_unicast+0x5a7/0x870
[ 2324.957229]  ? __pfx_netlink_unicast+0x10/0x10
[ 2324.957253]  netlink_sendmsg+0x8a3/0xd80
[ 2324.957272]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2324.957296]  ____sys_sendmsg+0xa67/0xc20
[ 2324.957317]  ? copy_msghdr_from_user+0xfb/0x150
[ 2324.957331]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2324.957356]  ? lock_acquire+0x15e/0x2f0
[ 2324.957373]  ___sys_sendmsg+0x10f/0x1b0
[ 2324.957388]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2324.957400]  ? perf_trace_lock+0xb5/0x5d0
[ 2324.957419]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2324.957432]  ? proc_fail_nth_write+0x97/0x220
[ 2324.957453]  ? lock_acquire+0x15e/0x2f0
[ 2324.957469]  ? __fget_files+0x34/0x3b0
[ 2324.957487]  ? find_held_lock+0x2b/0x80
[ 2324.957505]  ? __fget_files+0x203/0x3b0
[ 2324.957519]  ? lock_release+0xc8/0x290
[ 2324.957537]  ? __fget_files+0x20d/0x3b0
[ 2324.957559]  __sys_sendmsg+0x150/0x200
[ 2324.957573]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2324.957595]  ? __pfx_ksys_write+0x10/0x10
[ 2324.957619]  do_syscall_64+0xbf/0x390
[ 2324.957636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2324.957649] RIP: 0033:0x7f056dbbbb19
[ 2324.957659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2324.957672] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2324.957684] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2324.957692] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2324.957700] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2324.957707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2324.957714] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2324.957735]  </TASK>
22:48:26 executing program 6:
syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60409d2600608800fc000000000000000000000000000000fe8000000000000000000000000000aa00000400000005"], 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)

22:48:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf0ffff, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2325.095932] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2325.096752] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2325.097481] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2325.099074] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2325.159987] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2325.160690] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2325.162415] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2325.163061] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2327.126505] Bluetooth: hci1: command 0x0406 tx timeout
[ 2327.190474] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2327.190545] Bluetooth: hci4: command 0x0406 tx timeout
[ 2327.191484] Bluetooth: hci7: command 0x0c1a tx timeout
22:48:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 71)

22:48:37 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x1000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x4000000000, r1, &(0x7f0000000080)=0x17b, 0x400, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c}})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)

22:48:37 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:48:37 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xc4, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7c}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0a5aca77615eefc"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="239c3882968c2aa194b5ba337b0f49a2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7141c4ff25baf584b2187486c5045dce71ecb58460e98f9a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffa}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "73d984736aa78872"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ee906a5bf8488b6b62ebe7f10f25ef30"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "552d058f5c46236f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c69ade45ecaa359b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "57fbca8257d13f98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bfc29712e5bdad00"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c2", 0x61, 0x400}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000012a00))

22:48:37 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000000)="332ffdb072e43dda84d05b84eabf3b762e9768c09a8fcd9bfd1c9ae9f3b1c2bfd7c3f04ec184a22541e73b48aceb655d6ef3b2d70705200b9fc97f36de1d1220ccd7325765094c7bf463834bd261ca0e16a1e142c3def2d14779513e4652e363f2db69e6975f0e271b51cc12d74c482860d9aa31d5957cf06940b3d59ab73cdb2eaea9f2c7b289c849ef08", 0x8b, 0x8, 0x0, 0x1, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x20, r0, &(0x7f0000000100)="73b21457e7cf62e76ca3109dbbaba985ccc1470e858226347ad4b1f784f770149e8ef39c60ab88735e9818a9346db61f39f1fa6b2b734d5d9c26dfccf9cf923bf4b4d3631233ad0d0ee99de58e352c4ca2472264b419a9634d3844027452fd6ef7b8d67e25ff09", 0x67, 0x10000000, 0x0, 0x1}])
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:48:37 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160d, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:37 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x9000000}}}}, 0xc0}}, 0x0)

[ 2336.615434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2336.631909] loop6: detected capacity change from 0 to 1024
[ 2336.641321] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[ 2336.671919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
22:48:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 72)

[ 2336.690783] random: crng reseeded on system resumption
22:48:38 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r7=>0x0, 0x29, 0x7, 0xed, 0x1, 0x1, @local, @remote, 0x1, 0x0, 0x401, 0x1ff}})
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x78, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x844)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r3, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r9, 0x1, 0x0, 0x0, {{0x60}, {@void, @void}}}, 0x14}}, 0x0)

22:48:38 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x2000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:38 executing program 2:
ioprio_set$pid(0x2, 0x0, 0x2007)
clone3(&(0x7f0000000080)={0x11062100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

22:48:38 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xa000000}}}}, 0xc0}}, 0x0)

[ 2336.887398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2336.893123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
22:48:38 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:38 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 73)

22:48:38 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x781900, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0]})
close(r0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r5, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FICLONE(r7, 0x40049409, r1)
read(0xffffffffffffffff, &(0x7f0000000000)=""/128, 0x80)

[ 2336.983443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2336.989453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2337.014934] random: crng reseeded on system resumption
22:48:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000000c0)="e908ec8659fd9d4a83e7a446ee7c281504acda2c0f123a6295c201cb8af1753e2e6732d5328b28fde1ac0551c0f481a7ab3097565710200f43aa27d8766489f32ec73cf6557c2ad7c32386ccaf88195abdc0751ccf396df636f27065af76d1eac62a2fc0006e94ab2a34ea5af6175a5a91c19826b11d1bfe9d65312f47ba7b57ee93b95fb217a0d534796b3631cc432f7bac95de85d46de8a02a97333af4297475d738850a03fcc837bfe1786c", 0xad}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x2)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:48:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x3000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf000000}}}}, 0xc0}}, 0x0)

22:48:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x165e, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:51 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/66, 0x42)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0))

22:48:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 74)

22:48:51 executing program 2:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x800c0, 0x102)
readahead(r0, 0x0, 0xc81)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x401)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0xffff, 0x81}]}, 0xc, 0x1)

22:48:51 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x318, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20007f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x928}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96, 0x3, "060f0983b257b94ee3aba26c24c45f9231cd5872cda5a9403c6d832a6b9ec724869900b2cc127837c83490c2cf2c6d4c16d3af09ae1d46d2b4795d6bd53450ba96777cb17babe8997a9878e1f61f3c0eb4ca9a093750dd264cb71781cd7f998263c1576e2d2df8cabfa21b08b6c270489ebdcb9c5c2f73ebef61897112addc45d1633b3767aec0123beb128179d9ef99f9d1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9788}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "8a86347b32bdd202a0b45fca2795e62579618fd748eb592cdf1d"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b04678107ddd2847ccc7b126c1eb493147ecc36ff4e5229b208f8ff535"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b12e9a12e3b69005f0163659da7552db827bae1f1067031f4da1d818716e34f85e8f"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000055}, 0x44885)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$dupfd(r0, 0x0, r1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x30682, 0x0)

22:48:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x4000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="fe", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:48:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x9effffff}}}}, 0xc0}}, 0x0)

[ 2350.294430] FAULT_INJECTION: forcing a failure.
[ 2350.294430] name failslab, interval 1, probability 0, space 0, times 0
[ 2350.296357] CPU: 0 UID: 0 PID: 17287 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2350.296391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2350.296405] Call Trace:
[ 2350.296414]  <TASK>
[ 2350.296425]  dump_stack_lvl+0xfa/0x120
[ 2350.296462]  should_fail_ex+0x4d7/0x5e0
[ 2350.296500]  ? __kernfs_new_node+0xd3/0x870
[ 2350.296538]  should_failslab+0xc2/0x120
[ 2350.296575]  kmem_cache_alloc_noprof+0x72/0x680
[ 2350.296618]  ? __kernfs_new_node+0xd3/0x870
[ 2350.296653]  __kernfs_new_node+0xd3/0x870
[ 2350.296699]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2350.296746]  ? lock_acquire+0x15e/0x2f0
[ 2350.296776]  ? kernfs_root+0x23/0x2a0
[ 2350.296813]  ? find_held_lock+0x2b/0x80
[ 2350.296851]  ? kernfs_root+0xee/0x2a0
[ 2350.296888]  ? lock_release+0xc8/0x290
[ 2350.296914]  ? lock_is_held_type+0x9e/0x120
[ 2350.296951]  kernfs_new_node+0x13c/0x1e0
[ 2350.296987]  __kernfs_create_file+0x55/0x360
[ 2350.297027]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2350.297069]  ? __pfx_dev_attr_store+0x10/0x10
[ 2350.297114]  internal_create_group+0x571/0xeb0
[ 2350.297169]  ? __pfx_internal_create_group+0x10/0x10
[ 2350.297207]  ? kernfs_add_one+0x150/0x830
[ 2350.297255]  ? kernfs_create_link+0x1be/0x240
[ 2350.297301]  internal_create_groups.part.0+0x90/0x140
[ 2350.297334]  sysfs_create_groups+0x29/0x50
[ 2350.297358]  device_add+0x67e/0x1830
[ 2350.297401]  ? __pfx_device_add+0x10/0x10
[ 2350.297438]  ? lockdep_init_map_type+0x4b/0x240
[ 2350.297471]  ? __init_waitqueue_head+0xca/0x150
[ 2350.297510]  netdev_register_kobject+0x1a9/0x3e0
[ 2350.297555]  register_netdevice+0x1332/0x1d70
[ 2350.297595]  ? __pfx_register_netdevice+0x10/0x10
[ 2350.297623]  ? mac802154_llsec_set_params+0x490/0x570
[ 2350.297679]  ieee802154_if_add+0xc73/0x1140
[ 2350.297723]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2350.297761]  ? __pfx___mutex_lock+0x10/0x10
[ 2350.297788]  ? skb_put+0x138/0x1b0
[ 2350.297826]  ? __nlmsg_put+0x159/0x1d0
[ 2350.297871]  ? genlmsg_put+0x265/0x2e0
[ 2350.297913]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2350.297945]  ieee802154_add_iface+0x472/0x970
[ 2350.297987]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2350.298024]  ? trace_kmalloc+0x1f/0xb0
[ 2350.298065]  ? __nla_parse+0x42/0x60
[ 2350.298104]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2350.298139]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2350.298186]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2350.298225]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2350.298282]  ? security_capable+0x2f/0x90
[ 2350.298321]  genl_rcv_msg+0x532/0x7e0
[ 2350.298360]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2350.298395]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2350.298449]  netlink_rcv_skb+0x147/0x430
[ 2350.298480]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2350.298515]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2350.298565]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2350.298601]  genl_rcv+0x28/0x40
[ 2350.298629]  netlink_unicast+0x5a7/0x870
[ 2350.298666]  ? __pfx_netlink_unicast+0x10/0x10
[ 2350.298715]  netlink_sendmsg+0x8a3/0xd80
[ 2350.298753]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2350.298803]  ____sys_sendmsg+0xa67/0xc20
[ 2350.298842]  ? copy_msghdr_from_user+0xfb/0x150
[ 2350.298871]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2350.298922]  ? lock_acquire+0x15e/0x2f0
[ 2350.298956]  ___sys_sendmsg+0x10f/0x1b0
[ 2350.298986]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2350.299011]  ? perf_trace_lock+0xb5/0x5d0
[ 2350.299048]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2350.299075]  ? proc_fail_nth_write+0x97/0x220
[ 2350.299117]  ? lock_acquire+0x15e/0x2f0
[ 2350.299144]  ? __fget_files+0x34/0x3b0
[ 2350.299173]  ? find_held_lock+0x2b/0x80
[ 2350.299209]  ? __fget_files+0x203/0x3b0
[ 2350.299238]  ? lock_release+0xc8/0x290
[ 2350.299273]  ? __fget_files+0x20d/0x3b0
[ 2350.299319]  __sys_sendmsg+0x150/0x200
[ 2350.299347]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2350.299390]  ? __pfx_ksys_write+0x10/0x10
[ 2350.299439]  do_syscall_64+0xbf/0x390
[ 2350.299471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2350.299497] RIP: 0033:0x7f056dbbbb19
[ 2350.299516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2350.299539] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2350.299563] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2350.299579] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2350.299594] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2350.299608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2350.299623] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2350.299664]  </TASK>
[ 2350.363493] hpet: Lost 3 RTC interrupts
22:48:51 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000040), 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000003c0)=""/90, 0x5a}], 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=<r2=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20}, 0x10020)
vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000540)="7855e1735f0bbbab580c86b642856ef1778162865086d87ac58be867ddf538bacd239ec911c49cba792425c55dd66d3f555f4fdbfba5bfe7d073a10ed1446798dd57c88ba1820ee0f44ccf7e6c628abce7f381b4bfb65f25c5b698ecef610c01f0e8b18096c128efb0a283e1f9857934d51b81860b05414ce5d2a4ec0a4af4cff0143b1b3c9e95e742e2ea7d22dfdb445cedae5d563b88a2277a16b7d45532c4a374bf81673808a88bb7c3f59d", 0xad}, {&(0x7f0000000600)="02b5c1ce09529a8fa635eebf8a73ad5e7ea2e5bbb9d92b38e0126fc5", 0x1c}, {&(0x7f0000000640)="602402f11b6f4707cb2b53148bb7033e82a5bf572debb1bd0f371b4f6f3ed6ef6fb54ef69ddc1e776c8f78dbd4a43f17225c2cfd60dad298be46c906c4bfdcd3eec38dabba16246b681083015c39b6ead627acde11e38abcc833ec9fa5cc6bd84ddd13f4a7f5dfd538e5f61172beee55363c6fd241261f19c21f84e6fc8a37b5dbe4209a2670d81fde6588e21d777c927d5bdc727c67ab8fb1c4481517a3d813920dd34c1a52a4daa1dc714291", 0xad}, {&(0x7f0000000900)="02ad5e0cc0fe93200e30bfa0a54a651dfce9353ce7208cff155b64fba2c9067812d318e98d001f7d7f53bba5bdd6f852d13c1ea535188e005455abd4b28a20fb10be6f4d709ad42b3c36e094360b0cd8628370804170d42257cc912c9b23d36dfed1b1f3b4eccc26743cd70e99975309a23ebb33e6ac86dd1d24b1cdfc8411160ec7a575e7cc39da0d64c50a02a59a37d3e2259e0dce4a7458c7152a8a659ffa2f0ea4154b8faebdcf485228cef8d7f65d0fbf9e13a993374f22e5abb3c75842b3aca852c3fe2392157eadd3f938a14cd8b656fc5550ab05bfc88b4601a21a", 0xdf}, {&(0x7f0000000700)="c594f9322c8377ebec3e24a2e66d09febe62c3034026543dacb0f20cdb93e0b6ab9d5edfef5e53c501369f677fdd3562", 0x30}, {&(0x7f0000000740)="65bd7bf182d1cd71", 0x8}, {&(0x7f0000000a00)="fb54b2c1de6a2f6df4622be3680553c35f0555cca94360454236eca8951ee2f942baed9f3cf6417db0f6d88cce370455d02b3ff65875dc21100edacd9e81ffdbc976bf8bbcdf06bb653ab70e4f7bff18caeb800f4af0746e4eef538ee3efca18ad17fd3d9b1eb42e69d5e7a76a02932d19c388737f3966c981425384957653f9b676c7e057e7f982556b36da527c12ff1e3200c085939679e9235cdee0d1365a9c1c67ed8ac467a26e6a7155ea89b7c8f701a2452ee17690228d5a8278384fc3a904b4b6d727e8694b88ce4f06dd7608a9bcdc7fab1e9d9493fbec4977da8cbc94b6ddcf464ebf085940dc517d5ee52970f4aa53923db4274349d773f58d", 0xfe}, {&(0x7f0000000780)="a4343d60277f809a7568ce57a99f8de21cefd831b6890dd27c", 0x19}], 0x8, 0x1)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
io_setup(0x72b5de8, &(0x7f00000004c0)=<r3=>0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
io_submit(r3, 0x5, &(0x7f00000010c0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x2b2, 0xffffffffffffffff, &(0x7f0000000c40)="cecf2b80696eea7576b1da2e750a8f7c182c3cb1b3e957e86e8b06f5e74efe3eb4fd51e070a620bf07fa0a4e15e53f4c89f09696ec6b4e3f0b59aec7a16f6d29ba89180ff7c379313dc6486b2dd37a0c269a6daffaa97da3f0ad683b05d5c8a5f6d8180e56bca5d3c59139c4048d78a96e063341e0b5e07cf4789c94d719d09e979b785e744fc747f25700739609fc5a839a202678b1777579c61776c147e77a37899b285b07a9f3cefce508334377fee758adace68a957cd5692c07b99cf6507205d50646a29c08836e7fcf4e658fd464f19e3cca67e43302fdd6f1f5c808", 0xdf, 0x1}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000d40)="159cada74ca25a02f5e54d659814554017f4447a6efebc1597c150a7d401a1343dc39911368759eb924d447ac85e23b3e4018f3b8f6a45f0d071c69ea0729bc42dffdc5e5c6fde835e4857a2610fc1502c80404f1767d58310b368d0b1756f845b59dae021d4a19ca3ac282b1f9440adb13a20916384557596bad6bade57242042a81421f194ead4db6a180a3e3950a090b40c79a9f9", 0x96, 0xa2}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x6, 0x4, r5, &(0x7f0000000e40)='u', 0x1, 0x1f, 0x0, 0x2}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000ec0)="40a7161f2f64132e0a9bc844fca1e11f16d9d4b53f315587f846b8323dd1123a9c34bbbef4e49ceb195fdea0466b21ced9059f42ec4405ad50649d03a58426647598c0a73eb6991bfed709d561c1660b6cc4275e6e6fda0765b074a65540bba0d7d8d68dcaa3a150c0ff22856eb319aa405ee2549a3279d7ea72677472", 0x7d, 0x2, 0x0, 0x2, r0}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x3, 0x74, r6, &(0x7f0000000f80)="100adb4f5d989e3d2854aef82b0d8d91e9fee84eff1eba00acb44bec8dd2b9f184f688ce7679f76c31af46aea63179dfbdf5ea5baef3e673db057886fb5d67c5fb60c241c8426d6b850a3dc651e3729a37d3e5fe3a60c02a6a8dc489fe70830b0a850c2a0a4ff6eb6de7355b8a8e16aa25198d9c990eadd72b1c6ddc341869f3986e4014a48d9c1dfd25cc0418263705017509782605b0611d4bd733b0ec570634891a257b1e400c8825664ded9a0da4a6b4fede9dc669163d1d90b35e61d4f4463de15f6597a3ae0ad57f18c96f45907bd3ec36985a801f6425a236b622c70b42085ed044e4cd881ff74ab9", 0xec}])

22:48:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x9000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf0ffffff}}}}, 0xc0}}, 0x0)

22:48:51 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000002f40)=@polexpire={0xe8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x1}, {0x0, 0xfffffffffffffffe}}}, [@address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@loopback, 0x2, 0x4, 0x7f}}]}, 0xe8}}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc)
write(r3, &(0x7f0000000080)="dcdc2bacbf15915d26c5bb1328095952986f8f24905b811fec548d80efd62c670934bf81526690944bae5bfe5015d23ebdcb52a372b9076aef8798a6d54db89538d416563de3582852678f6c441f816eb03682090befffdd77ecdcf4a89f5bb7aa017954c8c01d3a19b9dacc6b40cdc4b60b3fc6e724324b60ce75cb0db61ac28dc0011b7057f8ab584c92201e63918f9c8591f045ed973f76a53eeff9df875bc74a5aff8274eafc6334daa19f77cd3681efd97ed1288bd843734ff662430d31cb0bcf702736836876ac08b243331b8e6f649a02a9316ea3e53e554716c33c3705f3054c78a9741790fd03b4c7419d548bbaf1", 0xf3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgid(0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x8, 0x81, 0x6, 0x0, 0x7, 0x4009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xbf1334ae0263a916, @perf_config_ext={0x4, 0x1}, 0x14721c0293cc2a23, 0x6, 0xffffffff, 0x4, 0x1000, 0xfffffffb, 0x20, 0x0, 0x7fffffff, 0x0, 0x7}, r5, 0xb, r0, 0x2)
r6 = pidfd_open(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r6, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000002f00)={{0x1, 0x1, 0x18, <r7=>r2, {0x400}}, './file0\x00'})
perf_event_open(&(0x7f0000002e80)={0x0, 0x80, 0x81, 0x81, 0x9, 0x3, 0x0, 0x8, 0x26240, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x8, 0x1}, 0xa004, 0x60b2, 0xfffff379, 0x9, 0x100000000, 0x1, 0x8, 0x0, 0x7fc, 0x0, 0x8}, 0x0, 0xb, r7, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={<r8=>r3, 0x1f2b, 0x5, 0x4})
recvmmsg(r8, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/212, 0xd4}], 0x1, &(0x7f00000006c0)=""/248, 0xf8}, 0x7d98}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000001980)=""/150, 0x96}, {&(0x7f0000001a40)=""/246, 0xf6}, {&(0x7f0000001b40)=""/194, 0xc2}, {&(0x7f0000001c40)=""/93, 0x5d}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/162, 0xa2}], 0x8}, 0x5}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000004040)=""/180, 0xb4}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000004100)=""/219, 0xdb}], 0x5, &(0x7f0000004280)=""/74, 0x4a}}], 0x3, 0x22, &(0x7f0000000380))
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="040029bd700800000000680000010000030038bb76922f7c3e1b852d6dc905fe5190af37eb828eda8e1c4c4fab8177b3", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:48:51 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2350.483578] random: crng reseeded on system resumption
22:48:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 75)

22:48:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:48:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1667, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:48:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xfffff000}}}}, 0xc0}}, 0x0)

22:48:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x7f)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x40286608, &(0x7f0000000000))

22:48:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r6, r3, 0x2)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=r4], 0x1c}}, 0x0)

[ 2350.629132] random: crng reseeded on system resumption
[ 2350.630868] FAULT_INJECTION: forcing a failure.
[ 2350.630868] name failslab, interval 1, probability 0, space 0, times 0
[ 2350.632166] CPU: 1 UID: 0 PID: 17320 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2350.632184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2350.632192] Call Trace:
[ 2350.632197]  <TASK>
[ 2350.632202]  dump_stack_lvl+0xfa/0x120
[ 2350.632225]  should_fail_ex+0x4d7/0x5e0
[ 2350.632246]  ? __kernfs_new_node+0xd3/0x870
[ 2350.632271]  should_failslab+0xc2/0x120
[ 2350.632292]  kmem_cache_alloc_noprof+0x72/0x680
[ 2350.632313]  ? __kernfs_new_node+0xd3/0x870
[ 2350.632331]  __kernfs_new_node+0xd3/0x870
[ 2350.632355]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2350.632379]  ? lock_acquire+0x15e/0x2f0
[ 2350.632394]  ? kernfs_root+0x23/0x2a0
[ 2350.632414]  ? find_held_lock+0x2b/0x80
[ 2350.632434]  ? kernfs_root+0xee/0x2a0
[ 2350.632453]  ? lock_release+0xc8/0x290
[ 2350.632466]  ? lock_is_held_type+0x9e/0x120
[ 2350.632485]  kernfs_new_node+0x13c/0x1e0
[ 2350.632502]  __kernfs_create_file+0x55/0x360
[ 2350.632523]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2350.632545]  ? __pfx_dev_attr_store+0x10/0x10
[ 2350.632570]  internal_create_group+0x571/0xeb0
[ 2350.632599]  ? __pfx_internal_create_group+0x10/0x10
[ 2350.632619]  ? kernfs_add_one+0x150/0x830
[ 2350.632636]  ? kernfs_create_link+0x1be/0x240
[ 2350.632656]  internal_create_groups.part.0+0x90/0x140
[ 2350.632672]  sysfs_create_groups+0x29/0x50
[ 2350.632685]  device_add+0x67e/0x1830
[ 2350.632707]  ? __pfx_device_add+0x10/0x10
[ 2350.632726]  ? lockdep_init_map_type+0x4b/0x240
[ 2350.632742]  ? __init_waitqueue_head+0xca/0x150
[ 2350.632762]  netdev_register_kobject+0x1a9/0x3e0
[ 2350.632783]  register_netdevice+0x1332/0x1d70
[ 2350.632804]  ? __pfx_register_netdevice+0x10/0x10
[ 2350.632818]  ? mac802154_llsec_set_params+0x490/0x570
[ 2350.632846]  ieee802154_if_add+0xc73/0x1140
[ 2350.632869]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2350.632889]  ? __pfx___mutex_lock+0x10/0x10
[ 2350.632903]  ? skb_put+0x138/0x1b0
[ 2350.632924]  ? __nlmsg_put+0x159/0x1d0
[ 2350.632948]  ? genlmsg_put+0x265/0x2e0
[ 2350.632969]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2350.632985]  ieee802154_add_iface+0x472/0x970
[ 2350.633006]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2350.633025]  ? trace_kmalloc+0x1f/0xb0
[ 2350.633047]  ? __nla_parse+0x42/0x60
[ 2350.633066]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2350.633084]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2350.633107]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2350.633126]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2350.633153]  ? security_capable+0x2f/0x90
[ 2350.633174]  genl_rcv_msg+0x532/0x7e0
[ 2350.633194]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2350.633213]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2350.633240]  netlink_rcv_skb+0x147/0x430
[ 2350.633256]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2350.633275]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2350.633301]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2350.633320]  genl_rcv+0x28/0x40
[ 2350.633334]  netlink_unicast+0x5a7/0x870
[ 2350.633353]  ? __pfx_netlink_unicast+0x10/0x10
[ 2350.633378]  netlink_sendmsg+0x8a3/0xd80
[ 2350.633397]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2350.633423]  ____sys_sendmsg+0xa67/0xc20
[ 2350.633444]  ? copy_msghdr_from_user+0xfb/0x150
[ 2350.633460]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2350.633486]  ? lock_acquire+0x15e/0x2f0
[ 2350.633504]  ___sys_sendmsg+0x10f/0x1b0
[ 2350.633520]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2350.633532]  ? perf_trace_lock+0xb5/0x5d0
[ 2350.633552]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2350.633566]  ? proc_fail_nth_write+0x97/0x220
[ 2350.633588]  ? lock_acquire+0x15e/0x2f0
[ 2350.633602]  ? __fget_files+0x34/0x3b0
[ 2350.633618]  ? find_held_lock+0x2b/0x80
[ 2350.633638]  ? __fget_files+0x203/0x3b0
[ 2350.633653]  ? lock_release+0xc8/0x290
[ 2350.633671]  ? __fget_files+0x20d/0x3b0
[ 2350.633694]  __sys_sendmsg+0x150/0x200
[ 2350.633709]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2350.633731]  ? __pfx_ksys_write+0x10/0x10
[ 2350.633758]  do_syscall_64+0xbf/0x390
[ 2350.633776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2350.633789] RIP: 0033:0x7f056dbbbb19
[ 2350.633799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2350.633812] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2350.633824] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2350.633832] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2350.633840] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2350.633848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2350.633857] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2350.633880]  </TASK>
[ 2350.680473] random: crng reseeded on system resumption
[ 2350.701521] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
[ 2350.785807] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
22:49:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff0000000013000000040000ff"], 0x14}], 0x1}, 0x0)
read(r0, &(0x7f0000000400)=""/4096, 0x1000)

22:49:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 76)

22:49:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xffffff7f}}}}, 0xc0}}, 0x0)

22:49:02 executing program 1:
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000))
vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x20000000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:02 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r4, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x42}}}}}, 0x28}}, 0x4005)

22:49:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1668, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:02 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:02 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0), 0x0, 0xc)

[ 2361.067630] FAULT_INJECTION: forcing a failure.
[ 2361.067630] name failslab, interval 1, probability 0, space 0, times 0
[ 2361.070192] CPU: 1 UID: 0 PID: 17349 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2361.070228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2361.070242] Call Trace:
[ 2361.070251]  <TASK>
[ 2361.070262]  dump_stack_lvl+0xfa/0x120
[ 2361.070309]  should_fail_ex+0x4d7/0x5e0
[ 2361.070347]  ? __kernfs_new_node+0xd3/0x870
[ 2361.070387]  should_failslab+0xc2/0x120
[ 2361.070426]  kmem_cache_alloc_noprof+0x72/0x680
[ 2361.070471]  ? __kernfs_new_node+0xd3/0x870
[ 2361.070508]  __kernfs_new_node+0xd3/0x870
[ 2361.070556]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2361.070605]  ? lock_acquire+0x15e/0x2f0
[ 2361.070637]  ? kernfs_root+0x23/0x2a0
[ 2361.070676]  ? find_held_lock+0x2b/0x80
[ 2361.070716]  ? kernfs_root+0xee/0x2a0
[ 2361.070756]  ? lock_release+0xc8/0x290
[ 2361.070784]  ? lock_is_held_type+0x9e/0x120
[ 2361.070823]  kernfs_new_node+0x13c/0x1e0
[ 2361.070867]  __kernfs_create_file+0x55/0x360
[ 2361.070909]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2361.070954]  ? __pfx_dev_attr_store+0x10/0x10
[ 2361.071001]  internal_create_group+0x571/0xeb0
[ 2361.071060]  ? __pfx_internal_create_group+0x10/0x10
[ 2361.071100]  ? kernfs_add_one+0x150/0x830
[ 2361.071138]  ? kernfs_create_link+0x1be/0x240
[ 2361.071179]  internal_create_groups.part.0+0x90/0x140
[ 2361.071213]  sysfs_create_groups+0x29/0x50
[ 2361.071240]  device_add+0x67e/0x1830
[ 2361.071284]  ? __pfx_device_add+0x10/0x10
[ 2361.071323]  ? lockdep_init_map_type+0x4b/0x240
[ 2361.071358]  ? __init_waitqueue_head+0xca/0x150
[ 2361.071400]  netdev_register_kobject+0x1a9/0x3e0
[ 2361.071441]  register_netdevice+0x1332/0x1d70
[ 2361.071484]  ? __pfx_register_netdevice+0x10/0x10
[ 2361.071513]  ? mac802154_llsec_set_params+0x490/0x570
[ 2361.071572]  ieee802154_if_add+0xc73/0x1140
[ 2361.071618]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2361.071659]  ? __pfx___mutex_lock+0x10/0x10
[ 2361.071687]  ? skb_put+0x138/0x1b0
[ 2361.071728]  ? __nlmsg_put+0x159/0x1d0
[ 2361.071774]  ? genlmsg_put+0x265/0x2e0
[ 2361.071819]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2361.071853]  ieee802154_add_iface+0x472/0x970
[ 2361.071897]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2361.071936]  ? trace_kmalloc+0x1f/0xb0
[ 2361.072017]  ? __nla_parse+0x42/0x60
[ 2361.072057]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2361.072095]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2361.072143]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2361.072183]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2361.072241]  ? security_capable+0x2f/0x90
[ 2361.072283]  genl_rcv_msg+0x532/0x7e0
[ 2361.072326]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2361.072365]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2361.072424]  netlink_rcv_skb+0x147/0x430
[ 2361.072457]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2361.072496]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2361.072552]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2361.072591]  genl_rcv+0x28/0x40
[ 2361.072622]  netlink_unicast+0x5a7/0x870
[ 2361.072662]  ? __pfx_netlink_unicast+0x10/0x10
[ 2361.072716]  netlink_sendmsg+0x8a3/0xd80
[ 2361.072758]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2361.072811]  ____sys_sendmsg+0xa67/0xc20
[ 2361.072853]  ? copy_msghdr_from_user+0xfb/0x150
[ 2361.072884]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2361.072939]  ? lock_acquire+0x15e/0x2f0
[ 2361.072977]  ___sys_sendmsg+0x10f/0x1b0
[ 2361.073010]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2361.073038]  ? perf_trace_lock+0xb5/0x5d0
[ 2361.073078]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2361.073108]  ? proc_fail_nth_write+0x97/0x220
[ 2361.073153]  ? lock_acquire+0x15e/0x2f0
[ 2361.073182]  ? __fget_files+0x34/0x3b0
[ 2361.073215]  ? find_held_lock+0x2b/0x80
[ 2361.073255]  ? __fget_files+0x203/0x3b0
[ 2361.073286]  ? lock_release+0xc8/0x290
[ 2361.073325]  ? __fget_files+0x20d/0x3b0
[ 2361.073375]  __sys_sendmsg+0x150/0x200
[ 2361.073406]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2361.073453]  ? __pfx_ksys_write+0x10/0x10
[ 2361.073506]  do_syscall_64+0xbf/0x390
[ 2361.073541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2361.073568] RIP: 0033:0x7f056dbbbb19
[ 2361.073589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2361.073614] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2361.073639] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2361.073656] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2361.073672] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2361.073688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2361.073703] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2361.073748]  </TASK>
[ 2361.162224] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:49:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xffffff9e}}}}, 0xc0}}, 0x0)

22:49:02 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x81)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file0\x00'})
splice(r0, &(0x7f0000000000)=0xca, r2, &(0x7f0000000040)=0xd8a, 0x2, 0x4)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x9effffff, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2361.169796] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2361.171231] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2361.181792] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2361.282079] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2361.284757] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2361.286058] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2361.292107] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2363.289485] Bluetooth: hci4: command 0x0406 tx timeout
[ 2363.289570] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2363.290558] Bluetooth: hci1: command 0x0406 tx timeout
[ 2363.350476] Bluetooth: hci6: command 0x0c1a tx timeout
22:49:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xfffffff0}}}}, 0xc0}}, 0x0)

22:49:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xd8030000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:12 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x1042, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r11=>r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4001}, 0x208d0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c0000000df68090f3de22c824bb389e2f182205622945c5384bf1c1230ed2676d7a08fe6251ee3e2a5e603470e1bd8f0b52271ba4a5820488fa2e0787d9f8d0d8057cd51aab500852d419fcefe8bf3d9942cea340cd744e4ddc84c3561169c6d4d74", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256600000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000630000000500190104000000080026006c09000008002201d303000008002201950200000400b8000800b700210000000800b700880000000800220184000000050018012c0000000800a100fffeffff08009f00030000000500180131000000050018012900000005001901090000002800b9800c00ba0000f80080040006001000bb004679090005000200070000080600bb00050000000400b800"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:49:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 77)

22:49:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x160f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:12 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00894850ef633be077c918f955382bef00deffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x94200, 0x0)
pread64(r1, &(0x7f0000000240)=""/143, 0xfd9a, 0x3ab95c27)

22:49:12 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1669, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2371.230809] random: crng reseeded on system resumption
[ 2371.236894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2371.240848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
22:49:12 executing program 1:
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3000, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="85b2a7af194a9f81737fc60cee217751a943a8504eef2e2c48a61ab61e58abad08827280494f6655de8f84f8940633a83460d9b9d84ea48cbdc1b9f41cb4c7fee289fa52766012da3f9e15e41780d14d4eaa0626176b016531c976559e65a9ef9ae60746a7374fe72f13c942f78ac092fd5d17cdfbb40193a57dd46670ef537111ec554b32bede88b3a712e48ad994ec88361277f2107d9ff87c837594ae6162b6943863992b9cfb969f3a0bae36a9a4a3ca68dc07573396d79f173e2b5892dc07d75ac5d3e44e33216204a0692df9460341f087341051e754523e26a90b62dc6c364724f984425fd0efb3de266054d8d5593025fcf6", 0xf6}, {&(0x7f0000000240)="12f92b6218e0c1600ead1125afc048c1d2d51d5e4a28f90260101ab7c47bcb9d3bce7e7ff52f121b46c6595fbc192982e96e582be82ca74e240639055df26feea5e2df54c3691717d1c4754bd2efc0fd8208afb428543bd16a45fbce1f790c45a8c58aac436b70a2eeeb9fa1c5ebfdafc3734f31a1fd30b90ef62ea67ca022501cb2df1f52bd2ac47aeb410b4774d1c763b75e1e0f6a1c127340547a096e459422bb7d52f90a80ebe76aea44833c855ea4d2c2a85c2af37ae677bf0325cc632f83f6d99d682ce3a156395f64835f5c498b48a92e6d549b86f5da5f1490e096a3ed413cc6489a07ccec8a85", 0xeb}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000340)='p', 0x1}, {&(0x7f0000000380)="e6f2aaff3b22ab5651353294f703e5da15e65877645be3d425fc234a7d08a45db073fa144a8a6ccf66ccb40090f3bd3b928ebd9d1e5d591cb0987f2de9420476483fa3d0a837860e314b1daacf24f57fb3b965f48f50c6fccb87615a282b0076d67a21efb131034a96d87e179a47817bd00d567a0bcbb3324c14a874b60194b899d4e7340fb13f46b47315222357ad45851dad041f49949a60c75dfc6ce6b2e19c40a7187971e03239ee3e46ef3d6a26d8b81123073212ac249e9b638717cbd616d67aad0cfa321609bc82a82654506e90c4781c1dd626add2b283d6ca88045bd863a94d5ce4b702afac", 0xea}, {&(0x7f0000000480)="894e8acde4c53a7a81fe88557d480b11d585baab9290d61f3484f8291511508d80872c66e9c51b6fb7358f726e54422687c2e4478fd41446538badc43e84f4", 0x3f}, {&(0x7f00000004c0)="a40b003291f4c1d5a1fb9902b897fdf1c01e6dc22dce37e61b8e930422337416c9847cb1796868bb0d3fac422c7d5877960772647b91407430e9c950d0cd64f9a3e5bf8c26ec671bceba79b065a3a3693ba80c8409df30c29aa5d4ce74a4d48fed35799df6bbdaed6ee6341e8ae251ab93d0d95cb21f8289ad2bb1ee778cd2963a677a6f561e324dfd1d36f4db2721b8ace46b76dc6d1414009b4bdfa9f21c6dc2ab80a988455fe09630337b31600ddda3c8ba37454d50c0a47aabe1647db01dfb0b06869aeb3de9da4b9f47087fbc2057e1d290", 0xd4}, {&(0x7f00000005c0)="209c261e94e1e1730e928dc0fcc1f2ce859d53b7b0c768e6e414b254183df3486fd31f412d8f698407272ae0a28d83599d9924d6a684c00cfc88a9cb65d30e3c72bc781c809b6ddc8a37240e024b6df488c17758957485455efcbc2e7bed9c13be0d", 0x62}], 0x8, 0xffffffe1, 0x0)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x20002000)

22:49:12 executing program 6:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000180018b79c50cb856e9b409969a1a8e8fb7ca606c2860180ffffc346a4c0c40000", @ANYRESHEX, @ANYRES16=r0])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="009e000400000000000000696c653000"])
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x539401, 0x0)
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000200)="f6", 0x1}], 0x1)
r2 = getpid()
pidfd_open(r2, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x3, 0xffffffff, 0x7, r2})

22:49:12 executing program 2:
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000083c0)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0)

[ 2371.320753] random: crng reseeded on system resumption
22:49:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x8000000000000}}}}, 0xc0}}, 0x0)

22:49:12 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0xfffffffffffffe76}], 0x2, 0x2)

22:49:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xf0ffffff, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:21 executing program 1:
vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:21 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="5c500f61f3c165bfc63c30c66fa2fb1a3e2fe83ab381"], 0x1c}}, 0x0)

22:49:21 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf0ffffffffffff}}}}, 0xc0}}, 0x0)

22:49:21 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000a55000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000aa1000/0x3000)=nil, &(0x7f000094b000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="ef9c8f7baadde1b111126771f866a4a7c6027301", 0x14, r0}, 0x68)

22:49:21 executing program 2:
r0 = getpid()
fork()
process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0)
fork()
r1 = getpid()
process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000001940)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0)

22:49:21 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 78)

22:49:21 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xfffff000, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:21 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:21 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000012c00)=ANY=[@ANYBLOB='3'])

[ 2380.274332] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2380.275052] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2380.282513] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2380.283126] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:49:21 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x100000000000000}}}}, 0xc0}}, 0x0)

22:49:21 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$setstatus(r2, 0x4, 0x0)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r1, {0x800}}, './file0\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000580)=0x80000001)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
r7 = dup2(r6, 0xffffffffffffffff)
readv(r7, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/54, 0x36}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/233, 0xe9}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000900)=""/198, 0xc6}], 0x7)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f00000001c0)={0x8, 0x8a66, 0xff})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000b80)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0xfffffd83, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa9e5}]}, 0x90}, 0x1, 0x0, 0x0, 0x20044800}, 0x40)

22:49:21 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xffffff7f, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:21 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
connect$packet(r4, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x3f}, 0x14)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000380)={0x4, &(0x7f0000000300)=[{0x6, 0x13, &(0x7f0000000080)="d5983770e799489e5a33fa2298dfb2a30fa635", 0x0, 0x1}, {0x2, 0x31, &(0x7f0000000140)="cfc3b31a1394a5aee1bd68564161fb75f4138cbf3c476f748b18c24e5f4ddaf29791d2c08793b9fb02a227a9842b03bbb4"}, {0x0, 0x1c, &(0x7f0000000180)="b1c5d175235cf3fa02ea808f7b382c2dcbb9128446cd70d12319d482"}, {0x7, 0x74, &(0x7f0000000280)="ca8b795ee41d4ff9044d8a402c4e0e37a68c6bb9df44be4796256204c543a0d4f6d36b6305ef819868022f83a69bb4817c6018c8453702e2e381a9ba1c2504a4987e86ad9d41184e498c2144840c56d9b122eba24d697e41d4226ec20a77b65996195865d60ae241fc21d99b8463efa30e4f5ab7", 0x1}]})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="dcad3bcbdc19ae0e2ed09e1851ecaf438d1712486e0a111018d555426c4e7f45cc74e843c38a1dfd9d7758c0e070df2e8c840c1a8f6047c7f1f1cdddde6592f67903080b486a4c91340507aba352e1960dd552eeca60d5f32b504d"], 0x1c}}, 0x0)

[ 2380.354986] loop6: detected capacity change from 0 to 4
[ 2380.358000] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2380.358680] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2380.359909] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2380.364535] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2380.394461] ext2: Unknown parameter '3'
22:49:21 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x3}]})

22:49:21 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1e00, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2380.413880] loop6: detected capacity change from 0 to 4
22:49:21 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 79)

[ 2380.420721] ext2: Unknown parameter '3'
22:49:21 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xffffff9e, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2380.517806] FAULT_INJECTION: forcing a failure.
[ 2380.517806] name failslab, interval 1, probability 0, space 0, times 0
22:49:21 executing program 6:
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0)
mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='befs\x00', 0x241f00d, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x2}, {0x0, 0x3}}}}, 0xc0}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xf37c}}, './file0\x00'})

22:49:21 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[], 0x24, 0x0)

[ 2380.518840] CPU: 1 UID: 0 PID: 17471 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2380.518856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2380.518864] Call Trace:
[ 2380.518868]  <TASK>
[ 2380.518873]  dump_stack_lvl+0xfa/0x120
[ 2380.518894]  should_fail_ex+0x4d7/0x5e0
[ 2380.518914]  ? __kernfs_new_node+0xd3/0x870
[ 2380.518933]  should_failslab+0xc2/0x120
[ 2380.518952]  kmem_cache_alloc_noprof+0x72/0x680
[ 2380.518973]  ? __kernfs_new_node+0xd3/0x870
[ 2380.518991]  __kernfs_new_node+0xd3/0x870
[ 2380.519012]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2380.519035]  ? lock_acquire+0x15e/0x2f0
[ 2380.519050]  ? kernfs_root+0x23/0x2a0
[ 2380.519068]  ? find_held_lock+0x2b/0x80
[ 2380.519087]  ? kernfs_root+0xee/0x2a0
[ 2380.519105]  ? lock_release+0xc8/0x290
[ 2380.519117]  ? lock_is_held_type+0x9e/0x120
[ 2380.519136]  kernfs_new_node+0x13c/0x1e0
[ 2380.519153]  __kernfs_create_file+0x55/0x360
[ 2380.519173]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2380.519193]  ? __pfx_dev_attr_store+0x10/0x10
[ 2380.519217]  internal_create_group+0x571/0xeb0
[ 2380.519243]  ? __pfx_internal_create_group+0x10/0x10
[ 2380.519261]  ? kernfs_add_one+0x150/0x830
[ 2380.519283]  ? kernfs_create_link+0x1be/0x240
[ 2380.519302]  internal_create_groups.part.0+0x90/0x140
[ 2380.519317]  sysfs_create_groups+0x29/0x50
[ 2380.519329]  device_add+0x67e/0x1830
[ 2380.519349]  ? __pfx_device_add+0x10/0x10
[ 2380.519368]  ? lockdep_init_map_type+0x4b/0x240
[ 2380.519383]  ? __init_waitqueue_head+0xca/0x150
[ 2380.519403]  netdev_register_kobject+0x1a9/0x3e0
[ 2380.519422]  register_netdevice+0x1332/0x1d70
[ 2380.519443]  ? __pfx_register_netdevice+0x10/0x10
[ 2380.519456]  ? mac802154_llsec_set_params+0x490/0x570
[ 2380.519483]  ieee802154_if_add+0xc73/0x1140
[ 2380.519504]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2380.519523]  ? __pfx___mutex_lock+0x10/0x10
[ 2380.519536]  ? skb_put+0x138/0x1b0
[ 2380.519554]  ? __nlmsg_put+0x159/0x1d0
[ 2380.519576]  ? genlmsg_put+0x265/0x2e0
[ 2380.519597]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2380.519613]  ieee802154_add_iface+0x472/0x970
[ 2380.519633]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2380.519651]  ? trace_kmalloc+0x1f/0xb0
[ 2380.519671]  ? __nla_parse+0x42/0x60
[ 2380.519689]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2380.519706]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2380.519728]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2380.519746]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2380.519772]  ? security_capable+0x2f/0x90
[ 2380.519792]  genl_rcv_msg+0x532/0x7e0
[ 2380.519811]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2380.519828]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2380.519855]  netlink_rcv_skb+0x147/0x430
[ 2380.519870]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2380.519887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2380.519913]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2380.519930]  genl_rcv+0x28/0x40
[ 2380.519944]  netlink_unicast+0x5a7/0x870
[ 2380.519962]  ? __pfx_netlink_unicast+0x10/0x10
[ 2380.519986]  netlink_sendmsg+0x8a3/0xd80
[ 2380.520005]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2380.520029]  ____sys_sendmsg+0xa67/0xc20
[ 2380.520049]  ? copy_msghdr_from_user+0xfb/0x150
[ 2380.520064]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2380.520088]  ? lock_acquire+0x15e/0x2f0
[ 2380.520105]  ___sys_sendmsg+0x10f/0x1b0
[ 2380.520120]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2380.520133]  ? perf_trace_lock+0xb5/0x5d0
[ 2380.520151]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2380.520165]  ? proc_fail_nth_write+0x97/0x220
[ 2380.520186]  ? lock_acquire+0x15e/0x2f0
[ 2380.520199]  ? __fget_files+0x34/0x3b0
[ 2380.520228]  ? find_held_lock+0x2b/0x80
[ 2380.520246]  ? __fget_files+0x203/0x3b0
[ 2380.520260]  ? lock_release+0xc8/0x290
[ 2380.520278]  ? __fget_files+0x20d/0x3b0
[ 2380.520300]  __sys_sendmsg+0x150/0x200
[ 2380.520314]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2380.520336]  ? __pfx_ksys_write+0x10/0x10
[ 2380.520360]  do_syscall_64+0xbf/0x390
[ 2380.520376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2380.520389] RIP: 0033:0x7f056dbbbb19
[ 2380.520399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2380.520411] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2380.520423] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2380.520431] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2380.520438] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2380.520446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2380.520452] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2380.520473]  </TASK>
[ 2380.607725] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:49:21 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x0, 0x267, 0x1, 0x2, 0x6, 0x1})

[ 2380.626328] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2380.627541] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2380.635727] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2380.703350] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2380.704347] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2380.705218] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2380.712536] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2382.678389] Bluetooth: hci1: command 0x0406 tx timeout
[ 2382.742402] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2382.743334] Bluetooth: hci4: command 0x0406 tx timeout
[ 2382.744137] Bluetooth: hci7: command 0x0c1a tx timeout
22:49:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xfffffff0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:31 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:31 executing program 6:
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'veth0_macvtap\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xd, {0x2, 0x0, 0x924, 0x2}})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

22:49:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 80)

22:49:31 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000000)=0x80, r1, &(0x7f0000000040)=0x1, 0x3, 0x0)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040010)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)

22:49:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x200000000000000}}}}, 0xc0}}, 0x0)

22:49:31 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x79, 0x2}, 0x100, './file0\x00'})
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:49:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0xffffffff, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2389.845365] FAULT_INJECTION: forcing a failure.
[ 2389.845365] name failslab, interval 1, probability 0, space 0, times 0
[ 2389.847038] CPU: 1 UID: 0 PID: 17499 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2389.847057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2389.847065] Call Trace:
[ 2389.847070]  <TASK>
[ 2389.847076]  dump_stack_lvl+0xfa/0x120
[ 2389.847099]  should_fail_ex+0x4d7/0x5e0
[ 2389.847121]  ? __kernfs_new_node+0xd3/0x870
[ 2389.847142]  should_failslab+0xc2/0x120
[ 2389.847164]  kmem_cache_alloc_noprof+0x72/0x680
[ 2389.847188]  ? __kernfs_new_node+0xd3/0x870
[ 2389.847207]  __kernfs_new_node+0xd3/0x870
[ 2389.847232]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2389.847258]  ? lock_acquire+0x15e/0x2f0
[ 2389.847281]  ? kernfs_root+0x23/0x2a0
[ 2389.847301]  ? find_held_lock+0x2b/0x80
[ 2389.847323]  ? kernfs_root+0xee/0x2a0
[ 2389.847343]  ? lock_release+0xc8/0x290
[ 2389.847358]  ? lock_is_held_type+0x9e/0x120
[ 2389.847378]  kernfs_new_node+0x13c/0x1e0
[ 2389.847398]  __kernfs_create_file+0x55/0x360
[ 2389.847420]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2389.847444]  ? __pfx_dev_attr_store+0x10/0x10
[ 2389.847469]  internal_create_group+0x571/0xeb0
[ 2389.847500]  ? __pfx_internal_create_group+0x10/0x10
[ 2389.847521]  ? kernfs_add_one+0x150/0x830
[ 2389.847541]  ? kernfs_create_link+0x1be/0x240
[ 2389.847562]  internal_create_groups.part.0+0x90/0x140
[ 2389.847580]  sysfs_create_groups+0x29/0x50
[ 2389.847593]  device_add+0x67e/0x1830
[ 2389.847617]  ? __pfx_device_add+0x10/0x10
[ 2389.847638]  ? lockdep_init_map_type+0x4b/0x240
[ 2389.847656]  ? __init_waitqueue_head+0xca/0x150
[ 2389.847678]  netdev_register_kobject+0x1a9/0x3e0
[ 2389.847700]  register_netdevice+0x1332/0x1d70
[ 2389.847724]  ? __pfx_register_netdevice+0x10/0x10
[ 2389.847739]  ? mac802154_llsec_set_params+0x490/0x570
[ 2389.847770]  ieee802154_if_add+0xc73/0x1140
[ 2389.847795]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2389.847816]  ? __pfx___mutex_lock+0x10/0x10
[ 2389.847831]  ? skb_put+0x138/0x1b0
[ 2389.847853]  ? __nlmsg_put+0x159/0x1d0
[ 2389.847878]  ? genlmsg_put+0x265/0x2e0
[ 2389.847901]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2389.847919]  ieee802154_add_iface+0x472/0x970
[ 2389.847942]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2389.847963]  ? trace_kmalloc+0x1f/0xb0
[ 2389.847987]  ? __nla_parse+0x42/0x60
[ 2389.848008]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2389.848027]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2389.848053]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2389.848074]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2389.848104]  ? security_capable+0x2f/0x90
[ 2389.848126]  genl_rcv_msg+0x532/0x7e0
[ 2389.848149]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2389.848169]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2389.848204]  netlink_rcv_skb+0x147/0x430
[ 2389.848221]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2389.848242]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2389.848271]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2389.848291]  genl_rcv+0x28/0x40
[ 2389.848307]  netlink_unicast+0x5a7/0x870
[ 2389.848341]  ? __pfx_netlink_unicast+0x10/0x10
[ 2389.848369]  netlink_sendmsg+0x8a3/0xd80
[ 2389.848390]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2389.848419]  ____sys_sendmsg+0xa67/0xc20
[ 2389.848441]  ? copy_msghdr_from_user+0xfb/0x150
[ 2389.848458]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2389.848487]  ? lock_acquire+0x15e/0x2f0
[ 2389.848506]  ___sys_sendmsg+0x10f/0x1b0
[ 2389.848523]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2389.848538]  ? perf_trace_lock+0xb5/0x5d0
[ 2389.848559]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2389.848575]  ? proc_fail_nth_write+0x97/0x220
[ 2389.848599]  ? lock_acquire+0x15e/0x2f0
[ 2389.848614]  ? __fget_files+0x34/0x3b0
[ 2389.848632]  ? find_held_lock+0x2b/0x80
[ 2389.848653]  ? __fget_files+0x203/0x3b0
[ 2389.848670]  ? lock_release+0xc8/0x290
[ 2389.848690]  ? __fget_files+0x20d/0x3b0
[ 2389.848716]  __sys_sendmsg+0x150/0x200
[ 2389.848732]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2389.848756]  ? __pfx_ksys_write+0x10/0x10
[ 2389.848784]  do_syscall_64+0xbf/0x390
[ 2389.848803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2389.848818] RIP: 0033:0x7f056dbbbb19
[ 2389.848829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2389.848843] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2389.848857] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2389.848866] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2389.848875] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2389.848883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2389.848891] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2389.848914]  </TASK>
22:49:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x300000000000000}}}}, 0xc0}}, 0x0)

22:49:31 executing program 6:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="ea867233418b3bf16882fe43e5295d60a60e9a20f2fbe80d87beadaa3926b0ff6ca0b8f352f3d6fa141f428ecff73e94f744060d83edfb903cce920890851ada60f2d5c63e5abb7a020f1977e7c284a69144e65d77b7ace479bb10accd84c7a31348fc512a4d3acaaeef15be88e2a516a069138410fd773107750ec0e8f190858cc9990d20765acfab68ebb144ae2fc7c850739f7b6bed73919beb2eea1aa7cf9ff3348ca7b14a23c7a7db681f84f1d4fa979cccd1c80bac40f397c9a9b19a41f96775", 0xc3}, {&(0x7f0000000100)="a803cb2e1e5c85392ecef53b04279797e716cf582ef12fdb9b465a96c3a6d086d0e4ae1000894d70d46d1ba49c494688d98bed7b949d17203d843260b7cc44b4157e3cdb8b67b1ecb4143806c9f21d58cf7d1e73305ddd32e9e0e06b92617be55addacc83b0a101db4cab987aec4f4ac8795df53b73bce73455b974ec3f82dd4a0214410e963269037232a6590ed6375b6ececea087127f623863e928c639e471307179fa40acec1042cf463d53c2a9fa5b80055f392190077bbd2134210c72f4347e6b2922ab5888accf596eaa15d43e15e79", 0xd3}, {&(0x7f0000000200)="cfbafd4f2d639c807da6025d846a9a2e566633c778b93569025734a2356b7e65cc0d62a0410d46a5f6d7b922f7eda2aaab9193b53e3c0237c7e25a2d2a91b3d9974f3769b4171d446eab5776b5c4e5301c4e8f0c7f9aa58f1d7025c479013ecf99aaff57c77ece358da28be33d0cf4ee5c8cec5825c12e15878d3ac6ef4e4f7071", 0x81}, {&(0x7f00000002c0)="81ea283bc3a347e2fa75b27326312efbe6dd56ade5face16a82202f5a8b1177d3cbc1d2cc9d79b1acce452815d083b782cb158793a3c97787e468154852c5421aa9c98d2789e661e6feb2dee9b8557ca95d9b37f5f87549bc5c449de307fc171ccad5628300199bad743e3c38a58946effd820c6fec3bf801578ba23afd062ebbfcb5d29fc18bee46d9385b94353608f9413c014372a8b7b18941667b21e094610750a5fb73c22e391", 0xa9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="a8b47855535fdbf7d40738e042450cfdb5c502137f9317378a249cda0f7ca4ffe8d63b67a6358f2be3d14a362aadee5b9c0b0703c43b1963099934d7098b8877d6743ce2a1f72568da3a68d4a1b38cd9bd394367cae191319644554d4df9cee0758def84cf5eeca0f0ed3f765b7f07148101f212cf6f9a8b06df142953e20a3f1b59fce24046615d301749ca6c9f77679787fcf3ed26ca3feaed9ba589b769ed4a9be3ddfc08e2bbc23bc379523b0f", 0xaf}], 0x6, &(0x7f00000014c0)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x24040000)
syz_mount_image$vfat(&(0x7f0000002c00), 0x0, 0x0, 0x3, &(0x7f0000004140)=[{&(0x7f0000002c80)="712e9189a229432e9ba14b867932b16b8a9f0715c197e3844e23fd4b466993c358fbd0cdf274b13ac57fd5f3816f57d63cc77fa8c6db071d3a3008a4eb4e01f9b767acbaf83455587e3c73492045069304481eee6b30d4d612402a3daa00abe5b7d73694cd65f2a6b25ab5ccb02c6f46ba4df7b0e63e39dbc28d9b37e9ee51818fe1c3e87b3713258e353e64a731cc8fab5928d741e38b78b7ed585301695337035d3501a2", 0xa5}, {0x0}, {0x0}], 0x0, &(0x7f0000004200)={[{@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@utf8no}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]})

[ 2390.020607] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2390.022195] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2390.048981] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2390.079608] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2390.083194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2390.159781] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2390.160852] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2390.162148] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2390.164883] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2392.150395] Bluetooth: hci1: command 0x0406 tx timeout
[ 2392.214416] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2392.215495] Bluetooth: hci4: command 0x0406 tx timeout
[ 2392.216246] Bluetooth: hci7: command 0x0c1a tx timeout
22:49:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2a00, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x400000000000000}}}}, 0xc0}}, 0x0)

22:49:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:40 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00', 0x1}, {&(0x7f0000000180)="ae146768c213c08844307a2b69770d9be546111d4e8abce21785c8ca30614cd8b6b602f82d62af5a3a45656803b264df33ec65353ecf96b05468f6f0895d807ff9d9539bd7605576a599cb769a9675925c5c30e4de338ca2f54d9d4dc1018728ce545d519d8523398ce672f7145653951c59c0e2176571236cc2ff046736f1bfc6b1dfa72b10929c71878cc4df2263d204b13a7557422fd1e69e83bb88fdaf32d2f315e31a1cf821bebaf5ab41d92399234db08ac7d9b4eb15c9209e805117e951475d570972db7c25725ce38cd68a55b70b6caf38151d8b98089256f6b018", 0x1}, {&(0x7f0000000000)="9e55cf0e4aca2073b74226599c10ae387e688608260eef176024e6bdd2d71e55f60dc2bf8e4c02f1dc3b79bbf73ef4c8d0d2f22cb1a324dda33af4e562aba0f00fab589cadd110be97bf8dc797d0e3f8886bf63c00dfac91624aa1dc004a13c672bb2fc98fc9d679447bec0f29fb2d163392d62f35a245b0764c1b86e2af0d63185a52106437585260ce7fbfa0ef6c722b20e11fe4ad9e70713ad72a4ce0663a87156cb335b9e09dcac5318cd7bb24067e12b13a6cd9890449f83633c0e06ec934a291366cf0f0d797700c7ebb60a6c1f24fa264f75de3562c32821a75f2cc57428252130cbd592485", 0xfffffffffffffdf6}], 0x3, 0x2)
fcntl$setstatus(r1, 0x407, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r0, 0x0, 0x7f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

22:49:40 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:40 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xa0103)

22:49:40 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pidfd_getfd(r2, r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

22:49:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 81)

[ 2399.000351] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2399.001039] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2399.003729] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2399.006506] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2399.068079] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2399.072013] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2399.074564] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2399.080632] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:49:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x2, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:40 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="ff03000a6f002e2f66696c653000"])
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:49:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x701000000000000}}}}, 0xc0}}, 0x0)

22:49:40 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
read(r0, &(0x7f0000000300)=""/144, 0x90)
recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @local, 0x1}, 0x1c)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="df984e08ca807013ad55df887036cbc99660f9d72c635a270add44fa61fa1b97a8584ff9a66c0d74b1fdc29f346d40fe6bfa2aa00d2a1ca8da9df2dc2ca46dcf9de6386fc1b27f4fa21def67d0", 0x41}], 0x4)

22:49:40 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="00000000002feed972e8e52fe67400000000006800000013000300", @ANYBLOB="2694098beeaaa37e6ce7ac9ca180d3c7d012a4b27178a643567bcca076e4e8b0e28eda09d896d6b5af7f4faa37053b547df3363bff13d47df3167a4e785bc1e6506dd7ca7f894871b5ca886a1ef0732a357d7e30c758458e57d2755325516b40a901ddc7db5759c0f743a5c7b25c90e8762fbb2b50c69b381aea4731a71ca80abd23ffbb2869c529362944c0e103042118a916628b92e5832bc66664ca4518bd62a9980ad57b8df1e687b27e9fc0efff31074be348df3e70bd8a1471287d3bb6114cee5f4986306d3dc4ddcc7720e5f1f5ba565d3a1f2eb2d41ea9e107", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001)

22:49:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 82)

22:49:40 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x44, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}, 0x10000, 0x0, 0x5, 0x0, 0xe62, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f0000000000)="ae1f5220d64b2bc39501b07580b3b47e296af564a5959113e4e474aaead5dca6b6264426364b1a4689b4ff12a120b888ed656260c7d4ce7225efed397a29807200e0e1e6c5e527925cedfe3f77c23fd8ee687f66bd63b2c22a6df4fa1a138006db34d3ce8236b3e9e8cd130554cc5051344e51c002ec348029f4bbf5e99118dbbc2803cf1fdcee43fc1927ef714cab9bb83bba106870087563bd0b793462bccb32c3ff3bbc938575a5bf3691c30df6b4b04c946dabfa1ac3b567ca3cf6ee8f0a01e9", 0xc2}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2399.341746] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:49:40 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40408}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x40, &(0x7f00000000c0)='rpc_pipefs\x00')
umount2(&(0x7f0000000240)='./file0\x00', 0x0)

[ 2399.363935] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:49:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 83)

22:49:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x3, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2399.404079] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:49:40 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}, {&(0x7f0000000000)="78eee684e5211c7432535f1158be2f18687766ce845083db2d193281414ef3346ee342255d82d0e3cf8c9d9bee08dd3e6f788aacc26bc54a8290f5804acec62e63", 0x41}], 0x3, 0x0)
sync_file_range(r0, 0x800, 0x7, 0x5)

[ 2399.412787] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2399.413782] ext4: Unknown parameter 'rpc_pipefs'
22:49:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x800000000000000}}}}, 0xc0}}, 0x0)

[ 2399.445462] ext4: Unknown parameter 'rpc_pipefs'
22:49:40 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c6c35a9", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2399.476910] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2399.478069] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2399.479832] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2399.482308] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:49:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x4, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 84)

[ 2399.592984] FAULT_INJECTION: forcing a failure.
[ 2399.592984] name failslab, interval 1, probability 0, space 0, times 0
[ 2399.594195] CPU: 1 UID: 0 PID: 17605 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2399.594212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2399.594220] Call Trace:
[ 2399.594225]  <TASK>
[ 2399.594230]  dump_stack_lvl+0xfa/0x120
[ 2399.594254]  should_fail_ex+0x4d7/0x5e0
[ 2399.594278]  ? __kernfs_new_node+0xd3/0x870
[ 2399.594299]  should_failslab+0xc2/0x120
[ 2399.594319]  kmem_cache_alloc_noprof+0x72/0x680
[ 2399.594340]  ? __kernfs_new_node+0xd3/0x870
[ 2399.594358]  __kernfs_new_node+0xd3/0x870
[ 2399.594381]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2399.594404]  ? lock_acquire+0x15e/0x2f0
[ 2399.594421]  ? kernfs_root+0x23/0x2a0
[ 2399.594440]  ? find_held_lock+0x2b/0x80
[ 2399.594460]  ? kernfs_root+0xee/0x2a0
[ 2399.594479]  ? lock_release+0xc8/0x290
[ 2399.594492]  ? lock_is_held_type+0x9e/0x120
[ 2399.594511]  kernfs_new_node+0x13c/0x1e0
[ 2399.594529]  __kernfs_create_file+0x55/0x360
[ 2399.594549]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2399.594571]  ? __pfx_dev_attr_store+0x10/0x10
[ 2399.594595]  internal_create_group+0x571/0xeb0
[ 2399.594624]  ? __pfx_internal_create_group+0x10/0x10
[ 2399.594643]  ? kernfs_add_one+0x150/0x830
[ 2399.594660]  ? kernfs_create_link+0x1be/0x240
[ 2399.594679]  internal_create_groups.part.0+0x90/0x140
[ 2399.594695]  sysfs_create_groups+0x29/0x50
[ 2399.594707]  device_add+0x67e/0x1830
[ 2399.594728]  ? __pfx_device_add+0x10/0x10
[ 2399.594747]  ? lockdep_init_map_type+0x4b/0x240
[ 2399.594763]  ? __init_waitqueue_head+0xca/0x150
[ 2399.594784]  netdev_register_kobject+0x1a9/0x3e0
[ 2399.594804]  register_netdevice+0x1332/0x1d70
[ 2399.594825]  ? __pfx_register_netdevice+0x10/0x10
[ 2399.594839]  ? mac802154_llsec_set_params+0x490/0x570
[ 2399.594869]  ieee802154_if_add+0xc73/0x1140
[ 2399.594891]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2399.594910]  ? __pfx___mutex_lock+0x10/0x10
[ 2399.594924]  ? skb_put+0x138/0x1b0
[ 2399.594945]  ? __nlmsg_put+0x159/0x1d0
[ 2399.594968]  ? genlmsg_put+0x265/0x2e0
[ 2399.594989]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2399.595005]  ieee802154_add_iface+0x472/0x970
[ 2399.595027]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2399.595045]  ? trace_kmalloc+0x1f/0xb0
[ 2399.595067]  ? __nla_parse+0x42/0x60
[ 2399.595087]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2399.595104]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2399.595128]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2399.595146]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2399.595173]  ? security_capable+0x2f/0x90
[ 2399.595193]  genl_rcv_msg+0x532/0x7e0
[ 2399.595215]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2399.595233]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2399.595260]  netlink_rcv_skb+0x147/0x430
[ 2399.595275]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2399.595294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2399.595319]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2399.595338]  genl_rcv+0x28/0x40
[ 2399.595352]  netlink_unicast+0x5a7/0x870
[ 2399.595371]  ? __pfx_netlink_unicast+0x10/0x10
[ 2399.595396]  netlink_sendmsg+0x8a3/0xd80
[ 2399.595415]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2399.595440]  ____sys_sendmsg+0xa67/0xc20
[ 2399.595460]  ? copy_msghdr_from_user+0xfb/0x150
[ 2399.595475]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2399.595501]  ? lock_acquire+0x15e/0x2f0
[ 2399.595519]  ___sys_sendmsg+0x10f/0x1b0
[ 2399.595534]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2399.595547]  ? perf_trace_lock+0xb5/0x5d0
[ 2399.595566]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2399.595580]  ? proc_fail_nth_write+0x97/0x220
[ 2399.595601]  ? lock_acquire+0x15e/0x2f0
[ 2399.595615]  ? __fget_files+0x34/0x3b0
[ 2399.595631]  ? find_held_lock+0x2b/0x80
[ 2399.595650]  ? __fget_files+0x203/0x3b0
[ 2399.595665]  ? lock_release+0xc8/0x290
[ 2399.595683]  ? __fget_files+0x20d/0x3b0
[ 2399.595706]  __sys_sendmsg+0x150/0x200
[ 2399.595721]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2399.595743]  ? __pfx_ksys_write+0x10/0x10
[ 2399.595769]  do_syscall_64+0xbf/0x390
[ 2399.595786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2399.595800] RIP: 0033:0x7f056dbbbb19
[ 2399.595809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2399.595822] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2399.595833] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2399.595842] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2399.595849] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2399.595857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2399.595864] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2399.595885]  </TASK>
[ 2401.430426] Bluetooth: hci1: command 0x0406 tx timeout
[ 2401.494428] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2401.494472] Bluetooth: hci4: command 0x0406 tx timeout
[ 2401.495504] Bluetooth: hci7: command 0x0c1a tx timeout
22:49:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa66, 0x1}, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x47, r0, &(0x7f0000000140)="9507d370860b4d52f500793b9b12cf2ce0e0ee650dee8931d6046e2c6c609cbab8d679d2f8dcecebd83a2d6db28c8c7e26c717e86de537cbf82f83f81670ca5c6540a7947bc182f7bec9dab0c86daa519b85aa580ca21c284b2c29fc5d068762bce261034508cfb975097afd174a4e41", 0x70, 0x3}, &(0x7f0000000240))
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000340))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0x2, 0x80000000, 0x2000, 0x10000, 0x371a, 0x6, 0xffffffff, 0x2c, 0xd8, 0xb38, 0x3684, 0x8, 0x4, 0xffffffff, 0x4cf, 0x10001, 0x3, 0x7e, 0x7, 0x5, 0x192, 0x1f}})
clone3(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)

22:49:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3600, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:49:51 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1d0, &(0x7f0000000100))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xf400080b)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x124)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xd6ba, &(0x7f0000000000))
inotify_rm_watch(r0, r1)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0xe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400180, 0x80)

22:49:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 85)

22:49:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x8, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:49:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x900000000000000}}}}, 0xc0}}, 0x0)

22:49:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7a, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x9c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:49:51 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040), 0x0, 0xf)

22:49:51 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:49:51 executing program 6:
r0 = socket$inet(0x2, 0x3, 0x5)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000000c0)=0x1, 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'})
write(0xffffffffffffffff, &(0x7f0000000000)="3bff899b7a8706ed9a51833b196ed4e2583d3d11d54276f2c920f2bf7f3797aa87f5df7e97a83a6eb481be101e5e141944d0b76ba7cc5bd9d1336a4635467873fd73cf727fc6cda203b87c6a792cc04a75", 0x51)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x800, 0x2)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="9b718eb8f43758618ba801dee7e262ca", 0x10)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})

22:49:51 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
readv(r2, &(0x7f0000000200), 0x0)

[ 2409.898120] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2409.916767] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2409.933130] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2409.941093] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2410.033571] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2410.040045] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2410.051019] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2410.059771] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2411.990414] Bluetooth: hci1: command 0x0406 tx timeout
[ 2412.054404] Bluetooth: hci4: command 0x0406 tx timeout
[ 2412.054440] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2412.118394] Bluetooth: hci6: command 0x0c1a tx timeout
22:50:00 executing program 6:
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)
fork()
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$sock(r0, &(0x7f0000002800)={&(0x7f0000000380)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000400)="b478c64a79d6a3ae051a4f65b8cbfeb07887f332c16e023599ead966878a0b8fab9856a56a810cf2ee9eef5a4451", 0x2e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f12fe04825f2bf393197415fb9879456c53418d84df9e6da8a49d2cfc9c0ed461168c9ca002a11344043d26c9aabdca992d0cabd93b065a6a4acb9f438865e15a5cabe7ae05c881aed04215c1a6a2c56df02b9367de9dae0617551c2e4d58e946c873a0c6ce5bf491a7c3db331fbc0a38e2171e03e619400822e2d08fb2dc730cf8035e62a575dbe0f8f3663f14d98bd29020632534c7ac637bdffa55821c67ed23f8636e63c424c636e8fd9fad7ff03b2caf5d981bc730a0c1f6ff3e0446e", 0xbf}, {&(0x7f0000001500)="7319b16925fb41035643c48e7e73", 0xe}, {&(0x7f0000001540)="873c7aef374ea06801eaa91b1cc0028d1ddeb5eba75e3ea71c6cb3a56f6dc3e7b94460900ebc5e4c2dc08f574d67b064c6a4fe498ee94edd1af2d58701e98c8ca5546c9822a0abb6d4679de4161a97b4c9fbd2e6286cc61d", 0x58}, {&(0x7f00000015c0)="a3052d08ffe70451c981f051c3a3b8bbf174f93140502468a7126a2ff6cc9bb37e5aa0dd26b565944815cab6256463a16893dfcd2159a897c843795ae6c1a657f5814e2ce20ffdb032170a8f92bc2ace0983f9c2787f9e8d0a5994e32f3e8405a14a7bc23fad100b18a682c8df66bd8bd00811a8160e269f09da0a2d368dd8b2ef8488f128c0cb1a52893d2cc5f789a995fb92be5397bc8b24d4bfb34243", 0x9e}, {&(0x7f0000001680)="88c9f1f30b9f479d9fac3bfe0c5a2d5a6222a7ca070ba1488ddce8d25a5aff6a31fa54016f4b06a5ed5b61332dbd16e1", 0x30}, {&(0x7f00000016c0)="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", 0x1000}], 0x8, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xce83}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}], 0xc0}, 0x44001)

22:50:00 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xa00000000000000}}}}, 0xc0}}, 0x0)

22:50:00 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3c00, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:00 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x9, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:00 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000000)="355194a4bc9c426f817de69109de029db9e89f8056856cd51a43bd10d83afe67f30427bfa218e380fbb596bd91c8639628c9b1ee41eb7488a2d2add102da29059a89a83319b38930776085e86fdc8d46a36274500407b4a27ee1075147ffb2c96a88436d56c99620808435de417eb38bc68438ab9e9dfc7a818152e5c5963683a8cf0df6930bbeb8f98786f27a8887c1312096a0480fb502d1b3b14a", 0x9c}], 0x2, 0x4)

22:50:00 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 86)

22:50:00 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)="e9", 0xffffffd8}, {&(0x7f0000000480)="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", 0x1}, {&(0x7f00000002c0)="a3f9f7aeaf629a7d21daa1ac0a542b9c83e6bade84935b550674d3f2355d3a1f1835fe9a6455af3afd2627105a444ebec619add81f029cc9cf9bb6655c18b78e400113222f2a8bc587c8454b7f6f01726307cb188aad5f3a144c6ab152755aa9b25773535a0c685f27cafd69690158a234f575784e5d8c298f929a01c5b079c138cfefb0273ef4cfa5a1d66ffe03e9bb0a833b6e140bd83e13c72f2ec2689bae39fba280409fd1e8424ba5909e833beee81cba1ee33010872d5e114dce53af7fea2ee259d0db5b24d0e55e56fa0cc38e55fa10cec9be8e64823e8ea88069", 0xfffffffffffffe9a}, {&(0x7f0000000000)="967a13b159d1bfba020c52005864eebe98dc957dd0fee12fe05c", 0x16}], 0x2, 0x4)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:50:00 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}]}, 0x24}}, 0x4040000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = fork()
sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x4)
r4 = getpid()
pidfd_open(r4, 0x0)
rt_tgsigqueueinfo(r4, r3, 0x1e, &(0x7f0000000100)={0x3d, 0x9, 0x1})
r5 = epoll_create1(0x0)
r6 = getpid()
r7 = getpid()
r8 = pidfd_open(r7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000000))
r9 = getpid()
r10 = pidfd_open(r9, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r10, &(0x7f0000000040)={r5, r8})
waitid(0x2, r4, &(0x7f0000000180), 0x2, &(0x7f0000000280))

22:50:00 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:00 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf00000000000000}}}}, 0xc0}}, 0x0)

[ 2419.355361] FAULT_INJECTION: forcing a failure.
[ 2419.355361] name failslab, interval 1, probability 0, space 0, times 0
[ 2419.356647] CPU: 1 UID: 0 PID: 17693 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2419.356664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2419.356671] Call Trace:
[ 2419.356676]  <TASK>
[ 2419.356680]  dump_stack_lvl+0xfa/0x120
[ 2419.356711]  should_fail_ex+0x4d7/0x5e0
[ 2419.356730]  ? __kernfs_new_node+0xd3/0x870
[ 2419.356749]  should_failslab+0xc2/0x120
[ 2419.356768]  kmem_cache_alloc_noprof+0x72/0x680
[ 2419.356789]  ? __kernfs_new_node+0xd3/0x870
[ 2419.356806]  __kernfs_new_node+0xd3/0x870
[ 2419.356828]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2419.356850]  ? lock_acquire+0x15e/0x2f0
[ 2419.356866]  ? kernfs_root+0x23/0x2a0
[ 2419.356884]  ? find_held_lock+0x2b/0x80
[ 2419.356903]  ? kernfs_root+0xee/0x2a0
[ 2419.356921]  ? lock_release+0xc8/0x290
[ 2419.356936]  ? lock_is_held_type+0x9e/0x120
[ 2419.356955]  kernfs_new_node+0x13c/0x1e0
[ 2419.356972]  __kernfs_create_file+0x55/0x360
[ 2419.356991]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2419.357012]  ? __pfx_dev_attr_store+0x10/0x10
[ 2419.357035]  internal_create_group+0x571/0xeb0
[ 2419.357061]  ? __pfx_internal_create_group+0x10/0x10
[ 2419.357080]  ? kernfs_add_one+0x150/0x830
[ 2419.357097]  ? kernfs_create_link+0x1be/0x240
[ 2419.357115]  internal_create_groups.part.0+0x90/0x140
[ 2419.357131]  sysfs_create_groups+0x29/0x50
[ 2419.357143]  device_add+0x67e/0x1830
[ 2419.357164]  ? __pfx_device_add+0x10/0x10
[ 2419.357182]  ? lockdep_init_map_type+0x4b/0x240
[ 2419.357197]  ? __init_waitqueue_head+0xca/0x150
[ 2419.357217]  netdev_register_kobject+0x1a9/0x3e0
[ 2419.357237]  register_netdevice+0x1332/0x1d70
[ 2419.357257]  ? __pfx_register_netdevice+0x10/0x10
[ 2419.357275]  ? mac802154_llsec_set_params+0x490/0x570
[ 2419.357302]  ieee802154_if_add+0xc73/0x1140
[ 2419.357323]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2419.357342]  ? __pfx___mutex_lock+0x10/0x10
[ 2419.357355]  ? skb_put+0x138/0x1b0
[ 2419.357373]  ? __nlmsg_put+0x159/0x1d0
[ 2419.357396]  ? genlmsg_put+0x265/0x2e0
[ 2419.357419]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2419.357437]  ieee802154_add_iface+0x472/0x970
[ 2419.357457]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2419.357475]  ? trace_kmalloc+0x1f/0xb0
[ 2419.357496]  ? __nla_parse+0x42/0x60
[ 2419.357514]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2419.357531]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2419.357553]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2419.357571]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2419.357597]  ? security_capable+0x2f/0x90
[ 2419.357617]  genl_rcv_msg+0x532/0x7e0
[ 2419.357637]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2419.357654]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2419.357681]  netlink_rcv_skb+0x147/0x430
[ 2419.357696]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2419.357714]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2419.357739]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2419.357757]  genl_rcv+0x28/0x40
[ 2419.357770]  netlink_unicast+0x5a7/0x870
[ 2419.357789]  ? __pfx_netlink_unicast+0x10/0x10
[ 2419.357813]  netlink_sendmsg+0x8a3/0xd80
[ 2419.357832]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2419.357857]  ____sys_sendmsg+0xa67/0xc20
[ 2419.357877]  ? copy_msghdr_from_user+0xfb/0x150
[ 2419.357891]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2419.357916]  ? lock_acquire+0x15e/0x2f0
[ 2419.357933]  ___sys_sendmsg+0x10f/0x1b0
[ 2419.357948]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2419.357960]  ? perf_trace_lock+0xb5/0x5d0
[ 2419.357979]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2419.357992]  ? proc_fail_nth_write+0x97/0x220
[ 2419.358013]  ? lock_acquire+0x15e/0x2f0
[ 2419.358026]  ? __fget_files+0x34/0x3b0
[ 2419.358042]  ? find_held_lock+0x2b/0x80
[ 2419.358060]  ? __fget_files+0x203/0x3b0
[ 2419.358074]  ? lock_release+0xc8/0x290
[ 2419.358092]  ? __fget_files+0x20d/0x3b0
[ 2419.358114]  __sys_sendmsg+0x150/0x200
[ 2419.358128]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2419.358149]  ? __pfx_ksys_write+0x10/0x10
[ 2419.358175]  do_syscall_64+0xbf/0x390
[ 2419.358191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2419.358204] RIP: 0033:0x7f056dbbbb19
[ 2419.358214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2419.358226] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2419.358238] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2419.358246] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2419.358254] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2419.358261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2419.358268] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2419.358288]  </TASK>
22:50:00 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000))
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae"}], 0x2, 0x0)

[ 2419.515910] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2419.529036] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:50:00 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x9effffff00000000}}}}, 0xc0}}, 0x0)

22:50:00 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 87)

22:50:00 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2419.541136] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2419.551226] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2419.630173] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2419.633029] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2419.641511] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2419.653176] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:50:00 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="cc7aee5d804d975e6ed9b0221bbb92c8fbf305b19c5bccb74ef9cffe53090000000d9dedfc91d580feb0cf00b101e4c1fccaa9db80fd018000002976830320b518df8a7d7943b7c02beb0a77a018a371298362e164bd4a2ce3420bcdeed1490d9e7e5a741d9b5d0cc315962f862789ca8c860fc83b1b53ca8bb52b777ca5f126e88e7aac62424d9498719813e4b9951800716b6f00bd3a8868a7a5a6a4842960372e64e1da5eb2ecf69f3471a4ca8b49bd35b7da8ce1267051d0e7dd4307e2d8993e87d3fd9c5205b99712979f4e2b437c139ce88bae3cb1bf1703e4fdb244daece10b85d94f7ad7ddd3efd4c40f02df8c2ee6e9e10da525b3"], 0x1c}}, 0x0)

22:50:00 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xf0ffffff00000000}}}}, 0xc0}}, 0x0)

[ 2419.665912] FAULT_INJECTION: forcing a failure.
[ 2419.665912] name failslab, interval 1, probability 0, space 0, times 0
[ 2419.666995] CPU: 1 UID: 0 PID: 17724 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2419.667013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2419.667022] Call Trace:
[ 2419.667026]  <TASK>
[ 2419.667031]  dump_stack_lvl+0xfa/0x120
[ 2419.667053]  should_fail_ex+0x4d7/0x5e0
[ 2419.667073]  ? __kernfs_new_node+0xd3/0x870
[ 2419.667094]  should_failslab+0xc2/0x120
[ 2419.667114]  kmem_cache_alloc_noprof+0x72/0x680
[ 2419.667136]  ? __kernfs_new_node+0xd3/0x870
[ 2419.667155]  __kernfs_new_node+0xd3/0x870
[ 2419.667178]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2419.667202]  ? lock_acquire+0x15e/0x2f0
[ 2419.667218]  ? kernfs_root+0x23/0x2a0
[ 2419.667238]  ? find_held_lock+0x2b/0x80
[ 2419.667258]  ? kernfs_root+0xee/0x2a0
[ 2419.667281]  ? lock_release+0xc8/0x290
[ 2419.667295]  ? lock_is_held_type+0x9e/0x120
[ 2419.667314]  kernfs_new_node+0x13c/0x1e0
[ 2419.667332]  __kernfs_create_file+0x55/0x360
[ 2419.667353]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2419.667375]  ? __pfx_dev_attr_store+0x10/0x10
[ 2419.667399]  internal_create_group+0x571/0xeb0
[ 2419.667427]  ? __pfx_internal_create_group+0x10/0x10
[ 2419.667447]  ? kernfs_add_one+0x150/0x830
[ 2419.667465]  ? kernfs_create_link+0x1be/0x240
[ 2419.667484]  internal_create_groups.part.0+0x90/0x140
[ 2419.667501]  sysfs_create_groups+0x29/0x50
[ 2419.667513]  device_add+0x67e/0x1830
[ 2419.667535]  ? __pfx_device_add+0x10/0x10
[ 2419.667555]  ? lockdep_init_map_type+0x4b/0x240
[ 2419.667572]  ? __init_waitqueue_head+0xca/0x150
[ 2419.667592]  netdev_register_kobject+0x1a9/0x3e0
[ 2419.667613]  register_netdevice+0x1332/0x1d70
[ 2419.667635]  ? __pfx_register_netdevice+0x10/0x10
[ 2419.667649]  ? mac802154_llsec_set_params+0x490/0x570
[ 2419.667679]  ieee802154_if_add+0xc73/0x1140
[ 2419.667701]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2419.667721]  ? __pfx___mutex_lock+0x10/0x10
[ 2419.667736]  ? skb_put+0x138/0x1b0
[ 2419.667761]  ? genlmsg_put+0x265/0x2e0
[ 2419.667783]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2419.667800]  ieee802154_add_iface+0x472/0x970
[ 2419.667822]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2419.667842]  ? trace_kmalloc+0x1f/0xb0
[ 2419.667863]  ? __nla_parse+0x42/0x60
[ 2419.667883]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2419.667902]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2419.667926]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2419.667945]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2419.667973]  ? security_capable+0x2f/0x90
[ 2419.667994]  genl_rcv_msg+0x532/0x7e0
[ 2419.668015]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2419.668033]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2419.668061]  netlink_rcv_skb+0x147/0x430
[ 2419.668078]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2419.668097]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2419.668123]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2419.668142]  genl_rcv+0x28/0x40
[ 2419.668157]  netlink_unicast+0x5a7/0x870
[ 2419.668177]  ? __pfx_netlink_unicast+0x10/0x10
[ 2419.668203]  netlink_sendmsg+0x8a3/0xd80
[ 2419.668223]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2419.668248]  ____sys_sendmsg+0xa67/0xc20
[ 2419.668269]  ? copy_msghdr_from_user+0xfb/0x150
[ 2419.668284]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2419.668311]  ? lock_acquire+0x15e/0x2f0
[ 2419.668329]  ___sys_sendmsg+0x10f/0x1b0
[ 2419.668345]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2419.668358]  ? perf_trace_lock+0xb5/0x5d0
[ 2419.668378]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2419.668393]  ? proc_fail_nth_write+0x97/0x220
[ 2419.668415]  ? lock_acquire+0x15e/0x2f0
[ 2419.668429]  ? __fget_files+0x34/0x3b0
[ 2419.668446]  ? find_held_lock+0x2b/0x80
[ 2419.668466]  ? __fget_files+0x203/0x3b0
[ 2419.668481]  ? lock_release+0xc8/0x290
[ 2419.668500]  ? __fget_files+0x20d/0x3b0
[ 2419.668524]  __sys_sendmsg+0x150/0x200
[ 2419.668538]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2419.668561]  ? __pfx_ksys_write+0x10/0x10
[ 2419.668587]  do_syscall_64+0xbf/0x390
[ 2419.668605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2419.668619] RIP: 0033:0x7f056dbbbb19
[ 2419.668629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2419.668642] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2419.668655] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2419.668663] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2419.668671] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2419.668678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2419.668686] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2419.668721]  </TASK>
[ 2421.590441] Bluetooth: hci1: command 0x0406 tx timeout
[ 2421.656066] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2421.656126] Bluetooth: hci4: command 0x0406 tx timeout
[ 2421.656950] Bluetooth: hci7: command 0x0c1a tx timeout
22:50:13 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xffffc90000000000}}}}, 0xc0}}, 0x0)

22:50:13 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x300, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:13 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x802, 0x0)
r4 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x400000, 0x119)
ppoll(&(0x7f0000000240)=[{r0, 0x8008}, {r3, 0x20}, {r4, 0xa}, {r1, 0x400}, {r0, 0x400}], 0x5, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x3]}, 0x8)
fcntl$setstatus(r1, 0x407, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00')
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x6, 0x7, 0x3, 0x4f, 0x0, 0x200000000000000, 0x20020, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x1, 0x1, 0x80000001, 0x9, 0x8000, 0x2, 0x3, 0x0, 0x8, 0x0, 0xf4}, 0x0, 0x5, r5, 0x8)
fcntl$setstatus(r2, 0x4, 0x4000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x42, 0x4, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x11ba, 0x2}, 0x0, 0x0, 0xfffffff9, 0x8, 0x7, 0x8, 0x400, 0x0, 0x4b, 0x0, 0x8}, r7, 0x9, 0xffffffffffffffff, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:50:13 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3f00, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 88)

22:50:13 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r2, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r3 = memfd_secret(0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r8 = pidfd_getfd(r3, r1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r7, 0x10, 0x70bd29, 0x5dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xb482bec1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x2000005)

22:50:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x8a0a, 0x6, "36c3e8731c79afcc5b14e9a055c6224833484d"})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file1\x00'})
r3 = accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000280)=0x43, 0x1)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x8, 0x1, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000000100), 0xca1071311c1e7355}, 0x44000, 0x400, 0x1, 0x1, 0x7, 0x2, 0xfe01, 0x0, 0xc832}, 0xffffffffffffffff, 0xb, r2, 0x3)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="3a303030303030303050cc303030303030303735386b"])
r6 = dup2(r4, r1)
write$binfmt_aout(r6, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x300}, "", ['\x00']}, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})

22:50:13 executing program 1:
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x88900)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/vcs#\x00'}], 0xa, "7898826805295663bb202c57e2fbbe2c55af7bf43c9db5a17beab6fe7a34fcd7b26fedd5a4c727aa7da1c6e9e05c1e080e99b40bb816a1573e2ee8ca7a4d2366b69f2d16519b0f075d27cdc0a9ad72564da0adf6d94f2c7a6d5088b525f94cb06c624072bed4c621"}, 0x7e)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac14140000000000000000000000000000000000e1ffffffffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x2a0002)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {<r4=>r2}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x10000000})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r4, {0x20}}, './file1\x00'})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', <r10=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev, r10}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000000)={@empty, r7}, 0x14)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x1100)
setresuid(0x0, r11, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=@report={0x2a0, 0x20, 0x1, 0x70bd28, 0x25dfdbfb, {0x6c, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010102, 0x4e23, 0x0, 0x4e22, 0x89, 0xa, 0x80, 0x0, 0x87, r7, r11}}, [@etimer_thresh={0x8, 0xc, 0x9}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@private0, 0xa, 0x1, 0x3f}}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0xfffe, 0xa, 0xa0, 0x80, 0x29, 0x0, 0xee00}, {0x6, 0x0, 0x64, 0x3ff, 0xfffffffffffffffd, 0xffffffffffffe0bd, 0x2}, {0x400, 0x1, 0xcdf0, 0x7}, 0x1, 0x6e6bb2, 0x1, 0x1, 0x0, 0x2}}, @proto={0x5, 0x19, 0xff}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x6}, @algo_auth={0xb5, 0x1, {{'sha256-asm\x00'}, 0x368, "0b56b1b27eccc31334d7b35e4b9c7ff21297035b158073880769c7c5d5317abdb12b14f8a9aafc3e45737c10fa1eb813f57920515f3cb8c96e7db6313481a0612a5c8150d74dfb063848c6a15a1efe0098278d54ebac478647a1f47ca44317c7fc5060748a89950c1ba769190c"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @algo_aead={0x77, 0x12, {{'gcm(aes)\x00'}, 0x158, 0x0, "9b2d3fc52be635f4dc291845e6dac8b3823cea8d6499a1a25a8cae7b003a07e26fc6dd724f8f72a2c66a0a"}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20002050)

[ 2432.746808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2432.785072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
22:50:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x3d8, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2432.794398] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2432.802897] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2432.806041] sg_write: data in/out 732/246 bytes for SCSI command 0x0-- guessing data in;
[ 2432.806041]    program syz-executor.2 not setting count and/or reply_len properly
[ 2432.812771] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2432.814345] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2432.825373] FAULT_INJECTION: forcing a failure.
[ 2432.825373] name failslab, interval 1, probability 0, space 0, times 0
[ 2432.827268] CPU: 0 UID: 0 PID: 17762 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2432.827301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2432.827316] Call Trace:
[ 2432.827325]  <TASK>
[ 2432.827335]  dump_stack_lvl+0xfa/0x120
[ 2432.827373]  should_fail_ex+0x4d7/0x5e0
[ 2432.827411]  ? __kernfs_new_node+0xd3/0x870
[ 2432.827449]  should_failslab+0xc2/0x120
[ 2432.827487]  kmem_cache_alloc_noprof+0x72/0x680
[ 2432.827530]  ? __kernfs_new_node+0xd3/0x870
[ 2432.827565]  __kernfs_new_node+0xd3/0x870
[ 2432.827611]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2432.827658]  ? lock_acquire+0x15e/0x2f0
[ 2432.827688]  ? kernfs_root+0x23/0x2a0
[ 2432.827726]  ? find_held_lock+0x2b/0x80
[ 2432.827764]  ? kernfs_root+0xee/0x2a0
[ 2432.827803]  ? lock_release+0xc8/0x290
[ 2432.827829]  ? lock_is_held_type+0x9e/0x120
[ 2432.827865]  kernfs_new_node+0x13c/0x1e0
[ 2432.827900]  __kernfs_create_file+0x55/0x360
[ 2432.827940]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2432.827982]  ? __pfx_dev_attr_store+0x10/0x10
[ 2432.828028]  internal_create_group+0x571/0xeb0
[ 2432.828083]  ? __pfx_internal_create_group+0x10/0x10
[ 2432.828121]  ? kernfs_add_one+0x150/0x830
[ 2432.828156]  ? kernfs_create_link+0x1be/0x240
[ 2432.828195]  internal_create_groups.part.0+0x90/0x140
[ 2432.828227]  sysfs_create_groups+0x29/0x50
[ 2432.828252]  device_add+0x67e/0x1830
[ 2432.828294]  ? __pfx_device_add+0x10/0x10
[ 2432.828332]  ? lockdep_init_map_type+0x4b/0x240
[ 2432.828364]  ? __init_waitqueue_head+0xca/0x150
[ 2432.828404]  netdev_register_kobject+0x1a9/0x3e0
[ 2432.828443]  register_netdevice+0x1332/0x1d70
[ 2432.828483]  ? __pfx_register_netdevice+0x10/0x10
[ 2432.828511]  ? mac802154_llsec_set_params+0x490/0x570
[ 2432.828567]  ieee802154_if_add+0xc73/0x1140
[ 2432.828610]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2432.828649]  ? __pfx___mutex_lock+0x10/0x10
[ 2432.828675]  ? skb_put+0x138/0x1b0
[ 2432.828714]  ? __nlmsg_put+0x159/0x1d0
[ 2432.828758]  ? genlmsg_put+0x265/0x2e0
[ 2432.828802]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2432.828836]  ieee802154_add_iface+0x472/0x970
[ 2432.828899]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2432.828937]  ? trace_kmalloc+0x1f/0xb0
[ 2432.828979]  ? __nla_parse+0x42/0x60
[ 2432.829017]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2432.829053]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2432.829099]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2432.829136]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2432.829191]  ? security_capable+0x2f/0x90
[ 2432.829230]  genl_rcv_msg+0x532/0x7e0
[ 2432.829270]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2432.829306]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2432.829362]  netlink_rcv_skb+0x147/0x430
[ 2432.829393]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2432.829430]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2432.829482]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2432.829519]  genl_rcv+0x28/0x40
[ 2432.829548]  netlink_unicast+0x5a7/0x870
[ 2432.829587]  ? __pfx_netlink_unicast+0x10/0x10
[ 2432.829637]  netlink_sendmsg+0x8a3/0xd80
[ 2432.829677]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2432.829728]  ____sys_sendmsg+0xa67/0xc20
[ 2432.829768]  ? copy_msghdr_from_user+0xfb/0x150
[ 2432.829798]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2432.829850]  ? lock_acquire+0x15e/0x2f0
[ 2432.829885]  ___sys_sendmsg+0x10f/0x1b0
[ 2432.829916]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2432.829943]  ? perf_trace_lock+0xb5/0x5d0
[ 2432.829980]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2432.830008]  ? proc_fail_nth_write+0x97/0x220
[ 2432.830050]  ? lock_acquire+0x15e/0x2f0
[ 2432.830078]  ? __fget_files+0x34/0x3b0
[ 2432.830109]  ? find_held_lock+0x2b/0x80
[ 2432.830146]  ? __fget_files+0x203/0x3b0
[ 2432.830176]  ? lock_release+0xc8/0x290
[ 2432.830212]  ? __fget_files+0x20d/0x3b0
[ 2432.830259]  __sys_sendmsg+0x150/0x200
[ 2432.830288]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2432.830333]  ? __pfx_ksys_write+0x10/0x10
[ 2432.830384]  do_syscall_64+0xbf/0x390
[ 2432.830417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2432.830443] RIP: 0033:0x7f056dbbbb19
[ 2432.830463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2432.830487] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2432.830511] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2432.830527] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2432.830543] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2432.830557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2432.830572] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2432.830614]  </TASK>
[ 2432.900404] hpet: Lost 3 RTC interrupts
22:50:14 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x7f, 0x1, 0x37a, 0x5, 0x1})

22:50:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x900, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xffffff7f00000000}}}}, 0xc0}}, 0x0)

22:50:14 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x2671}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

[ 2433.040763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:50:14 executing program 6:
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = socket$inet(0x2, 0x3, 0x1)
pwrite64(r1, &(0x7f0000000140), 0x0, 0xa00003)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup2(r2, r0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x660c, 0x0)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)

22:50:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x8a0a, 0x6, "36c3e8731c79afcc5b14e9a055c6224833484d"})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file1\x00'})
r3 = accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000280)=0x43, 0x1)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x8, 0x1, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000000100), 0xca1071311c1e7355}, 0x44000, 0x400, 0x1, 0x1, 0x7, 0x2, 0xfe01, 0x0, 0xc832}, 0xffffffffffffffff, 0xb, r2, 0x3)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="3a303030303030303050cc303030303030303735386b"])
r6 = dup2(r4, r1)
write$binfmt_aout(r6, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x300}, "", ['\x00']}, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})

[ 2433.050825] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2433.054805] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2433.058896] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:50:14 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x3, 0xd0, 0x2, 0x3, 0x3, 0xffff409b, 0x204, 0x40, 0xc7, 0xfffffffd, 0x9, 0x38, 0x1, 0xbfa6, 0xfff}, [{0x70000000, 0x75, 0x3, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffa}], "ff6ad870056ab9abcdfdeccb5c8b4f3e45448d17a5a19d40930340ae1effefbbf217de99cc29be793c0c96f504b4c1a227b90d5798bd5128ec2e6904df7fb9734e7294216d8ac2ceb65cd1d18a97384a3b627c1f52753e8c7408", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d2)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:50:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0xfffffffffffff000}}}}, 0xc0}}, 0x0)

22:50:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 89)

22:50:14 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e16, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2433.240486] sg_write: data in/out 732/246 bytes for SCSI command 0x0-- guessing data in;
[ 2433.240486]    program syz-executor.2 not setting count and/or reply_len properly
[ 2433.274284] FAULT_INJECTION: forcing a failure.
[ 2433.274284] name failslab, interval 1, probability 0, space 0, times 0
[ 2433.275326] CPU: 1 UID: 0 PID: 17805 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2433.275346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2433.275356] Call Trace:
[ 2433.275360]  <TASK>
[ 2433.275365]  dump_stack_lvl+0xfa/0x120
[ 2433.275387]  should_fail_ex+0x4d7/0x5e0
[ 2433.275407]  ? __kernfs_new_node+0xd3/0x870
[ 2433.275426]  should_failslab+0xc2/0x120
[ 2433.275446]  kmem_cache_alloc_noprof+0x72/0x680
[ 2433.275467]  ? __kernfs_new_node+0xd3/0x870
[ 2433.275484]  __kernfs_new_node+0xd3/0x870
[ 2433.275506]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2433.275528]  ? lock_acquire+0x15e/0x2f0
[ 2433.275544]  ? kernfs_root+0x23/0x2a0
[ 2433.275562]  ? find_held_lock+0x2b/0x80
[ 2433.275581]  ? kernfs_root+0xee/0x2a0
[ 2433.275600]  ? lock_release+0xc8/0x290
[ 2433.275613]  ? lock_is_held_type+0x9e/0x120
[ 2433.275632]  kernfs_new_node+0x13c/0x1e0
[ 2433.275649]  __kernfs_create_file+0x55/0x360
[ 2433.275669]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2433.275689]  ? __pfx_dev_attr_store+0x10/0x10
[ 2433.275712]  internal_create_group+0x571/0xeb0
[ 2433.275738]  ? __pfx_internal_create_group+0x10/0x10
[ 2433.275757]  ? kernfs_add_one+0x150/0x830
[ 2433.275774]  ? kernfs_create_link+0x1be/0x240
[ 2433.275793]  internal_create_groups.part.0+0x90/0x140
[ 2433.275809]  sysfs_create_groups+0x29/0x50
[ 2433.275821]  device_add+0x67e/0x1830
[ 2433.275841]  ? __pfx_device_add+0x10/0x10
[ 2433.275859]  ? lockdep_init_map_type+0x4b/0x240
[ 2433.275875]  ? __init_waitqueue_head+0xca/0x150
[ 2433.275895]  netdev_register_kobject+0x1a9/0x3e0
[ 2433.275915]  register_netdevice+0x1332/0x1d70
[ 2433.275936]  ? __pfx_register_netdevice+0x10/0x10
[ 2433.275949]  ? mac802154_llsec_set_params+0x490/0x570
[ 2433.275978]  ieee802154_if_add+0xc73/0x1140
[ 2433.275999]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2433.276018]  ? __pfx___mutex_lock+0x10/0x10
[ 2433.276031]  ? skb_put+0x138/0x1b0
[ 2433.276051]  ? __nlmsg_put+0x159/0x1d0
[ 2433.276072]  ? genlmsg_put+0x265/0x2e0
[ 2433.276093]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2433.276109]  ieee802154_add_iface+0x472/0x970
[ 2433.276129]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2433.276147]  ? trace_kmalloc+0x1f/0xb0
[ 2433.276168]  ? __nla_parse+0x42/0x60
[ 2433.276186]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2433.276204]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2433.276226]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2433.276244]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2433.276276]  ? security_capable+0x2f/0x90
[ 2433.276297]  genl_rcv_msg+0x532/0x7e0
[ 2433.276316]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2433.276333]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2433.276360]  netlink_rcv_skb+0x147/0x430
[ 2433.276376]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2433.276393]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2433.276419]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2433.276437]  genl_rcv+0x28/0x40
[ 2433.276451]  netlink_unicast+0x5a7/0x870
[ 2433.276471]  ? __pfx_netlink_unicast+0x10/0x10
[ 2433.276495]  netlink_sendmsg+0x8a3/0xd80
[ 2433.276514]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2433.276538]  ____sys_sendmsg+0xa67/0xc20
[ 2433.276558]  ? copy_msghdr_from_user+0xfb/0x150
[ 2433.276572]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2433.276597]  ? lock_acquire+0x15e/0x2f0
[ 2433.276615]  ___sys_sendmsg+0x10f/0x1b0
[ 2433.276630]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2433.276642]  ? perf_trace_lock+0xb5/0x5d0
[ 2433.276661]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2433.276674]  ? proc_fail_nth_write+0x97/0x220
[ 2433.276695]  ? lock_acquire+0x15e/0x2f0
[ 2433.276709]  ? __fget_files+0x34/0x3b0
[ 2433.276725]  ? find_held_lock+0x2b/0x80
[ 2433.276743]  ? __fget_files+0x203/0x3b0
[ 2433.276757]  ? lock_release+0xc8/0x290
[ 2433.276775]  ? __fget_files+0x20d/0x3b0
[ 2433.276798]  __sys_sendmsg+0x150/0x200
[ 2433.276812]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2433.276833]  ? __pfx_ksys_write+0x10/0x10
[ 2433.276859]  do_syscall_64+0xbf/0x390
[ 2433.276887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2433.276901] RIP: 0033:0x7f056dbbbb19
[ 2433.276910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2433.276922] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2433.276934] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2433.276943] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2433.276950] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2433.276957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2433.276964] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2433.276984]  </TASK>
[ 2435.030332] Bluetooth: hci1: command 0x0406 tx timeout
[ 2435.094407] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2435.094924] Bluetooth: hci4: command 0x0406 tx timeout
[ 2435.095403] Bluetooth: hci7: command 0x0c1a tx timeout
22:50:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf00, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 90)

22:50:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc60d, r1, &(0x7f0000000080)="870f9c46f1f97a4710f9b033d253c5afeaffa0d125995d2c5452df4babd0fbe2dd972c1d635e8324c28ff4ef34b9cafdeed7dee77922dffd7185bf8f4b5e0967ecb00296b9d23e892e53a687617d50e42c67e356cb385444716284833d51423de5f6818e80f2ab1058", 0x69, 0x80000000, 0x0, 0x3, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000140), 0x0, 0x7fffffff, 0x0, 0x3, r2}])
write(r0, &(0x7f0000000900)='^', 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r3, 0x0, 0xfdef)

22:50:24 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000040)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039866784000000000000000000000000000008001f00dc51424f1b4304e176a1a07e6991e0e14626996c3703447cd4d5b0780310b03f60cd80909f2d5b1e061291380b9d7b3a496e47a5af709f27ef5e12074e47ea740a4f1afa62aedbd9c0dff87446e36555602fee1df05592e6dcaeb14ba530a730ff360ce6b6035f32e3c9f364df19b6bc9ac24b3efb7f371ad2db06aba33d4ff34711c9ea28b4d7a2e1cb1ec1ff782690fa9fda9af38b706d73edccfe0d0534061d915f0c0afd4cf7", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x7, 0x2})

22:50:24 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
setuid(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002500)=[{{&(0x7f0000001f00)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18}}], 0x18}}], 0x2, 0x0)

22:50:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:24 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6716, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:24 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x7, 0x3, 0xaf, 0x6, 0x0, 0x1, 0x100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2000, 0xffff, 0x6, 0x4, 0x6, 0x2, 0xfffe, 0x0, 0x1000, 0x0, 0x80000000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb)
r2 = eventfd(0xaa7)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x0, [{{r2}, 0x40}]})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r3 = timerfd_create(0x5, 0x80000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
close_range(r3, r4, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="90ae01f1c311f0896cf13f281ac4c34a90f860765901b506b739acbe80da1fd333a848e39de5ff5fb920fcee8b02144bf02b7c439ea86dc50dd6bb87f33385e2a67a2800811180d3c714f0ae3dcf5080d8d5154fc7f14fe3df32081c2aca3b18c84f2b88d0d069761bfac40e38d8e029f848a30e26c23ce26b66ce33ddc257fe09523700186b69761d9fb62ad4c17c98e08762"], 0x1c}}, 0x0)

[ 2443.352120] FAULT_INJECTION: forcing a failure.
[ 2443.352120] name failslab, interval 1, probability 0, space 0, times 0
[ 2443.354124] CPU: 0 UID: 0 PID: 17830 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2443.354154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2443.354167] Call Trace:
[ 2443.354175]  <TASK>
[ 2443.354184]  dump_stack_lvl+0xfa/0x120
[ 2443.354218]  should_fail_ex+0x4d7/0x5e0
[ 2443.354252]  ? __kernfs_new_node+0xd3/0x870
[ 2443.354294]  should_failslab+0xc2/0x120
[ 2443.354327]  kmem_cache_alloc_noprof+0x72/0x680
[ 2443.354365]  ? __kernfs_new_node+0xd3/0x870
[ 2443.354396]  __kernfs_new_node+0xd3/0x870
[ 2443.354437]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2443.354478]  ? lock_acquire+0x15e/0x2f0
[ 2443.354506]  ? kernfs_root+0x23/0x2a0
[ 2443.354539]  ? find_held_lock+0x2b/0x80
[ 2443.354572]  ? kernfs_root+0xee/0x2a0
[ 2443.354606]  ? lock_release+0xc8/0x290
[ 2443.354629]  ? lock_is_held_type+0x9e/0x120
[ 2443.354662]  kernfs_new_node+0x13c/0x1e0
[ 2443.354693]  __kernfs_create_file+0x55/0x360
[ 2443.354729]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2443.354766]  ? __pfx_dev_attr_store+0x10/0x10
[ 2443.354806]  internal_create_group+0x571/0xeb0
[ 2443.354855]  ? __pfx_internal_create_group+0x10/0x10
[ 2443.354888]  ? kernfs_add_one+0x150/0x830
[ 2443.354920]  ? kernfs_create_link+0x1be/0x240
[ 2443.354955]  internal_create_groups.part.0+0x90/0x140
[ 2443.354983]  sysfs_create_groups+0x29/0x50
[ 2443.355005]  device_add+0x67e/0x1830
[ 2443.355043]  ? __pfx_device_add+0x10/0x10
[ 2443.355076]  ? lockdep_init_map_type+0x4b/0x240
[ 2443.355105]  ? __init_waitqueue_head+0xca/0x150
[ 2443.355140]  netdev_register_kobject+0x1a9/0x3e0
[ 2443.355176]  register_netdevice+0x1332/0x1d70
[ 2443.355212]  ? __pfx_register_netdevice+0x10/0x10
[ 2443.355236]  ? mac802154_llsec_set_params+0x490/0x570
[ 2443.355286]  ieee802154_if_add+0xc73/0x1140
[ 2443.355325]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2443.355359]  ? __pfx___mutex_lock+0x10/0x10
[ 2443.355383]  ? skb_put+0x138/0x1b0
[ 2443.355417]  ? __nlmsg_put+0x159/0x1d0
[ 2443.355457]  ? genlmsg_put+0x265/0x2e0
[ 2443.355494]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2443.355523]  ieee802154_add_iface+0x472/0x970
[ 2443.355560]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2443.355593]  ? trace_kmalloc+0x1f/0xb0
[ 2443.355630]  ? __nla_parse+0x42/0x60
[ 2443.355664]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2443.355695]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2443.355742]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2443.355781]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2443.355830]  ? security_capable+0x2f/0x90
[ 2443.355865]  genl_rcv_msg+0x532/0x7e0
[ 2443.355901]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2443.355933]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2443.355983]  netlink_rcv_skb+0x147/0x430
[ 2443.356011]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2443.356045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2443.356092]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2443.356126]  genl_rcv+0x28/0x40
[ 2443.356153]  netlink_unicast+0x5a7/0x870
[ 2443.356187]  ? __pfx_netlink_unicast+0x10/0x10
[ 2443.356233]  netlink_sendmsg+0x8a3/0xd80
[ 2443.356275]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2443.356320]  ____sys_sendmsg+0xa67/0xc20
[ 2443.356356]  ? copy_msghdr_from_user+0xfb/0x150
[ 2443.356383]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2443.356430]  ? lock_acquire+0x15e/0x2f0
[ 2443.356463]  ___sys_sendmsg+0x10f/0x1b0
[ 2443.356491]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2443.356515]  ? perf_trace_lock+0xb5/0x5d0
[ 2443.356550]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2443.356575]  ? proc_fail_nth_write+0x97/0x220
[ 2443.356614]  ? lock_acquire+0x15e/0x2f0
[ 2443.356639]  ? __fget_files+0x34/0x3b0
[ 2443.356667]  ? find_held_lock+0x2b/0x80
[ 2443.356701]  ? __fget_files+0x203/0x3b0
[ 2443.356728]  ? lock_release+0xc8/0x290
[ 2443.356761]  ? __fget_files+0x20d/0x3b0
[ 2443.356804]  __sys_sendmsg+0x150/0x200
[ 2443.356830]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2443.356871]  ? __pfx_ksys_write+0x10/0x10
[ 2443.356917]  do_syscall_64+0xbf/0x390
[ 2443.356947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2443.356971] RIP: 0033:0x7f056dbbbb19
[ 2443.356989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2443.357023] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2443.357045] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2443.357061] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2443.357075] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2443.357088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2443.357102] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2443.357141]  </TASK>
[ 2443.418106] hpet: Lost 3 RTC interrupts
22:50:24 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'})
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:50:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x2000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x3}}}}, 0xc0}}, 0x0)

22:50:24 executing program 6:
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={0x100008, 0x8, 0x20000}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002800000000000028000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f45", 0x5b, 0x8800}], 0x0, &(0x7f0000011e00))
creat(&(0x7f0000000180)='./file0\x00', 0x0)

[ 2443.579857] loop6: detected capacity change from 0 to 136
[ 2443.589119] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 2443.592318] isofs_fill_super: get root inode failed
[ 2443.605250] loop6: detected capacity change from 0 to 136
[ 2443.618406] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 2443.621075] isofs_fill_super: get root inode failed
22:50:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 91)

22:50:35 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xd803, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r4, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
pread64(r5, &(0x7f0000000140)=""/25, 0x19, 0x9e)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

22:50:35 executing program 1:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="7c59650175631e913e519dcfbc4bb7fcbbd95be1ead247f803dd212354f9bd2615c9685e03293d81954fdc898d52c52d8dba8ad866aa1d40c31842a9bcaad1936c1b15b67e396d09c64cad666de46b8b0c8855479108d921fd399a9cf343224abb79901246d7ac334cbb71da1096dad2d32911afdbfdaf326cf6fa37c524ab29fcd9334ef8a971b67f6273e3cf23625a7c7cf7726736650c1f4ef84c5af7b3f78b4d6604925c43ba3d418d875be405e32e73acbe8ea06fb7809ed1d89988348680aa902a7ca49b7f8c9966ecb616825817117e7a0e8050d174d0e61c0edb5b0b4700240c865d1037f1e86a", 0xeb}], 0x0, 0x0)

22:50:35 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6816, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:35 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x4}}}}, 0xc0}}, 0x0)

22:50:35 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040), 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
msgrcv(r0, &(0x7f0000000140)={0x0, ""/124}, 0x84, 0x2, 0x1800)

22:50:35 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="37ffe8ff82dc8ba38b857654cc7ac6bf947e469b79111c8c96fadd7ab893a81a65936fe69b80c314f9652d7d094b1faaddf7e56609a08e", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2454.299659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2454.305920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
22:50:35 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:50:35 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6916, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2454.385038] loop6: detected capacity change from 0 to 140
[ 2454.450860] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2454.471353] EXT4-fs (loop6): get root inode failed
[ 2454.472169] EXT4-fs (loop6): mount failed
22:50:35 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x8}}}}, 0xc0}}, 0x0)

22:50:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 92)

22:50:35 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:35 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xfeff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:35 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

[ 2454.573934] loop6: detected capacity change from 0 to 140
[ 2454.577578] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 2454.577642] EXT4-fs: failed to create workqueue
[ 2454.578851] EXT4-fs (loop6): mount failed
22:50:35 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r4=>0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x8b)
io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="d3", 0x1}])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r0, {0x3}}, './file0\x00'})
io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x20, r5, &(0x7f0000000000)="bedfe931112c6152ac8631b52355677e8e23b852b9bdc11262d56d0c2e9074595f2f33e58ea26eb35f3a902e2ec42f7ec96b0618ab075544297468b1d7b68aeeb4a3ca67a580b72014f21231e331ffac518d8c7dc6a50812b925c60476bb8234f312404a3aa8853fd7bb5d2672f4c73b8cb8c45021dec91ea5db9b", 0x7b, 0xcd45}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7ff, r1, &(0x7f00000000c0)="ff673368068192fd6850c842b86f1652233706cc82762209b6e362161fd460b0acd8138f4448f21efa07421d34d1b2cab083bdbabc4759e7423279559cd4a3f5b724aafcb316e1400420cd475336fc24fe2e4ffcd87534884d52be4399b1f0edfb0ffb08ae5403257b85199adf226c731878f3384ed417babe26c4e3a4cd4f1b00972cbf609a7f2c6976127012565e7a33c066ffd7339e497906d5f5562bd8ec5eab5330488327de0542d58d3ed7eb692a44cc7335db7410d32d9479a5b01de1b8c17efcc8b1dae9fbace32ecc2cbd4a", 0xd0, 0x200, 0x0, 0x1, r6}])
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300))

[ 2454.610655] FAULT_INJECTION: forcing a failure.
[ 2454.610655] name failslab, interval 1, probability 0, space 0, times 0
[ 2454.611730] CPU: 1 UID: 0 PID: 17888 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2454.611748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2454.611756] Call Trace:
[ 2454.611761]  <TASK>
[ 2454.611766]  dump_stack_lvl+0xfa/0x120
[ 2454.611789]  should_fail_ex+0x4d7/0x5e0
[ 2454.611809]  ? __kernfs_new_node+0xd3/0x870
[ 2454.611829]  should_failslab+0xc2/0x120
[ 2454.611849]  kmem_cache_alloc_noprof+0x72/0x680
[ 2454.611870]  ? __kernfs_new_node+0xd3/0x870
[ 2454.611887]  __kernfs_new_node+0xd3/0x870
[ 2454.611910]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2454.611933]  ? lock_acquire+0x15e/0x2f0
[ 2454.611949]  ? kernfs_root+0x23/0x2a0
[ 2454.611967]  ? find_held_lock+0x2b/0x80
[ 2454.611986]  ? kernfs_root+0xee/0x2a0
[ 2454.612004]  ? lock_release+0xc8/0x290
[ 2454.612018]  ? lock_is_held_type+0x9e/0x120
[ 2454.612038]  kernfs_new_node+0x13c/0x1e0
[ 2454.612055]  __kernfs_create_file+0x55/0x360
[ 2454.612075]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2454.612096]  ? __pfx_dev_attr_store+0x10/0x10
[ 2454.612120]  internal_create_group+0x571/0xeb0
[ 2454.612147]  ? __pfx_internal_create_group+0x10/0x10
[ 2454.612165]  ? kernfs_add_one+0x150/0x830
[ 2454.612183]  ? kernfs_create_link+0x1be/0x240
[ 2454.612202]  internal_create_groups.part.0+0x90/0x140
[ 2454.612218]  sysfs_create_groups+0x29/0x50
[ 2454.612230]  device_add+0x67e/0x1830
[ 2454.612251]  ? __pfx_device_add+0x10/0x10
[ 2454.612274]  ? lockdep_init_map_type+0x4b/0x240
[ 2454.612290]  ? __init_waitqueue_head+0xca/0x150
[ 2454.612310]  netdev_register_kobject+0x1a9/0x3e0
[ 2454.612330]  register_netdevice+0x1332/0x1d70
[ 2454.612351]  ? __pfx_register_netdevice+0x10/0x10
[ 2454.612364]  ? mac802154_llsec_set_params+0x490/0x570
[ 2454.612392]  ieee802154_if_add+0xc73/0x1140
[ 2454.612414]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2454.612433]  ? __pfx___mutex_lock+0x10/0x10
[ 2454.612446]  ? skb_put+0x138/0x1b0
[ 2454.612470]  ? genlmsg_put+0x265/0x2e0
[ 2454.612492]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2454.612508]  ieee802154_add_iface+0x472/0x970
[ 2454.612529]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2454.612547]  ? trace_kmalloc+0x1f/0xb0
[ 2454.612568]  ? __nla_parse+0x42/0x60
[ 2454.612588]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2454.612605]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2454.612628]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2454.612647]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2454.612673]  ? security_capable+0x2f/0x90
[ 2454.612694]  genl_rcv_msg+0x532/0x7e0
[ 2454.612714]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2454.612731]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2454.612758]  netlink_rcv_skb+0x147/0x430
[ 2454.612774]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2454.612792]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2454.612818]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2454.612836]  genl_rcv+0x28/0x40
[ 2454.612851]  netlink_unicast+0x5a7/0x870
[ 2454.612869]  ? __pfx_netlink_unicast+0x10/0x10
[ 2454.612894]  netlink_sendmsg+0x8a3/0xd80
[ 2454.612913]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2454.612938]  ____sys_sendmsg+0xa67/0xc20
[ 2454.612958]  ? copy_msghdr_from_user+0xfb/0x150
[ 2454.612974]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2454.612999]  ? lock_acquire+0x15e/0x2f0
[ 2454.613016]  ___sys_sendmsg+0x10f/0x1b0
[ 2454.613031]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2454.613045]  ? perf_trace_lock+0xb5/0x5d0
[ 2454.613063]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2454.613077]  ? proc_fail_nth_write+0x97/0x220
[ 2454.613098]  ? lock_acquire+0x15e/0x2f0
[ 2454.613113]  ? __fget_files+0x34/0x3b0
[ 2454.613128]  ? find_held_lock+0x2b/0x80
[ 2454.613159]  ? __fget_files+0x203/0x3b0
[ 2454.613173]  ? lock_release+0xc8/0x290
[ 2454.613191]  ? __fget_files+0x20d/0x3b0
[ 2454.613214]  __sys_sendmsg+0x150/0x200
[ 2454.613228]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2454.613250]  ? __pfx_ksys_write+0x10/0x10
[ 2454.613275]  do_syscall_64+0xbf/0x390
[ 2454.613292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2454.613305] RIP: 0033:0x7f056dbbbb19
[ 2454.613315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2454.613327] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2454.613340] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2454.613348] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2454.613356] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2454.613364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2454.613371] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2454.613393]  </TASK>
22:50:35 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040), 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
msgrcv(r0, &(0x7f0000000140)={0x0, ""/124}, 0x84, 0x2, 0x1800)

[ 2454.761442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2454.764992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2454.835426] loop6: detected capacity change from 0 to 140
[ 2454.841426] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2454.842561] EXT4-fs (loop6): get root inode failed
[ 2454.842964] EXT4-fs (loop6): mount failed
22:50:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 93)

22:50:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x80000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:46 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x9}}}}, 0xc0}}, 0x0)

22:50:46 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x40181, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
sendfile(r0, r0, &(0x7f0000000040)=0x400, 0x6a7df19f)

22:50:46 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:50:46 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xfffe, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:46 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040), 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
msgrcv(r0, &(0x7f0000000140)={0x0, ""/124}, 0x84, 0x2, 0x1800)

22:50:46 executing program 3:
r0 = epoll_create1(0x0)
r1 = getpid()
r2 = getpid()
r3 = pidfd_open(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000))
r4 = getpid()
r5 = pidfd_open(r4, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc19, 0x0, 0x3, 0x0, 0xfff}, r1, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r6, 0x407, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r10 = getpid()
pidfd_open(r10, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0xff, 0x1, 0x20, 0x0, 0xc337, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x14000, 0x0, 0x80000001, 0x4, 0x101, 0x1, 0x2, 0x0, 0x3}, r10, 0xd, r6, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r11, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2465.525623] loop6: detected capacity change from 0 to 140
[ 2465.560903] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2465.574554] EXT4-fs (loop6): get root inode failed
[ 2465.575395] EXT4-fs (loop6): mount failed
22:50:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="19", @ANYRES16=r3, @ANYBLOB="010000000000000000005500000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

22:50:46 executing program 1:
pipe(&(0x7f0000000880))
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8001, 0x8, &(0x7f0000000600)=[{&(0x7f00000000c0)="1c3f014505f3348c39ed8ad91041a00152cc23ce2aa770972d29f5d64e187e38a56eb2f8f4e2498873d028c940d98adceb0e87272b311b3190b0698d1593e10a56479a1e4ea8fec227de0e6071cdc47ac76551064802ecc5870447ecf02fd3130abf817461cac3e2e771857f0781fdd3251bd6ac6bd231cc5af38b32d82e971f6d3792b62fd3a453ef8ed77c9d37a2300a7d5127ea60c346e71766e6bd88189e0688f28904bb4ece6e569219bc9d85bebef0a67acc46784b9d80fdebd2e474da8b7529e39991604eb6cdc3c04968e5ce5649f8f7e1b7154c344aaafb480a08ee35cc915a73df371c67dbc23444e9b38551", 0xf1, 0x8}, {&(0x7f00000001c0)="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", 0xfe, 0x8}, {&(0x7f00000002c0)="2b05c260", 0x4, 0x34701249}, {&(0x7f0000000300)="35f2a95b428dd0bdd6ce", 0xa, 0x1}, {&(0x7f0000000340)="c7587fa1af3e3dd4b9e02d4b63410f", 0xf, 0x6bd5d962}, {&(0x7f0000000380)="7c25624735a008a9f43542b528c457e038cc91879d74775d6503caacf000906b7e81ab8c238a65e238ae5f617a1b0e65ba52f61e2f1219b5c94c4867236592f5e794f4cb5c26b7d53aafaa6f3f7047408525128ad35d437e09ff9e6f91c3412e75280c933b6bce545fee5166580ede02aa5e5efe3110361135cda6bcef50eee336c03745bd151d4476a743dd4438c9de15", 0x91, 0x7}, {&(0x7f0000000440)="10fb8c1e5204f9ffa5fe33131369c47fd9075147882afb983f7cc5a2227c024a4bfca9b2bada65b8c9a957b688c0ad4dfc47f7412963bbc1c89d2fd169d48ae9c4b20727e5dff208883058de19efaacd35d16b706a4f371c4cdd1fe24eb5f596aec99aa71ff4e9061578f65e8a1990c2c7c8a7bb92a06a95f958e8968b1e548efa0186bc4c07ed55", 0x88, 0x1}, {&(0x7f0000000500)="7dd452064761d460b92c4670d2d11d4bea863a079044a35a16a5554a22e3bf777ddc2804e88fb30e78f1334f28f3480df158971a19418f347b9b40ee3f3036592354b2343b5f2553608942590a712d873db17b637940318f436fee7d3077e587b737cec665df4d0a58e22bcd447e5baa5e3cedf1d2dbfc4a1ec8d6ba0e0b0c52569f58611e444ee971a2ac250b005d716b352111b827c9ad7ce9de3c0915b9ea6a9f00a3f7b4d88921a821773dffb92c950e652a6546259171c59c00e13a1dbe6a9f369a39ef182afeb0696b", 0xcc, 0x2}], 0x200880, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x6d, 0x1, 0x30, 0x31]}}, {@huge_advise}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_role}, {@hash}, {@obj_user={'obj_user', 0x3d, ']-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x62, 0x0, 0x63, 0x34, 0x32, 0x61], 0x2d, [0x63, 0x38, 0x33, 0x63], 0x2d, [0x63, 0x66, 0x37, 0x34], 0x2d, [0x35, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x35, 0x33, 0x33, 0x61, 0x36, 0x35, 0x31]}}}, {@obj_user={'obj_user', 0x3d, '-:'}}, {@subj_role={'subj_role', 0x3d, 'fsuuid'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]})
vmsplice(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000780)="ae", 0x1}], 0x2, 0x0)

22:50:46 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xa}}}}, 0xc0}}, 0x0)

22:50:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 94)

22:50:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf0ffff, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:47 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000000000001000000080003000000000000", @ANYRES32=0x0, @ANYBLOB], 0x53}}, 0x0)

[ 2465.820989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2465.840837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
22:50:56 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf}}}}, 0xc0}}, 0x0)

22:50:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 95)

22:50:56 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x8)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000900)={{r2}, 0x0, 0x4, @unused=[0x1, 0x5, 0x9, 0x4], @subvolid=0x20})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)

22:50:56 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040), 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
msgrcv(r0, &(0x7f0000000140)={0x0, ""/124}, 0x84, 0x2, 0x1800)

22:50:56 executing program 2:
syz_emit_ethernet(0x118, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0)

22:50:56 executing program 3:
prctl$PR_SET_TIMERSLACK(0x1d, 0x7)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet6(0xa, 0x80000, 0x9)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x1011c0, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x8028}, {r1, 0xa000}, {r2, 0x103}, {r3, 0x20}, {0xffffffffffffffff, 0x8000}, {r4, 0x5420}, {0xffffffffffffffff, 0x8230}, {r5, 0x220}], 0x8, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={[0x7]}, 0x8)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc)
fcntl$setstatus(r6, 0x407, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r10, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:50:56 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x1000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:50:56 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x10040, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:56 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2475.147984] loop6: detected capacity change from 0 to 140
22:50:56 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2475.195350] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2475.221736] EXT4-fs (loop6): get root inode failed
[ 2475.222546] EXT4-fs (loop6): mount failed
22:50:56 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf0}}}}, 0xc0}}, 0x0)

[ 2475.249145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2475.249972] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2475.254714] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2475.256902] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:50:56 executing program 2:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1001c38, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0xec, 0x4, 0xf8, "32f35247263785e9338de5bfdbbd96f9", "73eed32d8f29f869dba40f155ad1767755719261b914e465270717ea2ebfab77dad6c56e38bcc467bc21a92458020aa793f95656437b2eadb7c5c27b7ffab4183417beb88bc50c2fefe12ffee07f88df87063c329202f5ccb4100129dd20dda720c36f1cdb28b2343fdedc01ec48178a6d7a57fe4fdf61f95173b1a77548dd69aa009d26245fcbed72641ccf8dbe01eaf5300413b9b0383931c245cda39c258080aa41696efba6ab6a8a3e33888f313107e0c9ad0b3fc5614185d70614da8e54bc650765318007e88fb87387482a83d5ecad411a45f07a"}, 0xec, 0x3)

22:50:56 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c922abd3bf9ba334a93198fecee6032025dc0ce53b87ef3b904d76b267dce898111b0458dd926f47c289ce12e40e13d4729ab00589a0aaa242a6d69dfb2d29f6da6c50803a360944beb971e617d08016cfebd610101c563caa2bfdab1e9503a5cdf", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="2c0aa0a14dd9245eb1d874c7cb9ca676bbe99de6e070a8adc7aedb0273fe09f22e600500000000000000905c86163d6e59ad51376f1f32dc38fc6fd3e941f2821a7e016b2046712c52da01c018bb95606b19ce6a6a55327b20cbc4e6f7c40a5d2ffffdc95118c2dbfcfa58621d15213e7be6e8c197b9d749832346801022612a4eecd60a01acc768e416c2275f81175210b9d96d4efc96aed411fe0fb8d6da4c7b0654cc22d22afa89093fd8f72670f6dcb54137e94a1574ed74a94e7e946b7bc044f9b4d2d48faf29972db1d93ac0baa2f9974699015860fbd93c95d0af9eed54a65cb214973859f1a87ad839c152d1344fd91ef8"], 0x1c}}, 0x0)

[ 2475.335560] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2475.337451] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2475.338102] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2475.338979] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:50:56 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xe0ffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:50:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 96)

[ 2475.471484] FAULT_INJECTION: forcing a failure.
[ 2475.471484] name failslab, interval 1, probability 0, space 0, times 0
[ 2475.472491] CPU: 1 UID: 0 PID: 18021 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2475.472509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2475.472520] Call Trace:
[ 2475.472526]  <TASK>
[ 2475.472531]  dump_stack_lvl+0xfa/0x120
[ 2475.472554]  should_fail_ex+0x4d7/0x5e0
[ 2475.472574]  ? __kernfs_new_node+0xd3/0x870
[ 2475.472594]  should_failslab+0xc2/0x120
[ 2475.472613]  kmem_cache_alloc_noprof+0x72/0x680
[ 2475.472635]  ? __kernfs_new_node+0xd3/0x870
[ 2475.472652]  __kernfs_new_node+0xd3/0x870
[ 2475.472675]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2475.472697]  ? lock_acquire+0x15e/0x2f0
[ 2475.472713]  ? kernfs_root+0x23/0x2a0
[ 2475.472731]  ? find_held_lock+0x2b/0x80
[ 2475.472751]  ? kernfs_root+0xee/0x2a0
[ 2475.472769]  ? lock_release+0xc8/0x290
[ 2475.472782]  ? lock_is_held_type+0x9e/0x120
[ 2475.472803]  kernfs_new_node+0x13c/0x1e0
[ 2475.472821]  __kernfs_create_file+0x55/0x360
[ 2475.472841]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2475.472861]  ? __pfx_dev_attr_store+0x10/0x10
[ 2475.472885]  internal_create_group+0x571/0xeb0
[ 2475.472912]  ? __pfx_internal_create_group+0x10/0x10
[ 2475.472931]  ? kernfs_add_one+0x150/0x830
[ 2475.472952]  ? kernfs_create_link+0x1be/0x240
[ 2475.472971]  internal_create_groups.part.0+0x90/0x140
[ 2475.472987]  sysfs_create_groups+0x29/0x50
[ 2475.472999]  device_add+0x67e/0x1830
[ 2475.473020]  ? __pfx_device_add+0x10/0x10
[ 2475.473039]  ? lockdep_init_map_type+0x4b/0x240
[ 2475.473055]  ? __init_waitqueue_head+0xca/0x150
[ 2475.473074]  netdev_register_kobject+0x1a9/0x3e0
[ 2475.473095]  register_netdevice+0x1332/0x1d70
[ 2475.473115]  ? __pfx_register_netdevice+0x10/0x10
[ 2475.473129]  ? mac802154_llsec_set_params+0x490/0x570
[ 2475.473157]  ieee802154_if_add+0xc73/0x1140
[ 2475.473179]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2475.473198]  ? __pfx___mutex_lock+0x10/0x10
[ 2475.473212]  ? skb_put+0x138/0x1b0
[ 2475.473231]  ? __nlmsg_put+0x159/0x1d0
[ 2475.473254]  ? genlmsg_put+0x265/0x2e0
[ 2475.473275]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2475.473291]  ieee802154_add_iface+0x472/0x970
[ 2475.473312]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2475.473331]  ? trace_kmalloc+0x1f/0xb0
[ 2475.473352]  ? __nla_parse+0x42/0x60
[ 2475.473371]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2475.473388]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2475.473424]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2475.473442]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2475.473469]  ? security_capable+0x2f/0x90
[ 2475.473489]  genl_rcv_msg+0x532/0x7e0
[ 2475.473509]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2475.473526]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2475.473553]  netlink_rcv_skb+0x147/0x430
[ 2475.473569]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2475.473587]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2475.473612]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2475.473631]  genl_rcv+0x28/0x40
[ 2475.473645]  netlink_unicast+0x5a7/0x870
[ 2475.473664]  ? __pfx_netlink_unicast+0x10/0x10
[ 2475.473689]  netlink_sendmsg+0x8a3/0xd80
[ 2475.473708]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2475.473733]  ____sys_sendmsg+0xa67/0xc20
[ 2475.473753]  ? copy_msghdr_from_user+0xfb/0x150
[ 2475.473769]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2475.473794]  ? lock_acquire+0x15e/0x2f0
[ 2475.473811]  ___sys_sendmsg+0x10f/0x1b0
[ 2475.473826]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2475.473839]  ? perf_trace_lock+0xb5/0x5d0
[ 2475.473858]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2475.473872]  ? proc_fail_nth_write+0x97/0x220
[ 2475.473893]  ? lock_acquire+0x15e/0x2f0
[ 2475.473907]  ? __fget_files+0x34/0x3b0
[ 2475.473923]  ? find_held_lock+0x2b/0x80
[ 2475.473941]  ? __fget_files+0x203/0x3b0
[ 2475.473956]  ? lock_release+0xc8/0x290
[ 2475.473974]  ? __fget_files+0x20d/0x3b0
[ 2475.473997]  __sys_sendmsg+0x150/0x200
[ 2475.474012]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2475.474034]  ? __pfx_ksys_write+0x10/0x10
[ 2475.474059]  do_syscall_64+0xbf/0x390
[ 2475.474076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2475.474090] RIP: 0033:0x7f056dbbbb19
[ 2475.474100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2475.474112] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2475.474124] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2475.474132] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2475.474140] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2475.474148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2475.474155] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2475.474178]  </TASK>
[ 2477.334346] Bluetooth: hci1: command 0x0406 tx timeout
[ 2477.398670] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2477.399174] Bluetooth: hci4: command 0x0406 tx timeout
[ 2477.399656] Bluetooth: hci7: command 0x0c1a tx timeout
22:51:05 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:05 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 97)

22:51:05 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="587353ea", @ANYRES16=r0, @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x44)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4c045)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x3ec, 0x0, 0x109, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdbc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7274}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c760b18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55b}]}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x33, 0x3, "ac981b841a58f15c915d50acd96a398d299fe896ca0969ff7ab02ae1a760164f547a9f333fa66ac213e8d9a9d376a6"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x91, 0x3, "5204ecfa4d94979e8e2553691385219a5d8fd7d7d7379db6e784d88858f03b0383e3d1a2611d8279c03aeb726b537cc3c9fff6a2571bd8d3c509e519374fe3ec52a537a1b738e3a242db4d8dfb0e6705a6f054cb840451f4eda60057ab94a105a3a40ff90fac87a921528004b1cba55b3cc362231fc04ad3b6f077c70df4614d9a482463c12539adc9732d55bf"}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "9ed685358aa5237b8d6c3aeef60975151f849ac52750260c58e07ec17b4b7da17512e322c10a22ab3b1a2b692f937ba2cc2bb9ca6d2eed3dcf40afd8eae50bc9400a8e930cd05ee5f39857db47a04cfbfb7b4ce562513f56cfa41baf06d2fbc0d94665be0e61bfaf902a9ac22f3957184e033675027e03ac68b0137be83c73178297eaa1d49e216854be305cfa05048dc1321125f3fa95bdee368d5004f2b1b0563ab1b16f6722006a91d47ec925a8a53a897f70cd4f3f0539bd776c9b6faf5a"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "83205751b82e59cda7914c6bae4463ac9ec3cc9a45eb"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5f16d32c3a20b0fba268b702fa39418010dae777cf24e82f70d98df0af6b80984ee1c277"}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0e05}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff84}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2d3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x65}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x196c}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4}, 0x4044800)
pipe(&(0x7f0000000880)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, 0x0, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa3, 0x7a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4850}, 0x8004)

22:51:05 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:51:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x2000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:05 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040), 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:05 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)

22:51:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x107}}}}, 0xc0}}, 0x0)

22:51:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x300}}}}, 0xc0}}, 0x0)

22:51:05 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x4}, {0x5a}, {0x54, 0x5}, {0xb6, 0x3}], "3906bcc8d05b6ff4"}}]}, 0x30}}, 0x0)

[ 2483.880834] loop6: detected capacity change from 0 to 140
[ 2483.883375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2483.884055] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2483.884694] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2483.885705] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:05 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x81, 0xe0, 0x9, 0x3f, 0x0, 0x6, 0x22000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0xd10, 0x4, 0x223, 0x3, 0x2, 0x1f3, 0x0, 0x0, 0xe04, 0x0, 0x7f}, r0, 0x2, 0xffffffffffffffff, 0x5)

[ 2483.938453] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2483.952133] EXT4-fs (loop6): get root inode failed
[ 2483.953138] EXT4-fs (loop6): mount failed
[ 2483.959519] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2483.960646] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2483.964650] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:51:05 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x80, 0x2, 0x6d, 0x1, 0x0, 0x7fff, 0x16800, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, @perf_config_ext={0x100, 0x5cff}, 0x1082c, 0xffffffff, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x0, 0x3, 0x0, 0x3ff}, 0x0, 0x1, r2, 0x4)
fcntl$setstatus(r0, 0x407, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000480)={0x3, 0xe7, "f6d88d58dde8f7855aff0bbd7a001dac7424581fe2ecbdf7af621d39f0683f15074154343ac414d940e1cfd8f1aeff1f943f156cdf070438379a4194fdef1eb91b2eb717079d3245b1d913e02009884c423cd934fcc89ab2425de3989dc7dc582b939aefc19c551cb80b782f45c54cfe8ff64cb5fdc887325beb43801268824dbd33c78004466f8970d2be2809a47654b67f376a16143580971f1628a9b8aeea75d3fd7b6a5f28cbdaf1b72a6f4ce1fe431bfeabb46f10ed411a27413b8b90c96fcc9c921c6ec6c9a1a51ca451a7aa9f44884eb016319a36c4656ed2fc38a45b6988dc9a95e923"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000300b9a82b8df2b9b8ac290faece7e6ed35d28259ea84951517c8658d678d9e61e343d3b7059643167a6c95578d6e0a45703e1170ac4496a929416449c1dd5268ffe87e40c2e54a9d419b6d144adbd03153f7da9a7dc627e8e5b7e56872f8179ffdba456537b0378174372b91a6dd845eea2650c834be61be61e616260a0a57e671612e257a269f144cb2720dc35e4e88a22a205d9ab7ab66caf3eb9b7050a945cba7e81e76296cd27d37df9684eb05a63cfe70c00", @ANYRES16=r6, @ANYBLOB="020027bd700000040000080000000c009900f03000007b000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004014}, 0xc000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x1c}}, 0x0)

[ 2483.972157] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2483.988369] FAULT_INJECTION: forcing a failure.
[ 2483.988369] name failslab, interval 1, probability 0, space 0, times 0
[ 2483.990165] CPU: 0 UID: 0 PID: 18051 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2483.990197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2483.990211] Call Trace:
[ 2483.990221]  <TASK>
[ 2483.990231]  dump_stack_lvl+0xfa/0x120
[ 2483.990274]  should_fail_ex+0x4d7/0x5e0
[ 2483.990309]  ? __kernfs_new_node+0xd3/0x870
[ 2483.990345]  should_failslab+0xc2/0x120
[ 2483.990381]  kmem_cache_alloc_noprof+0x72/0x680
[ 2483.990421]  ? __kernfs_new_node+0xd3/0x870
[ 2483.990455]  __kernfs_new_node+0xd3/0x870
[ 2483.990497]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2483.990541]  ? lock_acquire+0x15e/0x2f0
[ 2483.990570]  ? kernfs_root+0x23/0x2a0
[ 2483.990605]  ? find_held_lock+0x2b/0x80
[ 2483.990642]  ? kernfs_root+0xee/0x2a0
[ 2483.990677]  ? lock_release+0xc8/0x290
[ 2483.990702]  ? lock_is_held_type+0x9e/0x120
[ 2483.990737]  kernfs_new_node+0x13c/0x1e0
[ 2483.990769]  __kernfs_create_file+0x55/0x360
[ 2483.990806]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2483.990846]  ? __pfx_dev_attr_store+0x10/0x10
[ 2483.990889]  internal_create_group+0x571/0xeb0
[ 2483.990941]  ? __pfx_internal_create_group+0x10/0x10
[ 2483.990977]  ? kernfs_add_one+0x150/0x830
[ 2483.991010]  ? kernfs_create_link+0x1be/0x240
[ 2483.991046]  internal_create_groups.part.0+0x90/0x140
[ 2483.991075]  sysfs_create_groups+0x29/0x50
[ 2483.991098]  device_add+0x67e/0x1830
[ 2483.991138]  ? __pfx_device_add+0x10/0x10
[ 2483.991174]  ? lockdep_init_map_type+0x4b/0x240
[ 2483.991205]  ? __init_waitqueue_head+0xca/0x150
[ 2483.991241]  netdev_register_kobject+0x1a9/0x3e0
[ 2483.991278]  register_netdevice+0x1332/0x1d70
[ 2483.991316]  ? __pfx_register_netdevice+0x10/0x10
[ 2483.991343]  ? mac802154_llsec_set_params+0x490/0x570
[ 2483.991396]  ieee802154_if_add+0xc73/0x1140
[ 2483.991437]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2483.991474]  ? __pfx___mutex_lock+0x10/0x10
[ 2483.991499]  ? skb_put+0x138/0x1b0
[ 2483.991535]  ? __nlmsg_put+0x159/0x1d0
[ 2483.991578]  ? genlmsg_put+0x265/0x2e0
[ 2483.991617]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2483.991647]  ieee802154_add_iface+0x472/0x970
[ 2483.991686]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2483.991721]  ? trace_kmalloc+0x1f/0xb0
[ 2483.991761]  ? __nla_parse+0x42/0x60
[ 2483.991797]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2483.991831]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2483.991874]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2483.991908]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2483.991959]  ? security_capable+0x2f/0x90
[ 2483.991996]  genl_rcv_msg+0x532/0x7e0
[ 2483.992034]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2483.992067]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2483.992119]  netlink_rcv_skb+0x147/0x430
[ 2483.992149]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2483.992189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2483.992238]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2483.992273]  genl_rcv+0x28/0x40
[ 2483.992300]  netlink_unicast+0x5a7/0x870
[ 2483.992336]  ? __pfx_netlink_unicast+0x10/0x10
[ 2483.992383]  netlink_sendmsg+0x8a3/0xd80
[ 2483.992419]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2483.992466]  ____sys_sendmsg+0xa67/0xc20
[ 2483.992503]  ? copy_msghdr_from_user+0xfb/0x150
[ 2483.992530]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2483.992579]  ? lock_acquire+0x15e/0x2f0
[ 2483.992613]  ___sys_sendmsg+0x10f/0x1b0
[ 2483.992642]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2483.992667]  ? perf_trace_lock+0xb5/0x5d0
[ 2483.992702]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2483.992729]  ? proc_fail_nth_write+0x97/0x220
[ 2483.992769]  ? lock_acquire+0x15e/0x2f0
[ 2483.992796]  ? __fget_files+0x34/0x3b0
[ 2483.992825]  ? find_held_lock+0x2b/0x80
[ 2483.992860]  ? __fget_files+0x203/0x3b0
[ 2483.992889]  ? lock_release+0xc8/0x290
[ 2483.992923]  ? __fget_files+0x20d/0x3b0
[ 2483.992966]  __sys_sendmsg+0x150/0x200
[ 2483.992994]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2483.993036]  ? __pfx_ksys_write+0x10/0x10
[ 2483.993082]  do_syscall_64+0xbf/0x390
[ 2483.993114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2483.993138] RIP: 0033:0x7f056dbbbb19
[ 2483.993156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2483.993177] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2483.993199] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2483.993215] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2483.993229] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2483.993242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2483.993256] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2483.993294]  </TASK>
[ 2484.057818] hpet: Lost 3 RTC interrupts
22:51:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x701}}}}, 0xc0}}, 0x0)

22:51:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x3000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:05 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:05 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 98)

22:51:05 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000100)={0x8, "e1c5cbc1589cdb0225cfb81d46e42f139eff2753e1e823ef69f3faa7f0392dc32144786396dfa81818ff68b293dc84b993fcaa6b149d0c5c4ffaac2c78d934b3"})
r3 = getpid()
pidfd_open(r3, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x5, 0x7, 0xff, 0x0, 0x7f, 0x20131, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x4, 0x5, 0x1d0, 0x2, 0x8, 0x0, 0x4, 0x0, 0x4}, r3, 0xa, r0, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r8, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x20004810)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x87, @multicast2, 0x4e24, 0x2, 'rr\x00', 0x10, 0x6000000, 0x2}, 0x2c)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2484.231429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2484.246429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
22:51:05 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x480000)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/22, &(0x7f00000001c0)=0x16)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000))
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff00}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x80]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

[ 2484.315339] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2484.316002] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:51:05 executing program 6:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2484.342007] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2484.364662] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2484.397313] loop6: detected capacity change from 0 to 140
[ 2484.431373] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2484.434313] EXT4-fs (loop6): get root inode failed
[ 2484.434736] EXT4-fs (loop6): mount failed
[ 2484.468445] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2484.476239] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2484.481000] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2484.488050] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2486.422376] Bluetooth: hci1: command 0x0406 tx timeout
[ 2486.486381] Bluetooth: hci4: command 0x0406 tx timeout
[ 2486.487228] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2486.550338] Bluetooth: hci6: command 0x0c1a tx timeout
22:51:18 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 99)

22:51:18 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:18 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x4000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:18 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x900}}}}, 0xc0}}, 0x0)

22:51:18 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r6)
keyctl$read(0xb, r7, &(0x7f0000000400)=""/40, 0x28)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRESDEC=r7, @ANYRES16, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x24044840}, 0x0)

22:51:18 executing program 2:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0)

22:51:18 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0)
vmsplice(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x6)

22:51:18 executing program 6:
msgget$private(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2496.807190] loop6: detected capacity change from 0 to 140
[ 2496.848922] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
[ 2496.858048] FAULT_INJECTION: forcing a failure.
[ 2496.858048] name failslab, interval 1, probability 0, space 0, times 0
[ 2496.859877] CPU: 0 UID: 0 PID: 18123 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2496.859908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2496.859922] Call Trace:
[ 2496.859930]  <TASK>
[ 2496.859939]  dump_stack_lvl+0xfa/0x120
[ 2496.859975]  should_fail_ex+0x4d7/0x5e0
[ 2496.860009]  ? __kernfs_new_node+0xd3/0x870
[ 2496.860044]  should_failslab+0xc2/0x120
[ 2496.860078]  kmem_cache_alloc_noprof+0x72/0x680
[ 2496.860116]  ? __kernfs_new_node+0xd3/0x870
[ 2496.860149]  __kernfs_new_node+0xd3/0x870
[ 2496.860190]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2496.860232]  ? lock_acquire+0x15e/0x2f0
[ 2496.860267]  ? kernfs_root+0x23/0x2a0
[ 2496.860303]  ? find_held_lock+0x2b/0x80
[ 2496.860340]  ? kernfs_root+0xee/0x2a0
[ 2496.860376]  ? lock_release+0xc8/0x290
[ 2496.860400]  ? lock_is_held_type+0x9e/0x120
[ 2496.860434]  kernfs_new_node+0x13c/0x1e0
[ 2496.860467]  __kernfs_create_file+0x55/0x360
[ 2496.860504]  sysfs_add_file_mode_ns+0x21c/0x440
[ 2496.860544]  ? __pfx_dev_attr_store+0x10/0x10
[ 2496.860587]  internal_create_group+0x571/0xeb0
[ 2496.860638]  ? __pfx_internal_create_group+0x10/0x10
[ 2496.860674]  ? kernfs_add_one+0x150/0x830
[ 2496.860707]  ? kernfs_create_link+0x1be/0x240
[ 2496.860743]  internal_create_groups.part.0+0x90/0x140
[ 2496.860773]  sysfs_create_groups+0x29/0x50
[ 2496.860796]  device_add+0x67e/0x1830
[ 2496.860836]  ? __pfx_device_add+0x10/0x10
[ 2496.860872]  ? lockdep_init_map_type+0x4b/0x240
[ 2496.860902]  ? __init_waitqueue_head+0xca/0x150
[ 2496.860938]  netdev_register_kobject+0x1a9/0x3e0
[ 2496.860975]  register_netdevice+0x1332/0x1d70
[ 2496.861012]  ? __pfx_register_netdevice+0x10/0x10
[ 2496.861038]  ? mac802154_llsec_set_params+0x490/0x570
[ 2496.861090]  ieee802154_if_add+0xc73/0x1140
[ 2496.861137]  ? __pfx_ieee802154_if_add+0x10/0x10
[ 2496.861174]  ? __pfx___mutex_lock+0x10/0x10
[ 2496.861199]  ? skb_put+0x138/0x1b0
[ 2496.861235]  ? __nlmsg_put+0x159/0x1d0
[ 2496.861277]  ? genlmsg_put+0x265/0x2e0
[ 2496.861316]  ieee802154_add_iface_deprecated+0x42/0x60
[ 2496.861346]  ieee802154_add_iface+0x472/0x970
[ 2496.861384]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2496.861419]  ? trace_kmalloc+0x1f/0xb0
[ 2496.861458]  ? __nla_parse+0x42/0x60
[ 2496.861495]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2496.861528]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2496.861570]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2496.861605]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2496.861656]  ? security_capable+0x2f/0x90
[ 2496.861706]  genl_rcv_msg+0x532/0x7e0
[ 2496.861778]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2496.861812]  ? __pfx_ieee802154_add_iface+0x10/0x10
[ 2496.861864]  netlink_rcv_skb+0x147/0x430
[ 2496.861894]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2496.861929]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2496.861977]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2496.862011]  genl_rcv+0x28/0x40
[ 2496.862038]  netlink_unicast+0x5a7/0x870
[ 2496.862074]  ? __pfx_netlink_unicast+0x10/0x10
[ 2496.862120]  netlink_sendmsg+0x8a3/0xd80
[ 2496.862157]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2496.862204]  ____sys_sendmsg+0xa67/0xc20
[ 2496.862241]  ? copy_msghdr_from_user+0xfb/0x150
[ 2496.862269]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2496.862318]  ? lock_acquire+0x15e/0x2f0
[ 2496.862351]  ___sys_sendmsg+0x10f/0x1b0
[ 2496.862380]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2496.862405]  ? perf_trace_lock+0xb5/0x5d0
[ 2496.862440]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2496.862467]  ? proc_fail_nth_write+0x97/0x220
[ 2496.862506]  ? lock_acquire+0x15e/0x2f0
[ 2496.862533]  ? __fget_files+0x34/0x3b0
[ 2496.862562]  ? find_held_lock+0x2b/0x80
[ 2496.862598]  ? __fget_files+0x203/0x3b0
[ 2496.862626]  ? lock_release+0xc8/0x290
[ 2496.862660]  ? __fget_files+0x20d/0x3b0
[ 2496.862703]  __sys_sendmsg+0x150/0x200
[ 2496.862731]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2496.862773]  ? __pfx_ksys_write+0x10/0x10
[ 2496.862819]  do_syscall_64+0xbf/0x390
[ 2496.862851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2496.862874] RIP: 0033:0x7f056dbbbb19
[ 2496.862893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2496.862915] RSP: 002b:00007f056b131188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2496.862937] RAX: ffffffffffffffda RBX: 00007f056dccef60 RCX: 00007f056dbbbb19
[ 2496.862953] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000007
[ 2496.862967] RBP: 00007f056b1311d0 R08: 0000000000000000 R09: 0000000000000000
[ 2496.862980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2496.862993] R13: 00007ffced733a6f R14: 00007f056b131300 R15: 0000000000022000
[ 2496.863032]  </TASK>
[ 2496.928156] hpet: Lost 3 RTC interrupts
[ 2496.950038] EXT4-fs (loop6): get root inode failed
[ 2496.951395] EXT4-fs (loop6): mount failed
[ 2496.954120] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2496.955666] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2496.957137] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2496.959139] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:18 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x9000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:18 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:18 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xa00}}}}, 0xc0}}, 0x0)

22:51:18 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xa)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ip6tnl0\x00'}, 0x18)

22:51:18 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:18 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (fail_nth: 100)

22:51:18 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x3, 0x8, 0x6, 0xa0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000400", @ANYRES16=r3, @ANYBLOB="b3530000000000000000190000000300018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r7=>0x0, 0x29, 0xef, 0x4, 0x6, 0x24, @remote, @local, 0x20, 0x7, 0xfffffff9, 0x2}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x24, 0x64, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="abdf951b9e8bd02259"}]}]}, 0x24}], 0x1}, 0x0)

[ 2497.187538] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:51:18 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
close_range(r3, r0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="a8187f07"], 0x1c}}, 0x0)

[ 2497.199970] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2497.208970] loop6: detected capacity change from 0 to 140
[ 2497.214588] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2497.231759] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:18 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2497.283013] EXT4-fs error (device loop6): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.6: invalid block
22:51:18 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2497.303846] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2497.305601] EXT4-fs (loop6): get root inode failed
[ 2497.306470] EXT4-fs (loop6): mount failed
[ 2497.312437] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2497.313748] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2497.316354] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2499.286378] Bluetooth: hci1: command 0x0406 tx timeout
[ 2499.350449] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2499.351254] Bluetooth: hci4: command 0x0406 tx timeout
[ 2499.351344] Bluetooth: hci7: command 0x0c1a tx timeout
22:51:30 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf00}}}}, 0xc0}}, 0x0)

22:51:30 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)
r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r1)
unshare(0x6020400)
unshare(0x4a000080)
pread64(0xffffffffffffffff, &(0x7f0000000000)=""/91, 0x5b, 0xfffffffffffffffb)

22:51:30 executing program 1:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0)
sendfile(r0, r1, &(0x7f0000000100)=0x20, 0x101)
pipe(&(0x7f0000000880))

[ 2508.881897] loop6: detected capacity change from 0 to 140
22:51:30 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000000)="e8184d75bea98e3d9a1c8d37cd9a94db787a3556c0667e17a00bf8b966dc1feead5aec77a828b0d0ced8f20f94b07d46b46b7e133178ca037ec3973d78495e45", 0x40}, {&(0x7f0000000040)="41b474e14570fc658b5cc19bf0f8da724591c06ff496c7c190247cf749b46cc853ab87966db7cfc17b351747337ec684ff07a5b527d37468b6c9cb0d57dc786181", 0x41}, {&(0x7f00000000c0)="a5caa49acccb46bd9be6cac3aadbe7efeae4b329fa0ef6f1d25854f39792cd2751cb57e1e4f2b59255c091f1bdafaa7c86997ee3591386c5ed211005d0b88b74e866311d06b93ad917f31451a23b819d5c09c4f8da76cd436f92791c1589226635ad5eb26c71b639cb233b4281118244ac020036efd25ccab34fb620671805431036faa9432ba49f5d680cfffcd362ea0eb68c8587c91ef17f0cf52ddce41ab2973c76a0bbd13fcdaacc1a53c010d8bbe5", 0xb1}], 0x4, 0x0)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="30ec3bf56c9ea8cc743a22d277f5481e78e8afb1d13f9be5e1a989c6ad3855734620907db175c318eb67ae902d53e58a8d8941e69334d79a74fb370ebdd5aa28dd41961edd4a3b453e78c52dbf94d4ec59d33ec47f"], 0x1c}}, 0x0)

22:51:30 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x20000000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:51:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:30 executing program 1:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000000)="e43ff44c7cf104ba6270f76026b117b10a5b8e46fff0adcf587ce6e663b0697ecdf62c9ca00e53955e84fc1e0c02d66a56cfedab8b4959ffb66eade51bc9a71ea9198e1cca70f23d83abac9dc801710338a486862e8c64a609a4c5c6625b49dbac01151a20dd5f635fe796040663fbe5b738ee7169c388bbded2e823a2c6fa04fb78ec30406603b0dae8d326a4a41dcc369c7074e628cdfe97d865ad2d60126567906ddfcb693d6d572306be0e10107b6a7c65338ed2218a35e601b07bdef3fceda92e257dda807d5e30429a3330fd4d43d2da52031328df8ed2fd89f61c", 0xde}, {&(0x7f0000000100)="24367f961990", 0x6}, {&(0x7f0000000140)="d6099eac857b94e60b78772c784a47004e3ed51421b37a943d3ccef4beeda1426debc0b1a198fb254da826e15092a054fdb4774e548847895353a0b69035b76d9c41ccf41669478446392b1efaf3bd00a14f21c5562ba87c0c11e13303e87c880c940cb19f4fc1c86173df5e8a438073b4dcad606d545e94a580a4f975d046d9fb21e4d3aeb55c14f8cfbc49e84df54ae232d9ca1318c2950cf3e5576b1601c1779318875c07", 0xa6}], 0x6, 0x0)

[ 2508.987002] loop6: detected capacity change from 0 to 140
[ 2509.018947] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:51:30 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x9effffff, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2509.031401] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2509.055385] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2509.058729] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:30 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4e)

[ 2509.144366] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2509.153676] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2509.156460] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2509.157060] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2511.126451] Bluetooth: hci1: command 0x0406 tx timeout
[ 2511.190463] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2511.190893] Bluetooth: hci4: command 0x0406 tx timeout
[ 2511.191580] Bluetooth: hci7: command 0x0c1a tx timeout
22:51:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf000}}}}, 0xc0}}, 0x0)

22:51:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x79520, 0x0, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="0168ab98b17faf6f357fc800", @ANYRES32=<r2=>r0, @ANYBLOB='u\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x7ff, @mcast1, 0x6}}, 0x0, 0x0, 0x42, 0x0, "fc67d77bcacf9d335dd55a44faf284bce58876d669bf5b9bbe3a9d9f508589a559097bd5b4168d32755c0be3d3b85df2cd458e8a2d10e2b4c5c78d2baa31ac1e767dfec0b018c9304d8040f1c2315022"}, 0xd8)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x42, 0x80, 0x60, 0x7, 0x0, 0x9, 0x311, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2810, 0x2, 0x81, 0x1, 0x3, 0x0, 0x5, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x7, r2, 0x7)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}}, 0x0, 0x0, 0xd, 0x0, "dfb370b7b51370bb4d167d6a04105346e7723a98f6e2ec02049ae0d16075dfbd4a1ad5be24b7b97f008f7d5912eb0f1be75d075660ab91c2c3e9790d5a59c24ab6063d7565663f5cb0e60ef7a6b78271"}, 0xd8)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), 0x4)

22:51:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:42 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:51:42 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0, 0x4}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xc)

22:51:42 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xd8030000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:42 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000002c0)="ebe47c8fc890fd1cd1bd02b4188cd73b3e44fe1c0e90e0c1cc4588cac5bd27e702e9725e7c3f808c61becfa5631f9189894fcafc648f9500e31a32998a403fe8603603e57b6ca8f3df72111027ffac", 0x4f}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0xc)
lseek(r0, 0x17, 0x2)
fcntl$setstatus(r0, 0x407, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='ethtool\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r6, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80243058}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf256800000008000300", @ANYRES32=r4, @ANYBLOB="3000c7000803060107006c0040022507010300033f00a1030502e3060406c90701020104ed02f701188c29615136415b"], 0x4c}, 0x1, 0x0, 0x0, 0x44841}, 0x800)
r11 = syz_genetlink_get_family_id$nl80211(0x0, r8)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d2fb43a1c00"/15, @ANYRES16=r11, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:51:42 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2521.321165] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
22:51:42 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

[ 2521.346913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2521.362881] loop6: detected capacity change from 0 to 140
[ 2521.372069] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2521.378525] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2521.379132] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2521.388602] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:42 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:42 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:51:42 executing program 2:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x180c0, 0x0)
ioctl$SNAPSHOT_S2RAM(r0, 0x3314)

[ 2521.456790] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2521.457498] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2521.466853] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2521.467500] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:51:42 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xf0ffffff, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2521.492645] loop6: detected capacity change from 0 to 140
22:51:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x80000}}}}, 0xc0}}, 0x0)

22:51:42 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:51:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x7000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:42 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:42 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x84)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c2", 0x61, 0x400}, {&(0x7f0000000080)="00000000000000000000000028305c8a835f4f4da440baa59e00c62dcde14a2884cb", 0x22, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013a00))

[ 2521.740677] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2521.744793] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2521.749557] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2521.752597] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2521.813324] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2521.814073] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2521.814863] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2521.815937] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2523.798366] Bluetooth: hci1: command 0x0406 tx timeout
[ 2523.862422] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2523.862470] Bluetooth: hci4: command 0x0406 tx timeout
[ 2523.863320] Bluetooth: hci7: command 0x0c1a tx timeout
22:51:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xc000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:51:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xfffff000, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:54 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0xfffffffd, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x80000000}, 0x8, [0x0]})
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000000)={0x3, 0x1, 0x80000000, 0x9, 0x1000, 0x1})

22:51:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:51:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:51:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xc9ffff}}}}, 0xc0}}, 0x0)

22:51:54 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x1f, 0x3, 0xa6, 0x0, 0x0, 0x18400, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x10000, 0x2}, 0x800, 0x52, 0x7eb, 0x7, 0x0, 0x3, 0x97c, 0x0, 0xffffffff, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x0)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x8044)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:51:54 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x400)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fchmod(r1, 0x20)
pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x800, 0x0, 0x23)

[ 2533.609578] loop6: detected capacity change from 0 to 140
22:51:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[])

22:51:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf0ffff}}}}, 0xc0}}, 0x0)

[ 2533.711962] No source specified
22:51:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2533.732353] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2533.757191] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2533.761035] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:51:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[])

[ 2533.772038] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2533.817825] No source specified
22:51:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x1000000}}}}, 0xc0}}, 0x0)

22:51:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xffffff7f, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:51:55 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x100, 0x0, 0x7ff, 0x9, 0xffff025d})
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000740)={0x7, &(0x7f0000000700)=[{0x1, 0x80, 0x23, 0x2}, {0x400, 0x64, 0x40, 0x8}, {0x6, 0x6, 0x20, 0xd37d}, {0x7fff, 0x0, 0x4, 0x2}, {0x1, 0x1, 0x1, 0x200}, {0x2, 0xe6, 0x4, 0xfffffff7}, {0xda0, 0x5, 0x2, 0x35}]}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x44410)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb8b, 0x7e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xea}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x48800)
r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r10 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80800)
ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000280))
vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x142}, {&(0x7f0000000100)="e43c55abe20d703c0d9b62cf7c06e6d3033f1599c1b4a90772b59cc020b91e80a5620189ab5b0c2a4b1ddf8b75781c5df3c6a08f460092e775509a017b5459c2b4adbfe867a42eb4e9cd018cb0420c725d63607a5300090019c9f89ade3dfce8351452ef4c6759ab60dc516a3537eabd0a84ed25d22f77b7b019beb8526e5db8c7863d0025bb85d3f5", 0x89}], 0x2, 0x0)

[ 2533.867026] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:51:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[])

[ 2533.876089] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2533.895349] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2533.905627] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2533.925869] No source specified
[ 2535.832112] Bluetooth: hci1: command 0x0406 tx timeout
[ 2535.894378] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2535.958377] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2535.959243] Bluetooth: hci4: command 0x0406 tx timeout
22:52:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xd160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xffffff9e, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:06 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3, 0xfffffffd})

22:52:06 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0xfffffffffffffe8d, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000000000000000006800000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:52:06 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000340)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="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"/358], 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000040)=@polexpire={0x1d4, 0x1b, 0x10, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@algo_aead={0x113, 0x12, {{'morus640-sse2\x00'}, 0x638, 0x100, "4e60ce512d64872a387c0a1bec0bd2b1aabd0e5c420ff9f47cff615a0d89f16484cf81106f4a58456dec32526c7f0109dd58e1b6497884df3989cc80d300b5feb6438f8bf83d1169b77a9019d555742b8136788009e445667bbea6cc605ac45e39bd46956339a1759ccd2f998baed8b0b6a85c0bafd0f6b57fe7757db2df096318c4eb03d19458736896305219a2083662632646b94c8df0184e24e13f1041182ea58874a099f8e76d6803324129def4874e85642738dbe41ada9dce72b6126e258d525f45936f"}}]}, 0x1d4}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5}, 0x3000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1}, 0x3f)
r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x33, 0x0, 0xffffffff, 0x0, 0x1, {0x0, r4}}, 0xd7)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x440080)
splice(r5, &(0x7f0000000240)=0x8, r6, &(0x7f00000002c0)=0x5, 0x8, 0x300b3854a0e37182)
vmsplice(r2, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000000)="ae", 0x1}], 0x2, 0x7)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00')
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)

22:52:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x2000000}}}}, 0xc0}}, 0x0)

22:52:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41380}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, 0x0, &(0x7f00000001c0)='\\', 0x1)
r1 = signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x9, 0x62, 0x80, 0x0, 0x40, 0x20088, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x4c41c45a, 0xc4}, 0x110, 0x2, 0x7, 0x5, 0x1, 0x400, 0x400, 0x0, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r1, 0x2)

22:52:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xfffffff0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2544.958919] loop6: detected capacity change from 0 to 7
[ 2544.977549] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
[ 2545.015354] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2545.017965] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:52:06 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xfffffffa}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2545.024117] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2545.028235] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0xffffffff, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x3000000}}}}, 0xc0}}, 0x0)

22:52:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:06 executing program 1:
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0xffff}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
write(r1, &(0x7f0000000000)="101e9aea2e4b3462f99d3e7a6d15a30885998d9fab02aab69c70a465536b0c4627b186d4aedf3472b2a25c56067aaafed4b80cf8dbd5e486593da33156acdd105ae2a1bc9ba8ceafc3874eaef72d79f5cc4e36a9f5f3fd9947fc0db6c61142887652fb08ed83909620a23b169402675b3912ef6e222b4e7827524e1694ef16cc257664559973c4c3590515713f889464428109355e3f325a6cb026f369858deb4a9882378d23311f108e97a20b8b3eb97ebd730b2ed19616b12afe376c2b9b730c035becc702563a338e7cf2c36eecbb6e9ddfc346071cc15831764a5b977184b1f117232b7e7b6a23c673b84726b564dbd80ade", 0xf4)
vmsplice(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)

22:52:06 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/65, 0x41}], 0x1)

[ 2545.152847] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2545.155941] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2545.157740] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2545.158915] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2545.210907] loop6: detected capacity change from 0 to 7
22:52:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xf160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x1b}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2545.266996] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
[ 2545.468514] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2545.471513] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2545.474574] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2545.477632] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2545.540457] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2545.543499] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2545.546948] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2545.548528] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2547.542404] Bluetooth: hci1: command 0x0406 tx timeout
[ 2547.606709] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2547.607903] Bluetooth: hci4: command 0x0406 tx timeout
[ 2547.607929] Bluetooth: hci7: command 0x0c1a tx timeout
22:52:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x12000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:15 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2554.300872] loop6: detected capacity change from 0 to 7
22:52:15 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ffe4b39058e7c4b4b1211a613393eb0fa905b778f3dbc8d446c5872cc96ad24ede40c422ce1d6de74376b544108ae63e49bedc0d96d46aa07e8945d0b42f6b427b81bc996ddb827ba36682958d0d69c88fea3cdf2a54f75b833a01b5f4fba89edf009c681bf488a43c72b9a9f9b3b60ab797161ce9068ae0a0e4bac8900ad4181d95bc392f772a1ea31ccf439f614e919e10b3346161f575b8c48f88df523b3d14a96e4685036692414e3c6d012b639b9383e34ae4c51918", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="93d0bab67d079daca3f5160f0622d7fef1231da6a5affd3415f4b1507afb06e0dae6c2b6b7cb263b85e622fb69689957fafb57da3892d27b222e855cffad716e50bad3045885c85d842efff4deadbb4e940ef568021f6651757d277782fb53422fae44206e91bf35840ba6d251cd"], 0xc8}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000140)={[0x40]}, 0x8, 0x80000)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="da06064a", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:52:15 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x4000000}}}}, 0xc0}}, 0x0)

22:52:15 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:15 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x1b}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:15 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x1b}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:15 executing program 1:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x494440, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000900)={{0x0, 0x1, 0x6, 0x5, 0x1, 0x800, 0xf24, 0x8, 0x8, 0x1, 0xffff, 0x4, 0x3, 0xdc, 0x9896}})
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}, {&(0x7f0000000000)="7f35240327710a2bb86fb70b7982672469898f30eef0c0702c2ac2bd889723d158d9ccd37506dfe5f047eb89d909f43bf39aa62e70c7ddf257cd9f77f1591eefdeacf7aa73c1e9d8110366e0b9da177741851d3dfcd90df55505ca90f4ad91ecd825cfa848d1ce7fd5ec210923f515a728f7c734536048986fb9a69c4a6b4f8f6181b8be1f878c91fc7f2613832262e4788f2a85cf6d219c7d35ae4fb62bca6e136158ca1c373c1f045e1fa35f005eae585d25e0ed04ec80861264785b02bb05c701abc31b19a5957c73fd4704f63cc56a29689a8930cca0fc33ac78cf0d0dc403aec0914d65d9c7c4", 0xe9}], 0x3, 0x0)

[ 2554.322979] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
[ 2554.396765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2554.401622] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2554.402389] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2554.406480] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2554.407090] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:15 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2554.443531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
22:52:15 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x7010000}}}}, 0xc0}}, 0x0)

22:52:15 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2554.471720] loop6: detected capacity change from 0 to 140
[ 2554.486671] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2554.490628] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2554.491233] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:52:15 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2554.497630] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2554.516201] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz-executor.6: iget: special inode unallocated
[ 2554.519935] EXT4-fs (loop6): get root inode failed
[ 2554.520824] EXT4-fs (loop6): mount failed
[ 2556.438399] Bluetooth: hci1: command 0x0406 tx timeout
[ 2556.502390] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2556.502445] Bluetooth: hci4: command 0x0406 tx timeout
[ 2556.503425] Bluetooth: hci7: command 0x0c1a tx timeout
22:52:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b39117530000000000000000190000000300018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1)
pipe(&(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40890}, 0x40004)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf40}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x27}]}, 0x48}, 0x1, 0x0, 0x0, 0x8015}, 0x4004040)

22:52:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:24 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:24 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x18000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x2}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x8000000}}}}, 0xc0}}, 0x0)

22:52:24 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000005", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[ 2563.536566] loop6: detected capacity change from 0 to 7
[ 2563.550398] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
[ 2563.565822] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2563.572703] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2563.584467] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2563.589083] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:24 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x1b}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x9000000}}}}, 0xc0}}, 0x0)

[ 2563.675355] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:52:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2563.714914] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2563.716228] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2563.723728] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:25 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:25 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x80000, 0x80)
fcntl$setstatus(r4, 0x4, 0x2400)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/tcp_cubic', 0x80, 0x2)
sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x30}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
io_uring_setup(0x2244, &(0x7f00000000c0)={0x0, 0xd076, 0x4, 0x3, 0x2d3, 0x0, r7})
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="26c1f5772ed2dc0c4844c812d2650cee412873bb914203154825b319b79c5a310619859347ce9567b7e0c7a7b1764e5c4af605c0c89178f2f7716d3d5192d7d094caef4302ea"], 0x1c}}, 0x0)

[ 2563.774757] loop6: detected capacity change from 0 to 7
22:52:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x4}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2563.795135] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
22:52:25 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1e000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:25 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xa000000}}}}, 0xc0}}, 0x0)

22:52:25 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc0341)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0xd, 0x11, 0x1fd, &(0x7f0000000500)})
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003193f0f00faa2e1456be3228b09b09e83368decc75fa706f31e40b75cca3eb1e0b3efe563e31d39ccd9e2025a71a37f99471811448fb4d360ef0ec44a79dddd3d6dcce22468b8cccb8197bea900e3bb4e2ba52f1e99e96567a9aa7b8d24262fa53dda3703847ed0ceba58482f4deb4f87196ff51bd56a28e104c5c92c85f7cd013ded514fc3143ce8d0d6d9d49e6e7449ebf1fe30c0840a7acf24bdcb7f78bf89b74fbea5a1e452599b24c1f3cba2148dab527535f908b65ae22c952ecab6e13bf26af495c46be9dc5a637d366aafbd678fde8fbb3737ddc14f9e09c6d8807530942de61f960995353c3d52eec20954e3fda5e055247cb5bb4a67297c6b2886e60af42271ba69ac19903c0ac99ce875074e54782b96e78e7c23961128920291d32f4e62802d050989de868bc172ff30e690167fb510b84e59e682d92b7b993015f86f08daeb7b4b73315f87fb4c941951fc8ae1091b66453cb4472789f4fa57f2fe28d3401f508239f5efcde2ca155582f9a79a7ae442807343d79566a6a533c5c1d4314ca32819bca9077b7fcba25306e792f46"], 0x120)

22:52:25 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:25 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf000000}}}}, 0xc0}}, 0x0)

22:52:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x9}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2563.947309] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2563.947975] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2563.948615] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2563.949197] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2564.009118] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2564.012737] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2564.016561] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2564.017161] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2564.019640] sg_write: data in/out 134217692/246 bytes for SCSI command 0x0-- guessing data in;
[ 2564.019640]    program syz-executor.2 not setting count and/or reply_len properly
[ 2564.027675] loop6: detected capacity change from 0 to 7
[ 2564.063977] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks)
[ 2565.974582] Bluetooth: hci1: command 0x0406 tx timeout
[ 2566.042454] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2566.042476] Bluetooth: hci4: command 0x0406 tx timeout
[ 2566.042522] Bluetooth: hci7: command 0x0c1a tx timeout
22:52:34 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:34 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = dup2(r2, r0)
vmsplice(r1, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ohci_pci', 0x200, 0x1)
fsetxattr(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="757365722e74727352994a3a62d7e8fe25faa075737465642e70fd4eae69321668f01c7fe9d0892eca3d985272d0240d12c3"], &(0x7f00000000c0)=']{(,\x00', 0x5, 0x2)
ioctl$int_in(r3, 0x0, &(0x7f0000000100)=0xffffffffffff0001)

22:52:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x24000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x9effffff}}}}, 0xc0}}, 0x0)

22:52:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000180000000b133b7470ae6d1357c8fd9960eba4dacfbd749e14", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup.cpu/cgroup.procs\x00'])
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000240)=""/4096, 0x2, 0x0)

22:52:34 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
r4 = getpid()
r5 = getpid()
r6 = pidfd_open(r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000000))
r7 = getpid()
r8 = pidfd_open(r7, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r8, &(0x7f0000000040)={r3, r6})
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x53, 0x1, 0x5, 0x0, 0x98, 0x1801, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x10000, 0x81}, 0x12804, 0x2a71, 0x7, 0x2, 0x5cb6ab8f, 0x0, 0xcf0, 0x0, 0x9, 0x0, 0xffffffffffffffe0}, r4, 0x5, r0, 0x8)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r1, 0x407, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r11, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2573.366395] loop6: detected capacity change from 0 to 140
[ 2573.424747] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2573.426211] EXT4-fs (loop6): group descriptors corrupted!
22:52:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf0ffffff}}}}, 0xc0}}, 0x0)

22:52:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:34 executing program 1:
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d0000000000004a298d8f18c472adf97d175f4e56a36e7f3e2df42d290780aeb10dfcc0eac6c362fac7fc98ac7ef375d24c64bb7d5f5c55d1c7d1331b8b9d34cdab7e1c1617d2c62e3d9704d61e88e8556c9f063a76617dac78000bd2f6bd5f7c9565b2027279dae51aacc2fdaf832014e3d82e6cb9edcc980f43188b93f177528c9c5e69126452e55a1a582b6a06fdf91439e9f61128fa302022a026bf9ac6b622e67fae98275fee3a2c600b7f", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="a3638669ad477c37e0cfe18da83ec97890bc3ed2279b1ba083d608d7321afe7d0997412309cec4518fb3ae11ed4bbbf39784153c41cf02bd45edcb97db9a49bb40610eba916e0d2a6795b1d5f698b8dac39fe9ec54d25b87ea15a87e83a71f40bf6161d8543ab24dbfe481f86393d72f28b10505d5a47dccc6f5", 0x7a}], 0x1, 0x0)

[ 2573.492920] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2573.506354] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2573.533794] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2573.541677] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2573.622568] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2573.627736] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2573.634621] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2573.638067] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2575.574371] Bluetooth: hci1: command 0x0406 tx timeout
[ 2575.638448] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2575.639694] Bluetooth: hci4: command 0x0406 tx timeout
[ 2575.639737] Bluetooth: hci7: command 0x0c1a tx timeout
22:52:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:45 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000180000000b133b7470ae6d1357c8fd9960eba4dacfbd749e14", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup.cpu/cgroup.procs\x00'])
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000240)=""/4096, 0x2, 0x0)

22:52:45 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2a000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:45 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x4)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="764d98ad0fa75e2d2d5173130d4be48b099aee0603e181f65b3fe8d9dea321cbaa3423df3361adb7ca4f0720ecf1794c8c02a52da3c245559f20fb22f73e16c41ea326765d400ad74362aa3ad7937c75b4149726b6c65d62db9edb09"], 0x1c}}, 0x0)

22:52:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:45 executing program 1:
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9c, 0xa9, @random="6d3b6984d4bbac7eb72ead9bffa04c6701f7068cd2e95a5da07d85f5aefb3ef3185b9c9fd2b221ada32ce34ecafd87e19e8aa2f66ab38b405fd48d13ea73e361dfbfee1b59e3c11c36ab2a2fa42660847b23f198b60bcf5e63ade3414d1c1e71abf93f4e0cdbe3b5fdaca1fe1e1bfc5daec0bde6f2e99353431fbc94c3b59c37e46a5fa11555d09e8b1a47928234916d23ed6c39b334e121"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x4048040)
vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

22:52:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xfffff000}}}}, 0xc0}}, 0x0)

[ 2584.179459] loop6: detected capacity change from 0 to 140
22:52:45 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
splice(r2, &(0x7f0000000000)=0x9, r3, &(0x7f0000000040)=0xeb, 0x1360000, 0x5)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2584.222492] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2584.224038] EXT4-fs (loop6): group descriptors corrupted!
22:52:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xffffff7f}}}}, 0xc0}}, 0x0)

22:52:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xf, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2584.272518] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2584.273188] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2584.273870] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2584.284521] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x3, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:45 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @dev}}]}, 0x104}}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0xff, 0x9, 0x1, 0x30, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0x81}})
r4 = geteuid()
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=@allocspi={0x300, 0x16, 0x300, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e20, 0xa49, 0x4e23, 0x800, 0x16, 0xc0, 0x20, 0x62, 0x0, r2}, {@in6=@mcast2, 0x4d6, 0x3e}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x8, 0xffffffff, 0x6, 0x9, 0x1, 0x8, 0xfffffffffffffffc, 0x38}, {0x8, 0x81, 0x7, 0x80}, {0x1, 0x5, 0xfffffffe}, 0x70bd29, 0x3500, 0x2, 0x3, 0x3f, 0x80}, 0x0, 0x8}, [@address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0xa, 0x40, 0x63}}, @lastused={0xc, 0xf, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @tmpl={0x84, 0x5, [{{@in=@empty, 0x4d6, 0xb6}, 0x2, @in6=@private1, 0x3505, 0x3, 0x2, 0x2, 0x1f, 0xe72, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d2, 0x6c}, 0x2, @in6=@private2, 0x3505, 0x1, 0x3, 0x4, 0x4a6a, 0x7, 0x8}]}, @migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, @in=@loopback, @in=@remote, 0x2b, 0x3, 0x0, 0x0, 0xa, 0x8}]}, @policy_type={0xa, 0x10, {0x1}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0xfff7, 0x4e21, 0x8, 0xa, 0x0, 0xa0, 0x2c, 0x0, r4}, {@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xffffffffffffff00, 0xffffffff, 0x7fffffff, 0x4cdf, 0x3, 0x1f, 0x328, 0x7}, {0x8, 0x20000000000000, 0x4, 0x3}, {0x3, 0x800, 0x7300}, 0x70bd2a, 0x3507, 0x2, 0x1, 0x9, 0x40}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000)

22:52:45 executing program 1:
ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'})

[ 2584.346657] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2584.347370] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2584.349594] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2584.350230] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:45 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:52:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:45 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x30000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2584.489545] loop6: detected capacity change from 0 to 140
[ 2584.528707] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2584.530460] EXT4-fs (loop6): group descriptors corrupted!
[ 2584.558491] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2584.559191] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2584.563069] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2584.565513] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2584.644611] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2584.653486] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2584.654082] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2584.658055] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2586.646320] Bluetooth: hci1: command 0x0406 tx timeout
[ 2586.710368] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2586.710427] Bluetooth: hci4: command 0x0406 tx timeout
[ 2586.710871] Bluetooth: hci7: command 0x0c1a tx timeout
22:52:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xffffff9e}}}}, 0xc0}}, 0x0)

22:52:54 executing program 2:
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@private=0xa010102, @empty}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x0)

22:52:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x36000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:52:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:52:54 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept(r0, 0x0, &(0x7f0000000080))
fallocate(r3, 0x8, 0x0, 0x78)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="69397759c47690159b817effc05e6f9bb01a9ee1e823c97498010000000000004000000006c13daecd51cf6d325005238d4499f27e3e550525846f22d0ccd4ca72e696"], 0x1c}}, 0x0)

22:52:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:54 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x3, r0, r1)
r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x0)
fcntl$getown(r1, 0x9)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
pwritev2(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0x1}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000400)=""/237, 0xed}], 0x2}, 0x40000002)

[ 2592.988649] loop6: detected capacity change from 0 to 140
22:52:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x8, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2593.035137] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2593.036732] EXT4-fs (loop6): group descriptors corrupted!
22:52:54 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="0d425f89e79104309e4e9a2c9771d959b978442663a66a44b8a5313d82a323b9"], 0x1c}}, 0x0)

22:52:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xfffffff0}}}}, 0xc0}}, 0x0)

22:52:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2593.107691] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:52:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0x800, 0x0, 0xff, 0x9, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xf1, 0x0, 0x0, 0xc, 0x4, 0x7}, 0x20)
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x3, 0x0, 0xf, 0x9, 0x86, "454c08adb85c2ab5fbe363969c6678cca5284dc5abb673575de9fe3e9d24e63fc696f2c574261ef41382f5097a8c6ce24ab5cd94ee25425517874002cbac9654835f0cba9e60cefe7699fec20416d3a96783a60b06169b11b9f316925f3e251470315ae5a8df14ec23a1750c320553517fc12943dfe788d5af9e58d4eb5a8582874a6f43099b"}, 0x8f, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x2, 0x1, 0x2, 0x1, 0x200}, 0x20)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x800, 0x2}, 0x20)

[ 2593.124377] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2593.131709] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2593.142913] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:52:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x9, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:52:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x8000000000000}}}}, 0xc0}}, 0x0)

22:52:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:52:54 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3000000000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=<r0=>0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="d335048e0b65c1a0aad98d502c2e84a625d202821a", 0x15, 0x7f}], 0x230040, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d782c687560883d6e657665722c6d6f64653d3030303030303030303030303030303030ab31eb3030373737372c687567653d616c776179732c6e725f696e6f6465733d70631437db2c4a003467", @ANYRESHEX=0x0, @ANYBLOB=',huge=always,defcontext=user_u,appraise,smackfsroot=&,fscontext=root,\x00'])
r2 = open_tree(r1, &(0x7f0000002480)='./file0\x00', 0x80000)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002380)={0x0, <r3=>0x0})
r4 = getpid()
pidfd_open(r4, 0x0)
r5 = syz_io_uring_complete(0x0)
clone3(&(0x7f0000002400)={0x1080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x38}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/4096, &(0x7f0000000240)=[r3, r0, r4], 0x3, {r5}}, 0x58)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000024c0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000002540)=r7)

[ 2593.252961] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2593.254852] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2593.260916] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 2593.263693] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2593.268702] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2593.296695] loop6: detected capacity change from 0 to 140
[ 2593.302852] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 2593.311521] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2593.312224] EXT4-fs (loop6): group descriptors corrupted!
[ 2595.222371] Bluetooth: hci1: command 0x0406 tx timeout
[ 2595.286404] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2595.286468] Bluetooth: hci4: command 0x0406 tx timeout
[ 2595.287238] Bluetooth: hci7: command 0x0c1a tx timeout
22:53:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf0ffffffffffff}}}}, 0xc0}}, 0x0)

22:53:05 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x324, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:05 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:05 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3c000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:05 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8417d7e7963bd8ab60029b19e53a5d201b5cc76f0b7038b90bd9ffed89736541a5648b64f0bcda487e871a988c019684834901e017b60b53248829cb416ec25d81986adc50b922979af5c7f8f4ede82ad372b8051d6676eae0ac46ec3e6848fb2eaea789c6d6f076ff4596874a73e7f65b670b6f81d39135471e160d40e35554e34d8f725d84f6160cb6a2f21dcb037c3135ad97f98d57b806988921b0bbb47882ce07526e806c", 0xa7}], 0x1, 0x2)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "fda1ea40fd6de2b71043cff74cd7fc37c78daff4b89a1b487a00de2a14ed90e0ee046f517c32abef18d53949d44038eefe6da6fd55c5"}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "6f0e630f405c8ebe7a14389092170bf07f688fc9f84d10420d75e4a4d26a1912260bc715910663947be8698ac32de7ce2d0270e2631867cebda5d8aa941635803ea2f0dd0d88da659ccf9087698ab3f65892d309e79536ccb5563dd41e6626f3c319a737044e5f47c0696dc5fa"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x33d4}, @NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "5ab4639343923a436a4ad493c0694fe71de4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}]}, 0xfc}, 0x1, 0x0, 0x0, 0x811}, 0x8001)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:53:05 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000002c0))
syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="45230a235a07d652b333542c693dfcba364f"])
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x521000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000180)={{r4}, 0x4, &(0x7f0000000140)=[0x401, 0x8, 0x3, 0x8001], 0x80000001, 0x1, [0x74f, 0x0, 0x1, 0x8]})

22:53:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa98aaaaaaaaaaaaaa86dd607437b800141100fe801600000000000000000000d5c300fe8000000000000000000007ff5defaa0087803e642dfd283f7236010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3000000090780000"], 0x0)

[ 2604.646808] loop6: detected capacity change from 0 to 140
22:53:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2604.669393] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2604.670204] EXT4-fs (loop6): group descriptors corrupted!
[ 2604.706820] 9p: Unknown access argument 00000000000000000000E#
[ 2604.706820] #ZÖR³3T: -22
22:53:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x100000000000000}}}}, 0xc0}}, 0x0)

22:53:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2604.764181] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2604.764919] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2604.765702] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2604.796298] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2604.800138] loop6: detected capacity change from 0 to 140
[ 2604.858990] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2604.862541] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2604.866431] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2604.871380] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2604.879861] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2604.881662] EXT4-fs (loop6): group descriptors corrupted!
[ 2606.870399] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2606.870417] Bluetooth: hci4: command 0x0406 tx timeout
[ 2606.870875] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2606.872423] Bluetooth: hci1: command 0x0406 tx timeout
22:53:16 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:16 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x300, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3f000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:16 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x200000000000000}}}}, 0xc0}}, 0x0)

22:53:16 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000004940)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/163, 0xa3}, {&(0x7f00000012c0)=""/249, 0xf9}], 0x4, &(0x7f0000001400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000014c0)}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2, &(0x7f0000002540)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r10=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000002600)=""/91, 0x5b}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/55, 0x37}, {&(0x7f00000036c0)=""/38, 0x26}, {&(0x7f0000003700)=""/54, 0x36}, {&(0x7f0000003740)=""/4096, 0x1000}], 0x6, &(0x7f00000047c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r11=>0x0, 0x0, <r12=>0x0}}}, @rights={{0x38, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r14=>0x0}}}], 0x98}}], 0x3, 0x2000, &(0x7f0000004980)={r1, r2+10000000})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r15=>0x0}, 0x1100)
setresuid(0x0, r15, 0x0)
lstat(&(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r17=>0x0}, 0x1100)
setresuid(0x0, r17, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r19=>0x0}, &(0x7f0000008600)=0xc)
setfsgid(r19)
r20 = open$dir(&(0x7f0000004c40)='./file0\x00', 0x450000, 0x40)
r21 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r21, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r22 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r22, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{&(0x7f0000004a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000004a80)="1c1f21c7e90936e708d35c318112ea0b80fcf745fd156d9cbd14c04c8ad9d46976827273a9d991b5b91c7e178ac42c3ff610db69fe8272f018e7aaad700b669e9a911ad582cffdcd2d8ed72c341f3e5219cc770084208ad23661d826770272c42439d8142f9776c3b135876d948e73ecd9fbfe8192be1096e3d194353eb2f1e48ec89b02d997d82599af609493e7de9b3d6eee4726ace145", 0x98}], 0x1, &(0x7f0000004c80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r7, r13, r5, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r14}}}, @rights={{0x18, 0x1, 0x1, [r9, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r16, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r17, r19}}}, @rights={{0x20, 0x1, 0x1, [r20, r3, r21, r22]}}], 0x110, 0x4000}}], 0x1, 0x441)
bind$bt_hci(r6, &(0x7f00000049c0)={0x1f, 0x2, 0x4}, 0x6)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x6, 0x63}, 0x2)

22:53:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002400)={<r1=>r0, 0x1000, 0x5, 0x200})
syncfs(r1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfed0, &(0x7f0000000000)=[{&(0x7f0000003b00)=""/4097, 0x1000}], 0x1}, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$SG_IO(r3, 0x2285, &(0x7f0000002380)={0x53, 0xfffffffffffffffe, 0x7f, 0x7, @scatter={0x3, 0x0, &(0x7f0000001080)=[{&(0x7f0000001140)=""/194, 0xc2}, {&(0x7f0000001000)=""/24, 0x18}, {&(0x7f0000001240)=""/72, 0x48}]}, &(0x7f00000012c0)="edcc99a50ef8a4302ef1c201de662dd203693ab0f524701a427a8bfbfba4bd94c6da00768bfca30852827409afee5a931c574d357aa5e12212953fdebceb2cb9bf4d89bc1de2c14d858211da2e875370308ed552a4e8167639e52107a717c925f4ac0cf1b6cbd47e1b1a5d609efed5fb170988cc1d96def9b13a2f47349aca", &(0x7f0000001340)=""/4096, 0x7, 0x15, 0x0, &(0x7f0000002340)})
r4 = syz_open_dev$rtc(&(0x7f0000002440), 0x14000, 0x2000)
dup2(r2, r4)
r5 = dup(r2)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001040)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

22:53:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:16 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4020000", @ANYRES16=r5, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x814}, 0x40d0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[ 2615.236485] loop6: detected capacity change from 0 to 140
[ 2615.252085] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2615.252900] EXT4-fs (loop6): group descriptors corrupted!
22:53:16 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x300000000000000}}}}, 0xc0}}, 0x0)

22:53:16 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x3d8, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:16 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2615.345459] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2615.360560] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2615.368359] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:53:16 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x80)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x48840, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0xff, 0x8, 0x5, 0x0, 0x4, 0x48a0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4a400, 0xfffffffffffffffb, 0x0, 0x9, 0x1000, 0x80, 0xff, 0x0, 0x0, 0x0, 0xd78}, 0xffffffffffffffff, 0xc, r2, 0x9)
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r5 = perf_event_open$cgroup(&(0x7f00000004c0)={0x1, 0x80, 0x7f, 0xde, 0xff, 0x5, 0x0, 0x70a, 0x1040, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d3, 0x1, @perf_config_ext={0x6, 0xb07}, 0x21, 0x4, 0x2, 0x3, 0x3, 0x2a, 0x5, 0x0, 0x200, 0x0, 0xbcc}, r4, 0x5, r0, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x20, 0x3, 0x9, 0x59, 0x0, 0x20, 0x6c88, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc92, 0x2, @perf_bp={&(0x7f0000000540), 0xd}, 0x8040, 0xe7e, 0x4, 0x8, 0x6, 0x401, 0x9, 0x0, 0xb3, 0x0, 0x100000001}, 0x0, 0xc, r5, 0x1)
mount$cgroup2(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x82, &(0x7f0000000400)={[{@subsystem='devices'}, {@memory_localevents}, {@memory_localevents}, {@memory_recursiveprot}, {@subsystem='hugetlb'}, {@memory_recursiveprot}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00')
memfd_secret(0x0)
sendfile(r3, r1, 0x0, 0x1480000)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x1211481, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='.`f||uid=', @ANYRESHEX=r7, @ANYBLOB="2c616669643d3078303030303030303030303030303030382c63610101653d6d6d61702c616669643d3078303030303030303030303030303139642c646f6e745f686173682c7365016c6162656c2c6f626a5f726f6c653d2f6465762f76637375002c61756469742c646f6e745f61707072616973652c726f6f74636f6e746578743d726f6f742c657569643c", @ANYRESDEC=r8, @ANYBLOB=',obj_role=+\\@,\x00'])

[ 2615.379721] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2615.406783] loop6: detected capacity change from 0 to 140
22:53:16 executing program 2:
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

[ 2615.439434] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2615.440198] EXT4-fs (loop6): group descriptors corrupted!
22:53:16 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000000000010000000068000000080003004c2c7b86a8579ae152d376da1a9d7bd333760f4e1844f53220a28a85f99731570b554fb9cbdb6cc221270e770e390e5254eab3f1a9bf47e8e6e80e39a6c0703786220f31c93bc0172614cc26def50f72da570d000000000000165694a7e04e4f633377ee690a14f4b3786b84116d5dfa95d47237333a508691ca1d24c31f7d7d4e259099fd425eb8cec5b075254695cdc8f5ac1a754df10aa0abac425ac0a0b68798ae72deddb1e240f498cc4283c1703a9c558551e9ec96a14f05869310209535affe13c7e4c0cf7a5b27116de4b3d59d9a4235e349395ea99c", @ANYRES32=0x0, @ANYBLOB="e59e235f1a12831efde9ae51d9056f25b71b75f0d0e8399ab48dfdd471d7aea0af655274fde635ff279c822bc58b51effe4d7e8650507b06cc03b384ce03908acbd1764b3c6087e780c463ca75387d05543b8b797babe017eb15e2f9db0c5b36e470b0094e303c95671a719566ec3639f446d659fa52b56f3c9281a6e2015d93690238f59fb0038f0eb8ce5dfe68e06bad715a008cbf50a6326db78e4e1d25e9c7804d30533d"], 0x1c}}, 0x0)

[ 2615.469740] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:53:16 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x900, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2615.479925] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2615.488577] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2615.503455] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:53:16 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:16 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x400000000000000}}}}, 0xc0}}, 0x0)

22:53:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40000100, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:16 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf00, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2615.736551] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2615.743043] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2615.749700] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2615.755607] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2615.820815] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2615.824087] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2615.824850] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2615.825514] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2617.814374] Bluetooth: hci1: command 0x0406 tx timeout
[ 2617.878412] Bluetooth: hci4: command 0x0406 tx timeout
[ 2617.879494] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2617.880529] Bluetooth: hci7: command 0x0c1a tx timeout
22:53:25 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x900, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:25 executing program 1:
r0 = epoll_create1(0x0)
r1 = getpid()
r2 = getpid()
r3 = pidfd_open(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000))
r4 = getpid()
pidfd_open(r4, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000080)={r0, r0})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40911, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc})

22:53:25 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:25 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x701000000000000}}}}, 0xc0}}, 0x0)

22:53:25 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0020c7772abd700000030000000000000000", @ANYRES32=r4, @ANYBLOB="0c0099000600000054000000"], 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x0)

22:53:25 executing program 2:
r0 = syz_io_uring_setup(0x77b9, &(0x7f0000000080)={0x0, 0x810ea2e, 0x38}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000001240))
syz_io_uring_setup(0x6fb6, &(0x7f0000000000)={0x0, 0xb953, 0x0, 0x0, 0x1ac}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r8=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f00000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r9, r3}}, 0x3000)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc5c31855be8c610, 0x2000, @fd=r0, 0x40, 0x0, 0x0, 0x4, 0x1, {0x3, r10}}, 0x9)

22:53:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xd803, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2624.476118] loop6: detected capacity change from 0 to 140
[ 2624.493180] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2624.494040] EXT4-fs (loop6): group descriptors corrupted!
22:53:25 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x800000000000000}}}}, 0xc0}}, 0x0)

[ 2624.524913] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2624.525233] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2624.525548] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2624.527372] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2624.590282] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2624.590971] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2624.595628] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2624.597488] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2626.582521] Bluetooth: hci1: command 0x0406 tx timeout
[ 2626.646467] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2626.647566] Bluetooth: hci4: command 0x0406 tx timeout
[ 2626.648599] Bluetooth: hci7: command 0x0c1a tx timeout
22:53:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x900000000000000}}}}, 0xc0}}, 0x0)

22:53:44 executing program 2:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2)
lseek(r0, 0x7, 0x4)

22:53:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:44 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:44 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000588195b8b094b4e2aabd2021a5478535d078554c5d6a281ad6f84cfdf4", @ANYRES16=r4, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

22:53:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x67160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:44 executing program 1:
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
r1 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
poll(&(0x7f0000000000)=[{r1}, {r0, 0x604}, {r2}, {}], 0x4, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
pread64(r5, &(0x7f0000000200)=""/44, 0x2c, 0x1000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="01ac20d10000000000000000", @ANYRES32=r3, @ANYRES64])
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', <r11=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev, r11}, 0x14)
setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000000)={@empty, r8}, 0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x284, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "b136a09bd7d276599818a89ebd1fcfe0bea2966c9d2b7ff0f3f42759f90abdbeb95ac245a1cf7903dcda5391a1b1136c692e73bc2d3d7e6976536b0a35e6062f22fc3c615347efc64a1135acf439ac46daac86a8805198fa68cb6dd16d92622bcec6ef4e840548fc6e2eb8c2e868af475649a227b2b07dbbcaa32a36786405fd9f69f7c8800e828b674e4e89c2d7278092e33765120ab117afa9f85c4cfdf13a37b16f124c2a86a66672ed9eaf2010c52410123ebfa1f22364d6594bee97db970943ce2b83572b0d9c9c2c3f68"}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "acf7845d90622078f78bcc3731d876e9f2fca0a110d0e8194562f93b1f42b7b3d03ea60add751cb786560468f2e400967d08c756f5c8ecd68053e0f516b9487ffdffdd0ea9eaf4b42df6e75f8ab4ee777845d2904846c49d800398aebc8f01ab4113d483d7991fbdb648e21d6298ed4d60a5406cc2173a91aceedbc024af40f386c117337d340e1c0e72fe4dc38524f3710549e6741bb7318d75bf99985301ddf2439a5a2f4e924128774ee4f61b12e3125739ce540d8dc6d2731b7b1e832568cb2a35765c7ed53c8ca9708d20bc865a82f30fed7524bb8156ef7aae708a24"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "f41543930424207bc0841359f5345ffb79550ced2074b4acf61b460b0d16cf61becf138b92d3af979cfe28"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4008000}, 0x480c0)

[ 2643.089400] loop6: detected capacity change from 0 to 140
[ 2643.107648] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2643.108597] EXT4-fs (loop6): group descriptors corrupted!
[ 2643.118953] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2643.131774] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:53:44 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae", 0x1}], 0x2, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
pidfd_open(r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x8189}}, './file0\x00'})
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0x0, 0x48, 0xf8, 0x0, 0x6, 0x5018, 0x18, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x9020, 0x3, 0x60, 0x4, 0x9, 0xe3, 0x7f, 0x0, 0x0, 0x0, 0xffffffff}, r3, 0xb, r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00000300"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

[ 2643.138445] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:53:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x80000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xa00000000000000}}}}, 0xc0}}, 0x0)

[ 2643.197019] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:53:44 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:44 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646edd0ba119cdeace27ee0cac8bf40561b56521f6cbe03f367ffa04d1e034bfda8e4b189289aa5fbc1ea42201bb9ffeeab7e7ee8f2549e8cdb62c5c3173b923f4c49ef7200ccb147500cf16f9738272e9e3e8429ba7582d3691c08651169bc9b6f92629eb1a1c57fcb7c06beaf732fc0de1db530f85b4", @ANYRESHEX=r0, @ANYBLOB="41f59471b6241b7ae8ac4bed9d1057b95ee20d7d1245577a6f79af059b2c77b1236a09344ca55ba4f6ccc3eb10ea722012a6191205b118502d7566d56ce5729f6700f155b98b721bb7dc13c98187bba925972b336baeadbc5065558d63abdc97079a4b8ee27d12b15ff4d4665eaef9896ef5af70806b777d4286b9b24c679309bf057b895667e3a1868c3f330e13f971912f58da871d3cf474d22418e28c4635f46d6a765e4516", @ANYRESHEX=r1, @ANYBLOB=',access=client,\x00'])
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000140)=""/5)

22:53:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2643.266563] loop6: detected capacity change from 0 to 140
22:53:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x40, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1f}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc002, 0x0)

[ 2643.280501] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2643.281501] EXT4-fs (loop6): group descriptors corrupted!
[ 2643.287360] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2643.291216] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2643.300346] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2643.303594] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:53:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf00000000000000}}}}, 0xc0}}, 0x0)

22:53:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:44 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2643.376169] 9pnet_fd: Insufficient options for proto=fd
22:53:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r4, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa40b, 0x32}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000091}, 0x8800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

[ 2643.393250] 9pnet_fd: Insufficient options for proto=fd
22:53:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x68160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2643.422756] loop6: detected capacity change from 0 to 140
[ 2643.434188] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2643.434992] EXT4-fs (loop6): group descriptors corrupted!
[ 2643.529546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2643.571547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2643.596426] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2643.597094] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2643.611190] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2643.615118] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2643.677435] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2643.680243] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2643.684063] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2643.686150] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2645.654372] Bluetooth: hci1: command 0x0406 tx timeout
[ 2645.718452] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2645.719539] Bluetooth: hci4: command 0x0406 tx timeout
[ 2645.720612] Bluetooth: hci7: command 0x0c1a tx timeout
22:53:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x69160000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:53:54 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x80000000}}, './file0\x00'})
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x10000, 0x40, 0x1, 0x1, 0x7, [{0x100000001, 0xfffffffffffffbff, 0x100000000, '\x00', 0x140a}, {0x0, 0x5, 0x3, '\x00', 0x80}, {0x3, 0x1000, 0x6}, {0x200, 0xffffffffffffff01, 0x0, '\x00', 0x100a}, {0x5, 0x3, 0x800, '\x00', 0xe08}, {0x800, 0x9, 0x1ff, '\x00', 0x8}, {0xdd, 0x3d8cbb1b, 0x58b, '\x00', 0x2}]})
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

22:53:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:53:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x9effffff00000000}}}}, 0xc0}}, 0x0)

22:53:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:53:54 executing program 2:
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="212d18d42feb8431e12d51c0b162e7a03acd0d8f136785bab030081926d35c6bc650b1ffbdb8bd58d79592d0072aa0320b7595905097a00e2971c5da0baf470a4a6c0f88dd3166080c05252421b991536845e979b5fa4f9d35f2bfa30d7fb2d0c74c86135fda607e9e06207287d8bf2fbe4fbd46284cba5f4dfd374ea3caee544104bb19c1a7b5470b234ce2b6e128113bc53a9b26d3da655a1b69371eed4e535ed4291fbb952ccc915fde32e539dff686bba77536e65b5ef4191af91936e528ac479c48604f0f334da3345ab8a543dab66599e1398302a68cc921c51c13a2c4e286fa066200ea51", 0xe8, 0x7}, {&(0x7f00000001c0)="abd3a583bc3af31c96d9dad5a7cde64e7f1f9fe67b9dac13e81882f0173ebfc7e06dbe93d8dcdecff584d56b36e3092a163f396517391014ce3580e7746ff5e43b984588413fb71f65ff1564", 0x4c, 0xd4}, {&(0x7f0000000240)="4d5a31bd6617b5088515a838ffb687614de411e00ceb850d508ca8be27fbbd24bd9e2245cb1a2723e07cd6f5b03ff8244e60fb9eb3a031c2a166e1833589ad938095573216eb2f3757243b8400a4274b249b56e4f52c8ad183f666d538fa4b45ceb93c84b3dc973e94bafa8282f43872f8244a4f974a93397198d117c23a24e90c0acf21e2ad3be6973bb4eaf65b1a4bc32f9b616c6ff82f62e59ea5d278fb6c2a5a346b613d403f4798754ea909ac4780", 0xb1, 0x200}, {&(0x7f0000000300)="fbd8fc68ba498779b828a70718a62de7982d97cfe6ba3db1c94a53e3499297903d4050ebfd72ffe1af05e7462edf5fcb14134e49a32b68ebd228050153186c26e3a4aef0c6ce5525d72e56ec8858ba8d9cceb79dffdfd177c70086df168c2ce1fec965188bb64cd215f20d5dac376f372de38b348bd18c4358d375d3344ef63ce79c45623fb5dc0bb9d233457138ed4299edf9ca1afe2b21a481a3dbc53ae79f2e85f10f2c047c8ba363ea1a51ab8a", 0xaf, 0x5}, {&(0x7f00000003c0), 0x0, 0x200}], 0x90001, &(0x7f0000000480)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=0xee01, @ANYBLOB=',data=writeback,delalloc,debug_want_extraWisize=0x0000000000000001,smackfs[ef=(\'-},obJ_user=},pcr=00000000000000000026,uid<', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=:(\\&#,smackfsdef=//(^}!\\+}[[,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'])
linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0)
unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x400)
syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', &(0x7f0000001000)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@test_dummy_encryption}]})

22:53:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2652.839455] EXT4-fs: test_dummy_encryption option not supported
[ 2652.855894] EXT4-fs: test_dummy_encryption option not supported
[ 2652.875999] loop6: detected capacity change from 0 to 140
[ 2652.901549] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2652.903131] EXT4-fs (loop6): group descriptors corrupted!
[ 2652.913803] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2652.923580] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2652.930941] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2652.938933] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:53:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xf0ffffff00000000}}}}, 0xc0}}, 0x0)

22:53:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6a6d}, 0x0, 0x0, r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = dup3(r1, r2, 0x80000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private, <r7=>0x0}, &(0x7f0000000780)=0xc)
sendmsg$nl_xfrm(r6, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@getae={0x48, 0x1f, 0x300, 0x70bd27, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d2, 0xa, 0x2b}, @in6=@loopback, 0x4, 0x3500}, [@XFRMA_IF_ID={0x8, 0x1f, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008081}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="8d6482dcabfd2d752d8392c764adb122ed4cfb4e768c7a84b002110fdd1005d95ea6153354545c4ae088799fc753b26b2c85a069e71a8cd5fb00517c2ce27579640367e8d1ac76e9af345ffd0ba7679e418311cb7701fd1a1da4a4421b296d595db563e5aa7dd5a56f1944ba18484fd8c0d24a8f03c5ed727551c5ca2a9e6557df8e951d0cf450e434ef91", 0x8b}, {&(0x7f0000000140)="90c3c4268980eb22c3e525501143005bec97766e1fe2cc1e826c395db1d3ad3ed82d6c16f1f4283890217937ece945825c7dffc88c1a94d875e0f7b7fc2eee53e0186042587280ec23f87715809c9137862dbc2b302ba1d298744244bffdbe065d", 0x61}, {&(0x7f00000001c0)="f5fdb8de934e7da768763da22c5f173f99758973f615b393a0582619099df274270a804fb3e356c36726aebe11135b4eb4fa8a3a0fab455d67bda59d6ffa342af211d64dacfedc746c09690723e5b1c0f65a11b29d27b318e88119bd7a2158e7e9d4cb", 0x63}, {&(0x7f0000000240)="4c2f7731a81f2b996e90dd0f446e0a719b0dcee28c8f2b2e6478f6d020bdfa0a6f97eab2955389e76d9754dc02b641da3e68fa271640c42589777f09a809b16df1ad58e3d8b6ccdd89b38de411047f01c839e1ea200ded451ca6560f8224f81a75bf55ce88dcfcf8d3515b17890085cbc6c1946c0fd11a5450a771ebe4648dfc62c339fc340f5fcda05c25805ce3f86ccd6ff3b7d9259ac45fdd97cd3e7db01c784416910038d82299eaa820a2da6a03005f500d0b38fd61ba3dfa79ae6f9662b7de4d766abfbe90cd4af842b929390bb65de5f7a10a12a34845", 0xda}], 0x4, 0x8)
ioctl$VT_DISALLOCATE(r4, 0x5608)

22:53:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2653.021860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2653.024450] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2653.038198] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:53:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2653.050786] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:53:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x2000, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:53:54 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>0x0, 0xee01}}, './file0/file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@version_L}, {@cachetag={'cachetag', 0x3d, '\x80*.-\x11-'}}, {@loose}, {@fscache}, {@cache_fscache}, {@mmap}, {@afid={'afid', 0x3d, 0x6a4d}}], [{@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure}, {@dont_measure}]}})

22:53:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xfeff0000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2653.203697] loop6: detected capacity change from 0 to 140
22:53:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xffffc90000000000}}}}, 0xc0}}, 0x0)

[ 2653.227447] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 2653.227489] EXT4-fs (loop6): group descriptors corrupted!
22:53:54 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
pread64(r3, &(0x7f0000001680)=""/169, 0xa9, 0x10000)
r4 = syz_open_dev$rtc(&(0x7f0000001240), 0x3, 0x40)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001740)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e2000000000000007f00e0ffffff000000000000000000000000802d000000000100000004000000080000000000000000f0ff00000000c8f1ffffffffffff0400000000000000870000000000000008000000000000000000000000000000a03ba9c52775802335f317408912953f215fa8fd5317e15689e222a6784a94fb8858a8097b6963194551f9863a8bbc19fea7e72d4703b416000000"])
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001500), 0x220a00, 0x0)
io_submit(0x0, 0x5, &(0x7f0000001640)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0xd, 0x0, r3, &(0x7f0000001100)="96c4d3a58c7a2b91985334d7260d3cf5fff2419aeb6324cb3530d8f86d65378864f4def35ca20101ff6c2f4c31bffc3c515cec5e55c569067ea6aeae37ed4f945b91fb6f04d9702c9c713582fb60816208557e4e10538bb721e05294859d62b6025dd1ca108a274873f34b3dfdc9d69c264f34d984d9bab82d4e3625041c6d36b67ebf6e4740da6cbd37494a9df0b6a4ffd9fa4bc8ee5aa4265734f554bacdb90bed46f5ac07c4b025b222c8f88dfc4f92ebb1199887e53473154641b24ad68f39b7b25aad825b941b", 0xc9, 0x0, 0x0, 0x0, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x7, r4, &(0x7f0000001280), 0x0, 0x1, 0x0, 0x2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000001300)="8519431b623255998405b6ca4a3811ebbbc5c0e749a4277b85e3285365a380bb5c9b078f0c910b5a6c9da55d326762992b8fd3f6ba36b0564d0a16e2658cf7c23ff3435b08e80cfe9b795772fc52eb0a09fd5da8be7c75c48528d488a0e0af391aca5da1783cf7e0e36934dd5f8604ab42e74b12eba4126c14664a96aa34d85d7ad1cd25860f5927dab3aee86524cbc6efd2db37e0e24bf1b91228286b576fdd2abf73637996aa0d03afb5368f2db753704cbcc091bb917596d7a212a2aee7c537bdb6d48c5084b5825f64f216672bc9357c28dad74f1e91aeffa91fd561311b23480543734a01b431f3cbe6e39d2e0e70c5c89dbf9766", 0xf7, 0x5, 0x0, 0x1, r5}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001440)="fdc5c02eb6c9c708ed9f0baca67119db4e5d9079dc4e42e3c1f0a68491fced9051536820a759d390d71df5e096298589e44a8888f66dd5c414c9e5e455b7054d90ac0e3ca7d191b9e85d532a6a46e1664836bb2868915511ef91aa70c1ca6553e06235fdd88c7ed1bd04", 0x6a, 0x6, 0x0, 0x0, r3}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x5, r6, &(0x7f0000001540)="4bd12b013119ef33e298952d16cdcab3e196c71b8db93f8cd0c90665f58f61fb92e372acd437347930ac87104c9f80845d21f773725d74b169813cc23b202235d29f732d6488d7c073257285a8c55ea026e045e0c55c93711513a3b89d871c167e29e95d8d34fd89457c47513cd12ffb3612412d424b392327b9ddbfaf84f7f888639fee0883cf", 0x87, 0x9, 0x0, 0x1}])
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x10000000007, 0x6}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x8, r3, 0x4)
r7 = getpgrp(0x0)
process_vm_writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0)
sched_getaffinity(r7, 0x8, &(0x7f0000000300))
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000034c0)='htcp\x00', 0x5)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2654.998458] Bluetooth: hci1: command 0x0406 tx timeout
[ 2655.062401] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2655.063426] Bluetooth: hci4: command 0x0406 tx timeout
[ 2655.064464] Bluetooth: hci7: command 0x0c1a tx timeout
22:54:07 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
pread64(r3, &(0x7f0000001680)=""/169, 0xa9, 0x10000)
r4 = syz_open_dev$rtc(&(0x7f0000001240), 0x3, 0x40)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001740)=ANY=[@ANYRES64=0x0, @ANYBLOB="e504000000000000e2000000000000007f00e0ffffff000000000000000000000000802d000000000100000004000000080000000000000000f0ff00000000c8f1ffffffffffff0400000000000000870000000000000008000000000000000000000000000000a03ba9c52775802335f317408912953f215fa8fd5317e15689e222a6784a94fb8858a8097b6963194551f9863a8bbc19fea7e72d4703b416000000"])
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001500), 0x220a00, 0x0)
io_submit(0x0, 0x5, &(0x7f0000001640)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0xd, 0x0, r3, &(0x7f0000001100)="96c4d3a58c7a2b91985334d7260d3cf5fff2419aeb6324cb3530d8f86d65378864f4def35ca20101ff6c2f4c31bffc3c515cec5e55c569067ea6aeae37ed4f945b91fb6f04d9702c9c713582fb60816208557e4e10538bb721e05294859d62b6025dd1ca108a274873f34b3dfdc9d69c264f34d984d9bab82d4e3625041c6d36b67ebf6e4740da6cbd37494a9df0b6a4ffd9fa4bc8ee5aa4265734f554bacdb90bed46f5ac07c4b025b222c8f88dfc4f92ebb1199887e53473154641b24ad68f39b7b25aad825b941b", 0xc9, 0x0, 0x0, 0x0, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x7, r4, &(0x7f0000001280), 0x0, 0x1, 0x0, 0x2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000001300)="8519431b623255998405b6ca4a3811ebbbc5c0e749a4277b85e3285365a380bb5c9b078f0c910b5a6c9da55d326762992b8fd3f6ba36b0564d0a16e2658cf7c23ff3435b08e80cfe9b795772fc52eb0a09fd5da8be7c75c48528d488a0e0af391aca5da1783cf7e0e36934dd5f8604ab42e74b12eba4126c14664a96aa34d85d7ad1cd25860f5927dab3aee86524cbc6efd2db37e0e24bf1b91228286b576fdd2abf73637996aa0d03afb5368f2db753704cbcc091bb917596d7a212a2aee7c537bdb6d48c5084b5825f64f216672bc9357c28dad74f1e91aeffa91fd561311b23480543734a01b431f3cbe6e39d2e0e70c5c89dbf9766", 0xf7, 0x5, 0x0, 0x1, r5}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001440)="fdc5c02eb6c9c708ed9f0baca67119db4e5d9079dc4e42e3c1f0a68491fced9051536820a759d390d71df5e096298589e44a8888f66dd5c414c9e5e455b7054d90ac0e3ca7d191b9e85d532a6a46e1664836bb2868915511ef91aa70c1ca6553e06235fdd88c7ed1bd04", 0x6a, 0x6, 0x0, 0x0, r3}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x5, r6, &(0x7f0000001540)="4bd12b013119ef33e298952d16cdcab3e196c71b8db93f8cd0c90665f58f61fb92e372acd437347930ac87104c9f80845d21f773725d74b169813cc23b202235d29f732d6488d7c073257285a8c55ea026e045e0c55c93711513a3b89d871c167e29e95d8d34fd89457c47513cd12ffb3612412d424b392327b9ddbfaf84f7f888639fee0883cf", 0x87, 0x9, 0x0, 0x1}])
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x10000000007, 0x6}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x8, r3, 0x4)
r7 = getpgrp(0x0)
process_vm_writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0)
sched_getaffinity(r7, 0x8, &(0x7f0000000300))
r8 = fork()
r9 = fork()
kcmp(r8, r9, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000034c0)='htcp\x00', 0x5)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

22:54:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x2403, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:54:07 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:07 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xffffff7f00000000}}}}, 0xc0}}, 0x0)

22:54:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:07 executing program 1:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'wlan0\x00'})

22:54:07 executing program 2:
mlockall(0x2)
mlockall(0x0)
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000100)=0x40, 0x8001, 0x3)
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000)

22:54:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xffffe000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2666.408711] loop6: detected capacity change from 0 to 140
[ 2666.446733] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 2666.448192] EXT4-fs (loop6): group descriptors corrupted!
22:54:07 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x144, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0x26, 0x0, 0x0, @ipv6=@remote}, @generic="9df3d2ae3f634125a8277d1e84a2221f49fd0ef39431ea9a10505d3e212509a2d880d92fb59990a828a54892eba7a24f4a48414cf1960161048ce9d790568065b9eae3b4b1a943860149f6212bc311aba9f0b7089a45e2662b248e2915b01d7b4a0f268cceabb4b96e7620881ee26dfe4f7cb0a5e29722fabaa9c3ebad2dbce8868d36cb04ca5770fb79ebf28a7af960075fb6e15f733a0f0e86a2b61dd333fcd390865e96ba347f41db83783a3d0bdec3fdb86a9a2a1a535183b1c7a7fda2c96accd7276b3050cb69faa400d9b7217cdabae0c4f841ad2d7cbf4a85be2f40080cb45a35fa69", @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r0}, @typed={0x13, 0x4e, 0x0, 0x0, @str='(.\xf8%@&[\xba}/-@^^\x00'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x5}, @typed={0xa, 0x77, 0x0, 0x0, @str='wlan1\x00'}]}, 0x144}, {&(0x7f00000003c0)={0x278, 0x33, 0x224, 0x70bd2c, 0x25dfdbfd, "", [@generic="b81a8a1a926043a1ab3347bb66ff739f170eb53ccda937d881ed96e96336571ba92e1ce78b54d9ab6c375ecc996233171331bca3c93341d2ccc9da8e1f9ad32040c3cd902a6a199e157d3940173d1bc28b415b42a015a4ca3fb0fac3597ca1327efb55242087cf86c4fe0bc623f28798ed09b6a2b7b3bb43eca2d0d7dda826576ec240d7", @generic="9c4b5175c00012ee487a788daa1bcf57b5f552107104bd1a9acc2a7b08958b091c316195dfd30cac22c33b209c5d95a0d61c1b909e5a", @generic="46a6c79b9e18901e0cfc30bf62a3f2cdf826551d3fbb7f372c8e25a3ab08afe241bca8d0d505fdc7b0be671ab015e18f2c4520e5e7f53290eb2ff2a380a405d076bf0ef1a73de52214ef279eff0cbe675c49700b7f4c4a27565ddc8a42674869c043d2c7e7769aefe01c3278508f5be644b2df3962d663ff383ae31285", @generic="a031132aa119aff177af61fd88d944970bedf18a78b0f74f6a194791b112b607b516bb54a2a7745aab9e2435d3680243e89bcf8920f31855e55bb93f4665ce0b102846c2817bb073ae86cceb2b2e2bd71f15bf", @generic="b90ec3b782c58c6a0d9349532fae27f5893779ed94be9e817d64208a5abc10a24063512cca7bb5f65e6630f5143aabd87d6402136805816e7322f43621824e8dd820469c137a0ab20a97daf02fe4faa73c7721331ba017b9769d188d5d394f03c02e89f63be6e4a68effd0d28db1ceb4f07b8ce61e84f56d0990135f5aa27979f7df5301bf4d2cccb351bc50a18f97e4ca9ae9b8e33d13a78a806e6ef98dc7a033c32410313709827d7fe120f7fdeb1992de584b135f720decadbaef8a06c683e1ad82144d682f065dfcb1960883eabc51a383b2d5ae9024b1cd156b"]}, 0x278}, {&(0x7f0000000800)=ANY=[@ANYBLOB="680000001600000229bd7000fedbdf256c9beca5e94cba7bce8bfdf79902a72d98d4a595cfc3ccdec9e774b1ee3a3fb3fb6075af7a43e02905625cf3ee6d3d8e4c6f19f812f52f6eaef09216b0daeaf6a1e797cced661c6a06d2ea45ada8c5e2e5340e936f84292371bb5c138cf80800870001ffffff00"], 0x68}, {&(0x7f0000000640)={0x148, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x1b, 0x0, 0x0, @u32=0x80000001}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r0}, @typed={0xa, 0x1c, 0x0, 0x0, @str='wlan1\x00'}, @nested={0x10e, 0x3e, 0x0, 0x1, [@generic="43aba6f69caab24c74ee6eba4522a287d035e4a701603c1715d98e7211e7333aff98c95f127abbd816c811c85e523ee53140", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@local}, @typed={0xce, 0x8b, 0x0, 0x0, @binary="965a5a8c771e9a4409e5e8d38ea9abb8aee2af8ffa387638266c680baa84563d839c9730ffcf6e5b350e601b9c3a533c489e75b6a919489edacaf1d3be1674d980e4f7a417af6f2992eddaf381e87d998b44d83f16c3403d89d71e5ef043a1db9675ce2250a69506bc721e5a9a8b0551f7f9474e2c1ac3c4d48d1ffe2106e64aa0df86575d49859329de9feffecbd3fbb6749ca7f66989868d3c2b43af7348bc5fa25a9a508ed254f3f1dabd720f88dceae17c52b3d593e39837642cd0e4010d08f1c2c76a59ac3a8bf9"}]}, @generic="e7b1396b9bcfce5fe49d"]}, 0x148}, {&(0x7f0000000280)={0x18, 0x28, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x24, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x5, 0x0, 0x0, 0x48001}, 0x1)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x68, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

22:54:07 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0xfffffffffffff000}}}}, 0xc0}}, 0x0)

22:54:07 executing program 2:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x0)

22:54:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xffffff7f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:54:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2666.635507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2666.652981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
22:54:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x3f00, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2666.684778] audit: type=1400 audit(1759100047.965:26): avc:  denied  { watch_reads } for  pid=19104 comm="syz-executor.2" path="/syzkaller-testdir605586159/syzkaller.53VhIV/192/file0" dev="hugetlbfs" ino=53361 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir permissive=1
[ 2666.772182] loop6: detected capacity change from 0 to 140
22:54:08 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2666.821991] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 2666.823443] EXT4-fs (loop6): group descriptors corrupted!
22:54:20 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x14, 0x13, 0x3, 0x0, [{@loopback}, {@broadcast}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W'}}}}}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000200)={@remote, @broadcast, @val={@val={0x9100, 0x5, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "1c147206d048eb21"}}}}, 0x0)
syz_emit_ethernet(0x11d, &(0x7f0000000080)={@multicast, @remote, @val={@val={0x9100, 0x6, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x2, 0x4, 0x107, 0x66, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp={0x44, 0x14, 0xad, 0x0, 0x9, [0x6, 0x3, 0x1, 0x10000000]}, @noop, @end, @end, @ssrr={0x89, 0x17, 0xa, [@broadcast, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x8, "a537db32bbaa"}, @timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0xb, [{@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@multicast1, 0xac}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010100, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @loopback, {0x1f, 0x4, 0x1, 0x5, 0x3, 0x68, 0x4d, 0x1, 0x62, 0x6, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x64, 0x0, 0xd, [0xfffffff7, 0x0, 0x3, 0x2, 0xbdb, 0x8, 0x5]}, @timestamp_addr={0x44, 0x14, 0x8e, 0x1, 0x5, [{@remote, 0x6}, {@empty, 0x1000}]}, @lsrr={0x83, 0x2b, 0xb1, [@local, @loopback, @loopback, @multicast2, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @remote, @private=0xa010101]}, @noop, @noop]}}, "a2165be7c080e1"}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0xd09, 0xae6, 0xba, 0xce9]})

22:54:20 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0xfffffffa, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

22:54:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x9000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:20 executing program 3:
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x205, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x3f, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x100000001}, 0x8, [0x0]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'})
ioctl$TUNSETOWNER(r0, 0x400454cb, 0x0)

22:54:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:54:20 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:54:20 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x3}}}}, 0xc0}}, 0x0)

[ 2678.997392] loop6: detected capacity change from 0 to 140
[ 2679.022177] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2679.023150] EXT4-fs (loop6): group descriptors corrupted!
22:54:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:20 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x4}}}}, 0xc0}}, 0x0)

[ 2679.097976] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2679.098708] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:54:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth0_to_bond\x00'})
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001000010000000000000000000c00000003000000000000000c00008008002100", @ANYRES32=0x0, @ANYBLOB="9ceb9e2e05706cfeca5e06f032ef5ef47d13e19689da5e1b6794e9c559e6dbcae8c9d01cbb867460fa4de31189443e7592f408f0000000000000000000"], 0x28}], 0x1}, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x402003, 0x30)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x8040, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
io_submit(0x0, 0x7, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000100)="109c270456beb1b0f6f726dc94f19223c210c2706d58c47bbab47c8e2e2b047b0a47b4db4a4867da9d69254d406306f0707aae43e2a7292ecb5dffe08aa3a9523f0d292fb62b38a1966836af4be3bfe811240873d3fde556e3b5b75bdc3b0eafff21b5aecc2df27fb99a24146efac07a8e1ca710fedee66285dd781182a2", 0x7e, 0x6, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f00000001c0)="7571bb0d5caea785d999fc400fc6c434c9a3b0b71d912e6444f456ca017172e55d9fa1aa14ae32e6b0feecfacac7de45b65958764ca5089100532943ceae4b492e49b21928be442b83aec276f3bde7160e314095d496dfaef3abdd03269acc1046d8abc03e11cd1ba8c3d2c1d98be806cad4f66e332b05a1cc390fdd4f90caa39878dde574217fb952822d881e40a767f0532889322ecf9d8cdeb530810b8ce6cd4db83be4cde68018b87f37f2ea70085415ebde9acac5cd21e9b29b194696354738b33f54c227ebee19f3c7b3ba93fef32011f3abf90c7d5e94f743201da4778ed17fc0f0dddea28c", 0xe9, 0x2, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffa, r0, &(0x7f00000003c0)="6acd4ef420b11398df95a8775a4c8fa8a3c870b8de255209e3d3bfea0c490709cee3d242cee6e38da8dc06d61abb3c4347c132c0f8ddf68fcb697520c4f469024f44c8c724cea35fc5c2da0614b469dab5dbe10bcd88729e876bbc9d74aa54855d274c095cae491363ed1ec70e5ab93c42138b38cad7670734f4f98d58a6c67abeffbc19c9c5ab62e316bf", 0x8b, 0xffff, 0x0, 0x4, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x20, r4, &(0x7f0000000480)="d408ab7219f17f98afc1e9ca61f3f99c6b909ac45e8169a07123165a5d927045a01d12eb9a1d02f1f006e631809829b5eabb5863615a3544d93ccf42fb069378d04a7d9226796cb17f757d2bdd545de3c0e1c8f953056230a9c60920ab0c66a04e2b91026088f424b33d6bec8fc8c72aab21777444019415eb1682b1ff791f2b350d19f5776649346df921a8cdabed56046cb3d2e2f25ef4ae763bc8c5ee7a31eb5bc7e81b8b4669fb05e68e062dfa76f740", 0xb2, 0x4, 0x0, 0x3, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f00000005c0)="e02f134e2c2fc6fac41404e5e6a02b43f64b595f666ade1d09088160ca1024fdd30de05911603402d928e5d4cc84c5a456b051b80d42730cc5c45a811e8b5e1bc414a045fe1827d61a5cb557b69b8fc03246a91f77f3294c44", 0x59, 0x502, 0x0, 0x5, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xfffd, r8, &(0x7f0000000700)="c6bdbc697ec3cedf7605586dc1b485a42555a61e13b55ca36c796a767f6ceee194ecd7f9572b670d0b5078a9c07ad8519f95988281d7e9df64454e1cb2aa770a8417b3b38f73a789db92ddee8150e3dc7e6549797b037396d61564e605dc1f5686582ff95ffdb9bd69b7cc8f28a66265a0ed85963d97f84c2241ae1067f5c25fcfd84a6e769a7b0cbbb4fbb4ae79f783708362535da914ea8ca374da48237555a291c41bf7835fb9d880cf52fdc3", 0xae, 0x100000000, 0x0, 0x3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x8000, r9, &(0x7f00000007c0)="edd3efe137121c0a1fc0396993ef28b49baa558609bb57150ffaa3ebb9a89a2e7626b7a2da2d3f45cc8ecefdde26fc3d4e10ed2e401d7fb003121c6ae1bf6aea29d3675ada88ee8dfb76a82f79596a", 0x4f, 0xfffffffffffffff7, 0x0, 0x1, r10}])

22:54:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2679.123611] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2679.126333] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2679.201271] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[ 2679.223663] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2679.225499] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[ 2679.232724] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2679.237190] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2679.240727] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2681.174434] Bluetooth: hci1: command 0x0406 tx timeout
[ 2681.240333] Bluetooth: hci4: command 0x0406 tx timeout
[ 2681.241396] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2681.302405] Bluetooth: hci6: command 0x0c1a tx timeout
22:54:29 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xe0ffff00000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:54:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x8}}}}, 0xc0}}, 0x0)

22:54:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24800, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000740)=0x2)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r5=>0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x8b)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="d3", 0x1}])
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r2, @ANYBLOB="691fffff009978002e2f66696c653100"])
io_submit(r5, 0x4, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x3, r6, &(0x7f0000000280)="6bfb451fa6b7ea7c9d80515b4374f2d72a1b19a366de743ed71ff4a3a2a8e437d72b8cbdaa83b840df994a80ac887ab58105bfdbc54803f41b9a2c2fedb3b07ba0b10f85b5dee4b316c1a6f9af67be64cbd65399f125aed3b4a754158509337bfd3e5d2dc3ec543ae35e5ba49c26bde3d0ee1bbbb2184e7661faf9db5fa4c93818591a954705c58a2b37870fcea7d1ed34fa425ee47daa0aebad1d00a91ee07826f3d0cfd712f2898e1b02098552beadf9b028079a0d19e5e0db08f8aa68da1f3828cd9221e1b436281a11e2b2789da22e779ec0bdd3342d62364999f94b065e945c677cb7fa", 0xe6, 0x20, 0x0, 0x3, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r7, &(0x7f0000000380)="eabefdfbbd3da567652c69a01ea8889000b6ebbcb456ed211d5e95b169f53f5cdb01916ba67dc16d2bd4169ff2e6d966bf1aadd8ebb863cbedcd583e72c648d2ba4da8087faec102b0044407b4c18686d5f0860d7ad3c12f5a662a35b44e4efc6262917b16438cc51a0fe85bebab5636e6ae8aa84d78df7bddae2e6935ffdc0b0eeefb401782ec72e28086ac38d000433e091c15ad9ac0118fe50f9070606168ddbd77284385cb9a67e5213c511781ba238e56a4ec0c", 0xb6, 0xffffffff}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x5, r8, &(0x7f00000004c0)="2746002150f6cba341120ddf241edf3826e1e709593866402196de37e0a4f96fe3d9a6ed01f8aa02139077eb0124847439fed3011bca26e815ce00fba7ac16a625e752f56d77adcd204fbfdeaed3390dc03414ca5e39ddc508b565bd25e58dd1235f100d740f29ee64c82415911cfa57d9dc1b536b237bf299a57a79922ef2b1abecbc1811adeef42ee847e30f1af6ccc49285f5d5305ee0c6f163159c3d58c818918a62640c4ee8169db2089e63fe7b4ec3c57c72ac5b0c85a797538f26492898ff6fbca9fbe4aa44c0c382599ee52655bab62298398bc8787cb4feedfb6d24254eeb2789833d46b0b41ff91f0c4f040c900a", 0xf3, 0x8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000600)="5d10b1841c1a06898cf8ff714eae7a2b3aec9c693ba7c1ea58419c9d5b7866aad52dd7644ada11e44d2be20995654fb91697b5db01555ab036c37e0098da32b8ffa686965d67d5de767d860b43a3a5ed3efb6754ded7c2e0b2af45a53d22b6a2e3e5eca44f8721114e5aa0be3f0885f489cb0482995c65354784dfd3c84b51c97ba32d5109e9d94eb598b839ef669c94c7163847860b10ee87f5bc93065ee2a1d6d396bad0eb5a101d11bf7efec70a83266de1925b971e6109fa0b", 0xbb, 0xbb3, 0x0, 0x1}])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x420, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8001, 0x2}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f00000000c0))

22:54:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0x9effffff, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:29 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:29 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0xd)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0xff, 0xff, 0x4, 0x0, 0x2, 0x48640, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0xa8, 0x0, 0x7fffffff, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xd, r1, 0x1)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa)

22:54:29 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x94c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:54:29 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x10)
write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6)
write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x6)

[ 2688.535558] loop6: detected capacity change from 0 to 140
[ 2688.538150] pci 0000:00:02.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 2688.545089] Bluetooth: MGMT ver 1.23
[ 2688.556910] pci 0000:00:02.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 2688.561915] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2688.563617] EXT4-fs (loop6): group descriptors corrupted!
22:54:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x9}}}}, 0xc0}}, 0x0)

[ 2688.624933] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2688.638066] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2688.646092] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:54:29 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xd8030000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2688.669657] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:54:30 executing program 1:
r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x180000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='A\x99\xa9\x96\xaf\xdd\vj', 0x0)
fsmount(r0, 0x1, 0x1)

22:54:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x95c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2688.750736] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2688.759671] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2688.765474] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2688.771053] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:54:30 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:54:30 executing program 3:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000005908bab9a000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8)
write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:insmod_exec_t:s0\x00', 0x23)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:mnt_t:s0\x00', 0x1b)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
copy_file_range(r4, 0xfffffffffffffffe, r3, 0x0, 0x3, 0x0)

22:54:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2688.876714] loop6: detected capacity change from 0 to 140
22:54:30 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xa}}}}, 0xc0}}, 0x0)

[ 2688.909188] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2688.910651] EXT4-fs (loop6): group descriptors corrupted!
22:54:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x100000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:54:30 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xf0ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2689.139478] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2689.140688] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2689.141876] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2689.143883] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2689.203584] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2689.223616] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2689.224699] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2689.228641] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2691.158423] Bluetooth: hci1: command 0x0406 tx timeout
[ 2691.286403] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2691.287433] Bluetooth: hci4: command 0x0406 tx timeout
[ 2691.288469] Bluetooth: hci7: command 0x0c1a tx timeout
22:54:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x96c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:54:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

22:54:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf}}}}, 0xc0}}, 0x0)

22:54:43 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)="dfd95b6298fe31face7ffd611e616079b138b77f171db9254e0055ff03dbc302ade554e2f815e9d31677975c8af1f0250920992ca035e8d17bb355fde1045fa0169861fdee804e01a97027e826457d3de9abbafc58a944a6f293ebe4c7c8a12b739bd0a9db")
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x1000000)

22:54:43 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:43 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:54:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2702.028162] loop6: detected capacity change from 0 to 140
[ 2702.051729] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2702.053386] EXT4-fs (loop6): group descriptors corrupted!
22:54:43 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

[ 2702.157549] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:54:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

22:54:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf0}}}}, 0xc0}}, 0x0)

22:54:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x97c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2702.165698] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2702.176319] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2702.177410] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:54:43 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:43 executing program 1:
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb21f964b113cf65f8be4ab1ffff7a92e32de576970308a41f0dd6c2cf47288f88da072b3989dd60824666d7d422066babf7b18568e9d6b769035828c4690bca329e7b3c82486aad43c24f13dd8bd950fd2500000000000000000000000a2b94ff5d451bceb590988008fcd8425fcc8355666d750226b9958bb807421e60494c15f36d22bf9904fc76b88ec71d89f70ada9d11a839c6e9f1a1a2722e486dee5411c117767e43e3783778efa51df476881676185dc4f127b7ffb3b8b234ddd76cfd7f6519b3278168909a8c3b0a9a9a9fce3e65f6675172e5fce4d99a9a"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00'})
close(r0)

22:54:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2702.250991] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2702.254251] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2702.255951] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2702.259165] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:54:43 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:54:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2702.356916] loop6: detected capacity change from 0 to 140
[ 2702.373529] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2702.374744] EXT4-fs (loop6): group descriptors corrupted!
22:54:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = mq_open(&(0x7f0000000240)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0)
r2 = dup2(r1, r1)
mq_timedsend(r2, 0x0, 0x2000, 0x0, &(0x7f0000000000))

22:54:43 executing program 2:

22:54:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x107}}}}, 0xc0}}, 0x0)

22:54:43 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xffffff9e, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)

22:54:43 executing program 2:

[ 2702.550504] loop6: detected capacity change from 0 to 140
[ 2702.564476] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[ 2702.565221] EXT4-fs (loop6): group descriptors corrupted!
[ 2702.588025] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2702.589241] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2702.602029] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2702.602401] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2702.666021] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2702.669690] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2702.678718] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2702.690691] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2704.662352] Bluetooth: hci1: command 0x0406 tx timeout
[ 2704.726485] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2704.727118] Bluetooth: hci4: command 0x0406 tx timeout
[ 2704.727793] Bluetooth: hci7: command 0x0c1a tx timeout
22:54:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x98c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:54:55 executing program 2:

22:54:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:54:55 executing program 1:
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6)

22:54:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:54:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x300}}}}, 0xc0}}, 0x0)

22:54:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:54:55 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7f, 0xe1, 0xdc, 0x0, 0x6, 0x120, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0xffff}, 0x8, 0x1, 0x1, 0x0, 0xfff, 0x5, 0xa10d, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r0, 0x1)
r1 = dup(0xffffffffffffffff)
write(r1, &(0x7f0000000240)="fa7ddd751f5303c71a1544f64f06ded50cbe6d44701cb1e5db5a838d3151676255d64249c3087e56fa913bf731d9ea0debdd1c03f9524148ae925c9f46839314409d33e63f23836ab0088adac8536a7200f6bb0c97886bf617f8aa422330d082f6a1861dc99226175533be0c56a44473e718465eec4bf49dc458de5a7546839b2e1eaf2d297ca2eb5508eedea88b062bce87accb15ae0279d17cc4dc6543285ad1de7fda1983c5dff53dcb25", 0xac)

22:54:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x701}}}}, 0xc0}}, 0x0)

22:54:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2714.268162] loop6: detected capacity change from 0 to 140
[ 2714.278735] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2714.280185] EXT4-fs (loop6): group descriptors corrupted!
22:54:55 executing program 2:
syz_emit_vhci(0x0, 0x0)

[ 2714.323481] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2714.345612] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2714.364899] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2714.383338] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2714.454743] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2714.455556] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2714.456168] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2714.456999] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2716.438454] Bluetooth: hci1: command 0x0406 tx timeout
[ 2716.502407] Bluetooth: hci4: command 0x0406 tx timeout
[ 2716.503474] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2716.504520] Bluetooth: hci7: command 0x0c1a tx timeout
22:55:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x500000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:06 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
io_setup(0x3, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
dup2(r0, r3)
io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0xfffffeb9}])

22:55:06 executing program 2:
syz_emit_vhci(0x0, 0x0)

22:55:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x900}}}}, 0xc0}}, 0x0)

22:55:06 executing program 3:
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
syz_open_pts(r1, 0x2c2803)

22:55:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x99c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2725.317971] loop6: detected capacity change from 0 to 140
[ 2725.338049] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2725.338081] EXT4-fs (loop6): group descriptors corrupted!
[ 2725.393896] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:55:06 executing program 2:
syz_emit_vhci(0x0, 0x0)

[ 2725.401455] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2725.406359] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2725.423199] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:55:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xa00}}}}, 0xc0}}, 0x0)

22:55:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400008509c75f9f09c75f9f09c75f0000000000000300020000091bbab7aba5e997e50bf4", 0x4a, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])
sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@phonet={0x23, 0xff, 0x9, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="9d1ecb6698", 0x5}, {&(0x7f0000000280)="41d01e1f58e2c99064d8b02ce2c263c27c01e0d05d58b2657ce1fd849398bdaf5a410e0899dd17fbaa36a94be1e4dc986b5d25e2dfe9869a7571e633d3ed9533ac28c7cfb96938a0d13ea3d331b7e1fb2f467f18a66786ed95fd2d4d09ce1c2e40007a03984d621b5601048fce53bf41f196367c6f4ebb6f6215da2000"/137, 0x89}, {&(0x7f0000000340)="f48430d96ccda5b814c994b65cbe45e9d53d622e101adcdc097d055c6f7686cd8a5d783a53bc88e89fc5c18e91669653d0c3a87311e8ab48dc44299cf0eea78a2d92b68bc6e0cfb33c6db1c9431b71c3ff82485c8976ad5297d994aaee4212991daeb21997cb4d8c1cc6730a842376930a7c7ae6005d6a4acfdea03399bdfb905c8ab29c193994232dde114842e713d87453d005d5cbabb1e1a353c16e0452c99e62e454fc7ec00c6d95dac385c81372e04bebdc685d65af322158e37b174d1fffff4c2093de463f968c8b5a5c13fa5914df1495b8a533ce45039527e160d9ac0f53b41d00912164f4d09c4e5c2da6c74d07b071eea6", 0xf6}], 0x3, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x904}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0xf0}, 0x10)
open$dir(&(0x7f0000000040)='./mnt\x00', 0x4100, 0x1)

22:55:06 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r1=>0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0xfa, 0x1, 0x80, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1e83d, 0x2924, 0xffff, 0x7, 0x1ff, 0x4, 0x1, 0x0, 0xc86a, 0x0, 0x4}, r1, 0x5, r0, 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)

[ 2725.509603] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2725.513849] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2725.519300] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2725.522245] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:55:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2725.562698] loop3: detected capacity change from 0 to 140
[ 2725.585569] EXT4-fs error (device loop3): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.3: invalid block
[ 2725.591070] EXT4-fs (loop3): get root inode failed
[ 2725.592105] EXT4-fs (loop3): mount failed
[ 2725.621595] loop3: detected capacity change from 0 to 140
22:55:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9ac9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x600000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2725.639047] EXT4-fs error (device loop3): __ext4_iget:5435: inode #2: block 62475: comm syz-executor.3: invalid block
[ 2725.642539] EXT4-fs (loop3): get root inode failed
[ 2725.643177] EXT4-fs (loop3): mount failed
[ 2725.643948] loop6: detected capacity change from 0 to 140
[ 2725.684778] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 2725.686630] EXT4-fs (loop6): group descriptors corrupted!
22:55:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf00}}}}, 0xc0}}, 0x0)

[ 2725.803194] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2725.806161] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2725.814162] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2725.819670] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2725.888848] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2725.892731] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2725.897889] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2725.901877] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2727.894411] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2727.894827] Bluetooth: hci1: command 0x0406 tx timeout
[ 2727.958366] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2727.958397] Bluetooth: hci4: command 0x0406 tx timeout
22:55:20 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x700000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9bc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:20 executing program 3:
syz_mount_image$tmpfs(0x0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='perf_event'}, {@release_agent={'release_agent', 0x3d, './file0'}}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000008c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/237, 0xed}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/80, 0x50}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000dc0)=""/43, 0x2b}], 0x3}}, {{&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/119, 0x77}, {&(0x7f0000000f40)=""/89, 0x59}], 0x2, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r0=>0x0}}}], 0x40}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/116, 0x74}, {&(0x7f0000001180)=""/56, 0x38}, {&(0x7f00000011c0)=""/27, 0x1b}, {&(0x7f0000001200)=""/24, 0x18}], 0x5, &(0x7f00000012c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x12060, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40000000, 0x6, &(0x7f0000000700)=[{&(0x7f00000001c0)="b042701c535c7f4c99fc6e39bfb5dbd8960eee8b7927f1c204b67205c8d3cc854c77a95c4d868c34042c32759fd6ab27710f67df80e0afa5b9d67c40bcb66dcd1a44ce0a8d5dd418291db15c34c23393b9043dcd880f66378bb1d469be2d211eb2036e27f501477ee51728888df0b1fe9e22601def320c3fdd1b77a2919698769126f7681209dee56c44cc020e5e0e99bb420ccc4684057887ab29635a5a1f04b16f3616f87f1e8d8f076720d67c1f48283e3e2ba99066f06d6beb166efd1e53da81a246faa85b50ab6f5d7c5b9493cffa6facca151f6229fd8d0b744eae2287d256bbd9c2a3be2fe5b5b1", 0xeb, 0x8}, {&(0x7f00000002c0)="1d277434fa7dd8ececd97550e41ae220daf81e71e860c6a93e4d075684d7f42e47cc8ccae24cd6f774a98c7c3dc4775ccf7d1ddfbd4592c85ee617b07e146290a0454c3b2e176297e3be3b7fa55e64dfc130239b5172a53c1ed9c93363c065f4d978f9cf6f6e35d7cfcbf4ff0fbfb080774852ac86f942072bba691c986cee90a4a2c1b3fdd7db6fc9c5a1c785d52c7c33a95fd746e5b430eb7c785d414a573479b9d7165ca883cf2920ff8c1f1b06501dcf510f987759d39705cbb8bfcf36d2c71a920fcc3d8d8e5387b3b4c25edfb5c99887bd8bbf044d8080ce1431ec99dd16ca275b810860", 0xe7, 0x9}, {&(0x7f00000003c0)="c4cb0bfb2743c52976043e7c63f43d26f5244f8013e69b5a39e0a94eb78da8d5c0b65edaa0ce6eb940268a308f8f8a937e8547529c8d202877c3eb2d7950625e8692f65d6099993057d1428a7db0333d7e4c8fa5e98c84815fde1709a44fb2041caee4f969d41f95d362a065fd9d4dfda5a5a174d49a8bbd4dc3325a81c41e1402d5112cd4781c096aa4118e80d0d7a6ce9f0bf16f436e8bafb40df38d35a1e4e397ecf1294de802040de5699b4deff7e4935cb3890e7cffbb3170a833e62b5c8e253e0616ac2f85c5352b5de33220d81f441da5deb74723292d3d5633edd672d2a5fabd1cda8db155b517e17865b3608040d2b9cb93fd68", 0xf8, 0x3}, {&(0x7f00000004c0)="c213904629d30640ee4c2d0131da8b85703bd097527f2cbc4dd5a06898d683f9ee952b3b47ff31732a61a0007fcad7d6d013fee1086a07bfdc252c3cf92eade3641421cb42fbf7decc97d54046c10d205dce335c0c7cc3c396bd624691399f38059339265249a8bc69361160e223b14324ec3ad5582e6452f781c03c15b6e1b8301e809dbfe5bdfa51668c", 0x8b, 0x20}, {&(0x7f0000000580)="9ef6b7c5f300de4d9e0abe944f039d1c29d12c8801530e9b25a40c4a037584dd392c57654b99e7cc21e841ab53d6a5c47f4fdb80223cd90a3adc96a69050679e37d6851a645d9400205cf3f2d158978c6f5264b1892b54e8a672cb59c5027648bb7119b168211f7ab9a8fd3adfddb4ea31901178b199c7f9686e57b1e2f68d4a1e402faec4be764e00bef9a68cc158a0e96118a415216ca63450965230c15c45ce56", 0xa2, 0x1}, {&(0x7f0000000640)="338c35b686dd9669c5f6c6c32aa5ac0b0e5f9a7c422bebf39d7dff3fcaba51bd337705e528d92e845042ec3a9afcdea98676c62d2ae2b93938e402f54adf5f186fcb8703db4b1476269c1d921e0cf1cba5407436b565d33a4d06e5721552b98a8b136423a539a8023790e71cc44368cb4f3efb129c934306b555aee8df6a184074571167b2597e460d4ced38ad394dc9be363e51f9771a9819db98cee56f348cfffbaaa965629473aff38f85096e2380f03499", 0xb3, 0x3}], 0x1000000, &(0x7f0000001400)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x74]}}, {@huge_never}, {@huge_advise}, {@gid={'gid', 0x3d, r0}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, 'perf_event'}}, {@uid_lt={'uid<', r1}}]})

22:55:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x3, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:20 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x28}], 0x1}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000300)=""/16, 0x10}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/255, 0xff}, {&(0x7f0000001800)=""/198, 0xc6}], 0x8, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40002142)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000002ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001a00)={0x1060, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "4d9fffa98538670574"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "4f607f9953bfbd123aae5ce3c17b"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "2f4849ee"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}]]}, 0x1060}, 0x1, 0x0, 0x0, 0x804}, 0x44)

22:55:20 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf000}}}}, 0xc0}}, 0x0)

[ 2738.960960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2738.977893] loop6: detected capacity change from 0 to 140
[ 2738.989770] cgroup: release_agent respecified
[ 2739.006489] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:55:20 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x4, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2739.024714] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2739.029928] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2739.047331] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 2739.052419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2739.055566] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2739.059653] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2739.130901] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2739.134700] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2739.136987] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2739.140141] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2741.147632] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2741.147670] Bluetooth: hci4: command 0x0406 tx timeout
[ 2741.148625] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2741.149936] Bluetooth: hci1: command 0x0406 tx timeout
[ 2743.190873] Bluetooth: hci7: command 0x0c1a tx timeout
22:55:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xc00000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:30 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x80000}}}}, 0xc0}}, 0x0)

22:55:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9bc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:30 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:30 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9cc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:30 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x8, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:30 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xc9ffff}}}}, 0xc0}}, 0x0)

[ 2749.077015] loop6: detected capacity change from 0 to 140
[ 2749.114874] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:55:30 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x9, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:30 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9dc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:30 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

[ 2749.141310] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2749.142084] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2749.145237] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 2749.158166] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2749.170601] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:55:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2749.239198] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2749.243826] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:55:30 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:30 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xc0}}, 0x0)

[ 2749.247361] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 2749.276795] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2749.277956] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2749.325038] loop6: detected capacity change from 0 to 140
[ 2749.348368] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2751.254449] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2751.254532] Bluetooth: hci1: command 0x0406 tx timeout
[ 2751.318341] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2751.318394] Bluetooth: hci4: command 0x0406 tx timeout
[ 2753.302438] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2755.350418] Bluetooth: hci7: command 0x0c1a tx timeout
22:55:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9ec9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:40 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9bc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:40 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:40 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xf, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:40 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x1000000}}}}, 0xc0}}, 0x0)

22:55:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xd16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:41 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xf0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2759.736136] loop6: detected capacity change from 0 to 140
22:55:41 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

[ 2759.761897] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2759.780478] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2759.781534] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2759.787144] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:55:41 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:41 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x2000000}}}}, 0xc0}}, 0x0)

[ 2759.809186] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:55:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9fc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2759.890987] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2759.905897] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2759.914435] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2759.917905] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:55:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:41 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:41 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x300, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:41 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xf16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:41 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x700000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2760.107076] loop6: detected capacity change from 0 to 140
[ 2760.125755] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2760.226335] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2760.230708] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2760.250953] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2760.256702] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2762.198314] Bluetooth: hci1: command 0x0406 tx timeout
[ 2762.262445] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2762.262553] Bluetooth: hci4: command 0x0406 tx timeout
[ 2762.263066] Bluetooth: hci7: command 0x0c1a tx timeout
22:55:52 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:55:52 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1200000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:55:52 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4402, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x33, 0x9, 0x6, 0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x100, 0x1, 0x6, 0x2, 0x0, 0x0, 0x6, 0x0, 0xc7d0, 0x0, 0x800000008}, 0xffffffffffffffff, 0x9, r1, 0x13)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xf0, 0x6, 0x3, 0x0, 0x0, 0x100, 0x204, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4271df30, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x41020, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x3, 0x0, 0x6, 0x0, 0x8c}, 0x0, 0xd, r0, 0x0)
getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000)
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0)

22:55:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa0c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:55:52 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x3d8, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:55:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x3000000}}}}, 0xc0}}, 0x0)

22:55:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)

[ 2771.522381] loop6: detected capacity change from 0 to 140
[ 2771.537152] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:55:52 executing program 1:
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b002546000006000300000000000000120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20004001)
r0 = socket$inet(0x2, 0x3, 0x26)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7ffd, 0x4)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)

22:55:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:52 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

[ 2771.678793] loop6: detected capacity change from 0 to 140
22:55:52 executing program 3:
syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0)
mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x801, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@mmap}, {@version_9p2000}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@appraise_type}, {@appraise}]}})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x3}, {0x2, 0x0, 0xee01}, {0x2, 0x6, r0}, {0x2, 0x6}], {0x4, 0x1}, [{0x8, 0x4, 0xee00}, {0x8, 0x5, r1}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x4}}, 0x5c, 0x2)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x0)

[ 2771.687416] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2771.705502] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2771.707170] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2771.726793] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:55:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:55:53 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x4000000}}}}, 0xc0}}, 0x0)

22:55:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x900, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2771.750568] 9pnet_fd: p9_fd_create_tcp (19658): problem connecting socket to 127.0.0.1
[ 2771.761145] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2771.763995] 9pnet_fd: p9_fd_create_tcp (19663): problem connecting socket to 127.0.0.1
22:55:53 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

[ 2771.827585] loop6: detected capacity change from 0 to 140
[ 2771.843316] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2771.852539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2771.864483] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2771.870867] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2771.878746] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2773.846368] Bluetooth: hci1: command 0x0406 tx timeout
[ 2773.911033] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2773.911478] Bluetooth: hci4: command 0x0406 tx timeout
[ 2773.911658] Bluetooth: hci7: command 0x0c1a tx timeout
22:56:02 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed, 0xffff, 0x800, 0x8, 0x80}}}}, 0x22)

22:56:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1800000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:02 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:02 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8000, 0x51)
pread64(r0, &(0x7f0000000240)=""/4096, 0x2, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
dup(r1)

22:56:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa1c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:56:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xf00, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x7010000}}}}, 0xc0}}, 0x0)

22:56:02 executing program 3:
r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81000000}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = getpid()
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000))
r5 = getpid()
r6 = pidfd_open(r5, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r6, &(0x7f0000000040)={r1, r4})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e2, 0xe2, 0x5, 0x1, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0xff, 0x81, 0x7, 0x0, 0xfff, 0x18, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x4140, 0x8, 0x1, 0x2, 0xfffffffffffffff9, 0x4, 0x5, 0x0, 0x2, 0x0, 0x43}, r2, 0x10, r7, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3, 0x0, 0x1, 0xa, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x20, 0x1c, 0x7, 0x6, 0x46, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x94}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
close_range(r0, r8, 0x2)

22:56:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:locale_t:s0\x00', 0xfe7f, 0x0)
write(r0, &(0x7f0000000080)="b99f0d", 0x3)

[ 2781.220562] loop6: detected capacity change from 0 to 140
22:56:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x8000000}}}}, 0xc0}}, 0x0)

[ 2781.236974] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2781.272961] audit: type=1400 audit(1759100162.554:27): avc:  denied  { relabelfrom } for  pid=19706 comm="syz-executor.1" name="" dev="pipefs" ino=55497 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[ 2781.290098] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2781.296950] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:56:02 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed, 0x0, 0x800, 0x8, 0x80}}}}, 0x22)

22:56:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x2000, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa2c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2781.315513] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2781.316136] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:56:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x9000000}}}}, 0xc0}}, 0x0)

22:56:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c8000, 0x40)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r0)
clone3(&(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

22:56:02 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2781.397646] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2781.426049] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2781.427580] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:56:02 executing program 3:
syz_mount_image$iso9660(0x0, 0x0, 0x4000000007, 0x5, &(0x7f0000000440)=[{&(0x7f0000000000)="bf424cf47317b011dbcc5bebc662fdcb6c3d81da5d22c198de1761aa9cc2660f2f7aff46b0ae3b0c9bf83fa0b14d0abfe3d3dd060e996b22426fae2d4c4ff5e23a852310aced95929e16e1564040a029d34410873079dbcf573937e68c63bd73ace887f93db621e8fb4dba32127d7e6a47919b71fd64dc042ef68a0ecf19caf6dbea1d6f2ab41ac25b", 0x89, 0x50}, {&(0x7f00000000c0)="597fe57af43f027149729e86d508ee909dd661a53516b239397e7b543bac374e283edcc70a8994c90d454b8b01a941d406b0cc75173a02c67d343903556b74203fd93bcf30f3fd83fcf5242ef24748d80887333907d8eb6002c2650d86b4c842d89b523f8b8c6f5fb0bf508853e11892efd01a95bdfb59f7e0bbae012922f22e2fa648d0450dfc97ddd1fc16d48b7840a3b91b959a32c7a1f1913aeaef7e6969c9a6783c42f3ebd7d35ad6974c739c47c7d8d478aaafdd3728b7a1cef635156f596234f3a6b702617989aa8be5a8c7fabf374e4a8424ea4a5143bfa4500a8de7e58e186709674caab01905c63b5e24e54b", 0xf1, 0x9}, {&(0x7f00000001c0)="f7977942259eb6f771da84e28b3a56c159bfeceea52cd57ef01fd28da5cbb7fa700a250006d9dcce6e7bb2ad3cdc528c21f5e8b87c32dba130ba747685b344bee2c57c7a099b1391bcce8694d3676a78372cf7d129dde6d9ed4dbcc3301dfede5a44a65ead04d08b3f9f7f88ca141ddf0e7a7427969d82ecd2b9ac9eb417d7fe3246f7297d5a8671e65bfbb53aa4c7ebd85b2504fadb70ea97ceec00a07eca556368ae5e57672f8417c1f51f5fa4797b24b3f4530da76e06e9237e401e72ba5f427dc39ac07110ba415284081ab02e38e65ea92f58b5776263", 0xd9, 0x8}, {&(0x7f00000002c0)="4d40eba75752e649d41d5a0fe2623b4cf4ed0625b37f858d2d963c5373a55f8c4a616710861e3201eb5ad0e44952dfb20744e76f245f23d9071dc719742951381799ff8d177971e5062099ae5cfd05efe1fd6de273b3c263c8ab31d39637", 0x5e, 0xfffffffffffffffb}, {&(0x7f0000000340)="c377122e1e517bb4aacfccb1de4771e5853101e783a1562e4529f926338b2d38cf4058d2c8b003328e4850f9ca7c679c956d62a044b49e7c4e575d89ceb0d4cdebaa2aae81b62749e0e4447ed2f9d2be2e8c21b3d013ef3c6b451f115f7a706ffcafc4d39e1df39d01c64a8897a1a69f40380c4bfbfdf74a057b3e8ac17a07d6ea47a13c630acc8ed26b1f9306177bd903ff8a5ce7410373a70ff49460d2514ae3a708ab9dbff20019612f4a57c032d0928902f0b2f542aa042cdd2fd8f5a41de94e33", 0xc3, 0x4456fd26}], 0x82004, 0x0)

[ 2781.440717] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2781.509541] loop6: detected capacity change from 0 to 140
[ 2781.522318] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:56:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xa000000}}}}, 0xc0}}, 0x0)

22:56:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa3c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2781.573764] loop3: detected capacity change from 0 to 264192
22:56:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1e00000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:02 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed, 0x0, 0x0, 0x8, 0x80}}}}, 0x22)

22:56:02 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x14, 0x0, r1)
close(r0)
r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4b3e1eaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc710d0f9b7d5e0f1f834c5a9b602ac6"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
fchown(r2, r3, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300))
fchown(r4, 0x0, 0x0)
r5 = fork()
ptrace(0x10, r5)
gettid()

[ 2781.685738] loop6: detected capacity change from 0 to 140
[ 2781.697638] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2781.793898] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2781.795894] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2781.800175] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2781.801533] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2781.865310] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2781.866911] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2781.868144] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2781.870537] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2783.830475] Bluetooth: hci1: command 0x0406 tx timeout
[ 2783.894484] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2783.895719] Bluetooth: hci4: command 0x0406 tx timeout
[ 2783.895830] Bluetooth: hci7: command 0x0c1a tx timeout
22:56:14 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:14 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2400000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:14 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x181601, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x1d, 0x8, 0x0, "e1eff77b9e67fd936efa695cdfe9dba59939471b9e85fb2539e209a00c"})
write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
write$P9_RREADDIR(r2, &(0x7f0000000280)={0xcb, 0x29, 0x2, {0x6, [{{0x8, 0x3, 0x2}, 0xb6e, 0x5, 0x7, './file0'}, {{0xa4, 0x2, 0x7}, 0x7, 0x1, 0xd, './file0/file0'}, {{0x80, 0x4, 0x8}, 0x7fff, 0x4, 0x7, './file0'}, {{0x171, 0x4}, 0x1, 0x81, 0x7, './file0'}, {{0x20, 0x4, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{0x1, 0x4, 0x2}, 0xffffffff, 0x20, 0x7, './file0'}]}}, 0xcb)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040))

22:56:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf000000}}}}, 0xc0}}, 0x0)

22:56:14 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed, 0x0, 0x0, 0x0, 0x80}}}}, 0x22)

22:56:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa4c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:56:14 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
close(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/244)

22:56:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xd803, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2793.665530] loop6: detected capacity change from 0 to 140
[ 2793.678131] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:56:15 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
close_range(r0, r1, 0x2)

22:56:15 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:15 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa5c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2793.803494] audit: type=1400 audit(1759100175.083:28): avc:  denied  { tracepoint } for  pid=19816 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 2793.807536] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2793.811847] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2793.817124] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2793.818878] loop6: detected capacity change from 0 to 140
[ 2793.819957] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2793.836768] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2793.887023] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2793.901650] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2793.902472] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2793.903126] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2795.873701] Bluetooth: hci1: command 0x0406 tx timeout
[ 2795.927797] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2795.927828] Bluetooth: hci4: command 0x0406 tx timeout
[ 2795.929374] Bluetooth: hci7: command 0x0c1a tx timeout
22:56:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2a00000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa6c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:56:26 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r1, 0x330b)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x111102, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22:56:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x9effffff}}}}, 0xc0}}, 0x0)

22:56:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xf000, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:26 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:26 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)

[ 2805.363565] loop6: detected capacity change from 0 to 140
[ 2805.368990] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:56:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0xffff, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2805.428436] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2805.432052] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2805.435138] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2805.435753] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2805.453011] loop6: detected capacity change from 0 to 140
[ 2805.470103] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:56:26 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001180)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="d36199e30804", 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000000))

22:56:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3000000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2805.538351] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2805.538985] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2805.542916] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:56:26 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a4000000000aaaaaaaaaa3256ba3bffffffaaaaaaaaaa0001010000070000"], 0x22)

[ 2805.552461] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:56:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xc0}}, 0x0)

[ 2805.602643] loop6: detected capacity change from 0 to 140
[ 2805.614029] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2805.623341] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2805.628157] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2805.628910] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2805.629520] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:56:26 executing program 1:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc30cc", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a37f80", 0x0, 0x0, 0x0, @loopback, @private2, [@hopopts={0x32}], "867c461d64b189e0"}}}}}}}, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="57b72f8e8d33", @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "4484b5b29287fa5e"}}}}, 0x0)

[ 2807.638421] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2807.638488] Bluetooth: hci4: command 0x0406 tx timeout
[ 2807.639381] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2807.640497] Bluetooth: hci1: command 0x0406 tx timeout
22:56:39 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:39 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:39 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xfffff000}}}}, 0xc0}}, 0x0)

[ 2818.055159] loop6: detected capacity change from 0 to 140
[ 2818.059344] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:56:39 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0xc9, 0x0, 0x0, @fixed, @none, @fixed, 0x1}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c8004f1a72e1d2839403114cedaac726b5b8c87649c37c10e798ac87c358ec4dbac5d6728c1eeeac2b31f67c58191ba413d3f2cbc5385fdee67c770b75ea9c9a52332eff1906870dd42a4c54bba5f7140b77"], 0x53)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2)

22:56:39 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3600000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:39 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

22:56:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000680))
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
statx(r1, &(0x7f0000007740)='./file0\x00', 0x0, 0x800, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x101, 0x80, 0x2})
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+60000}, {r4, r5/1000+10000}})

22:56:39 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa7c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2818.173055] Bluetooth: hci7: SCO packet for unknown connection handle 200
22:56:39 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:39 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x2, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:39 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xc0}}, 0x0)

[ 2818.175835] Bluetooth: hci7: SCO packet for unknown connection handle 200
[ 2818.240364] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2818.259322] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2818.263815] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2818.269623] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:56:39 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f00000000c0)="010000404e794ef6000005000c", 0xd, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f00000001c0)={[{@nolazytime}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x101880, &(0x7f0000000140)={[{@xattr}, {@cpuset_v2_mode}], [{@seclabel}, {@smackfsfloor}, {@fsmagic}]})

22:56:39 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1c08aa00}}}, 0xd)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "05519d8b287b506957e600e46e5d59b0f10ac13093d339816bacc6140000000000002705b3a9c619ecbe20f2176e7736caf0e858a5f40010a876bfee96b1d5f9dc244b42572d1fd67179cb2904e2f93ae7d04de327de4539d5caed42a15876b86ffcdf21e4e6c60f2a0ecf9b90f3a704d1d9e1fdc56f24e3a6c1fd563d5ab6b7d7b86988e600f7cbd2ab3329a52046bcfa039c9fe3730a71d1348e6e4265d5f33cbda48205c8d7e7"}, 0xac)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0xe6, 0x4}, {0x3, 0x7fff}}]}}, 0x11)

[ 2818.343047] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2818.362714] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2818.365639] loop6: detected capacity change from 0 to 140
[ 2818.368112] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2818.370749] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2818.393639] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2818.417138] Bluetooth: hci7: SCO packet for unknown connection handle 201
[ 2818.417756] Bluetooth: hci7: ACL packet for unknown connection handle 201
[ 2818.425199] Bluetooth: hci7: SCO packet for unknown connection handle 201
[ 2818.425329] Bluetooth: hci7: ACL packet for unknown connection handle 201
[ 2820.310347] Bluetooth: hci1: command 0x0406 tx timeout
[ 2820.374422] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2820.375368] Bluetooth: hci4: command 0x0406 tx timeout
[ 2820.376213] Bluetooth: hci7: command 0x0c1a tx timeout
22:56:51 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x200000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="09c806"], 0x6)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x4, 0x3, 0x1)

22:56:51 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3c00000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:56:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x3, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xc0}}, 0x0)

22:56:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa8c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:56:51 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xed41)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="b6528abb72304ba27623a14330447bc4693200fba56cc3afcefc978f5b83e3aa893f73892fce87c7fcd11628a511eee55574126a89f502e03da68d332adee9652d5865bb399f683b335adcd5cc7148755aff46b301b95860f43ae21f2a676c351af3a75380683e33c499615bdb07d4a8237b2cd3bbd0b08f6fa6fb186d8136a8a73e8259cf108bb2aa2b99e3f88bad32266006a1d6c98e93ea619ce594f051c10667fc232bee2e992aa4c89fad432261d17e17e1e04bc5be549c677b7d6c3fec34cab3d544f22ba8ed4bd13007bde95702516b20c78d7a", 0xd7, 0xff}], 0x100000, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x39]}}}}, {@huge_never}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x38, 0x33]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67]}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '&o$\xb8[/)$^'}}, {@fowner_lt={'fowner<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x17}}, {@obj_role={'obj_role', 0x3d, '%,'}}, {@audit}]})
creat(&(0x7f0000000080)='./file0\x00', 0x428)

22:56:51 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5cca, 0x4)
sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0}, 0x2062)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[ 2830.596747] loop6: detected capacity change from 0 to 140
22:56:51 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x28}, @l2cap_cid_signaling={{0x24}, [@l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0x33, 0x7, 0x6, [@l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x3c, 0x1, 0x4, 0xfff}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}]}}, 0x2d)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004)

22:56:51 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:51 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file1\x00'})
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaeb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40090}, 0x1000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000001b0001e1ff00000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d68c6c6034cb9efbf4148730c17fb5fb7f9d376a898ebc14b450994cd331", @ANYRES32=0x0, @ANYBLOB, @ANYRES16=r1], 0xc8}, 0x1, 0x0, 0x0, 0x1001}, 0x20048000)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000007c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x7a8)
r6 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
dup2(r5, r6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r3, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffb, 0x78, 0x4, @buffer={0x0, 0x26, &(0x7f0000000440)=""/38}, &(0x7f0000000480)="dda311b1ac4fe9893d2c6c1280e11fc92a889e1b78a30dd326da509a688dbe53c56747e6772219c4af2fd788c783bc1dc3578c7918d14cf03943b5ce489c8d8408632bf2fcdf8ae0ae9373fa93b4ee500694f4993dd4b582484a18f0d3a67ffc5a781a8250474c90f5a6ead47e013e9121fc0f2f24a12606", &(0x7f0000000640)=""/213, 0x4, 0x0, 0x0, &(0x7f0000000500)})
syz_io_uring_submit(r7, 0x0, 0xfffffffffffffffe, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)

[ 2830.628644] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2830.672830] Bluetooth: hci7: ACL packet for unknown connection handle 0
[ 2830.674747] Bluetooth: hci7: ACL packet for unknown connection handle 0
22:56:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xc0}}, 0x0)

[ 2830.697397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2830.700385] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2830.705896] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2830.717065] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:56:52 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x8, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:56:52 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xab}, "af27684cd2dbad3d3cb57543fca82810a40512a04d07b7e1b087e434959a4a6f4353e14fa4ed5b5c6fbd9dd690a74d0de16e8372c55fc6e33df8f2fbd18397243b7e89c4a8ac0057109be2ef51d2db9fa71c4276b2819bf4391998fa49932c770a658c6730c0a95f98d292a61ff36446dafdca1a6a936642a8a3c46ff34be88c86fbac947176b46a147548a73149f105f2bd78ca0dc9ddd79cb8d93f590e367800cb613186aaaf435caaab"}, 0xaf)

22:56:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:56:52 executing program 3:
io_setup(0xfff, &(0x7f0000000040)=<r0=>0x0)
io_destroy(r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0)
io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="2e04", 0x2}])

[ 2830.819966] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2830.820812] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2830.824542] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2830.825130] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2830.830747] Bluetooth: hci7: SCO packet for unknown connection handle 201
[ 2830.853678] loop6: detected capacity change from 0 to 140
22:56:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x8000000000000}}}}, 0xc0}}, 0x0)

[ 2830.957327] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2832.790717] Bluetooth: hci1: command 0x0406 tx timeout
[ 2832.854356] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2832.854431] Bluetooth: hci4: command 0x0406 tx timeout
[ 2832.854841] Bluetooth: hci7: command 0x0c1a tx timeout
22:57:02 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a4000000000aaaaaaaa2a00ffffff6566ffaaaaaacc64d82ad90eaaaa0000"], 0x22)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00'/12], 0xc)

22:57:02 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:57:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000006c0)={0x18e, 0x1, &(0x7f00000002c0)})
ioctl$TCXONC(r0, 0x40045436, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x50, "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"})
openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)

22:57:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3f00000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xc0}}, 0x0)

22:57:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = dup2(r1, r0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x90e60000)
r3 = timerfd_create(0x5, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000640)=[{&(0x7f00000000c0)="1223d272b2e6f1f101bec0b1aabcb92593dda74c5ec8ec2ac35f6f6613d76b921c9b324ab62115f055d5d80bad697c381c28494e78644e800d933c443ac6553e728ec93d2e3485e19a6f2c3b8dd482cef84994697e719e7fa13194e64db518630901e414d2a03e382de50737e8732c532ae8bde0f9d9bd6b81aa0efcc0586d8518a732ae1ae7e5b9bbfec7a3c0ae650ea627824a83f0a0bb143bd37588", 0x9d, 0x5}, {&(0x7f0000000180)="de499fd2c083afc9a6a30fc02797a1bcc5309902ca39cc55d56e4ee03be38d201c4071435f6c879cc46385250334ed6b820402600288d183840f8f41a08e6c9d2c99015e51117e90ca9409caaa71f94e14139fdb3f83a00661804e4d689a61f546f5075c9e3764b3a24c8bbc875ac40ed5bdb37fc36cdd53b7c137922893680334a0cc60d2d25404c6e528b575c4a4dee875131509b70522636e9c4ccba62b39006da7f8853a716c1c306a7327c1c16f0fad7be55ecd564e344158a534f322543cf906c508a99b3df92a5a5132873d202540", 0xd2, 0x5}, {&(0x7f0000000300)="cea90bc75b05114b17ac04b3d7deaf9e7f466e21bf9a13c15522c89b96248c9f6f74acb7b5d60e9fb1b11f49b6a119698ced919d1123d89cec244cc15e6c95dd805b1277e7f7cc1c33ac542fc98c424fa7c4924a3fcca26f9ed2624c", 0x5c, 0xa8b}, {&(0x7f0000000380)="8b90896e6f68c632927d5fa376928ce914e5cf145b13f484967252ed6012936e79e4e44e91569b8e92eda526c578e772edc90c061d86b22d1765f964157f435b12e9eddf570cc91ef4103a3339dd13efed15568798bf513d6e9d2193eaeaf13a998a25b3d06a8781e3cb1196ffa176f124491206631fae1a43f002cd7d96fa337456009e7ca31e7f000aed66ec83db40811d2924c9247810ae", 0x99, 0x4}, {&(0x7f0000000440)="f3423a31c78b9c045533d807c63411aa7e769997ba98f01c1875f4beb8fceafcc8474737bc37c8d1b261213d6df64c1f55803d315250de9cefcf81eff7938126f678da245232c99655080ad386fa34c7f0a6d99e2eff3dc64d9bbc2cdd3a7deee68954588e6014737a7c441eec5d166a1c7c314583aa3c3bbb99e71fbe8ee45fc75d85a2d4dfc2bd2b39821315f8b45034aa7de618cb22f164003b8662a806078f2d3a4f668a0e4ff17aea1f684a6caede17ec4ee2e0dd4da304a07cd4c84ab01b8717b5d9aa3ee20702a7ec3e5be33f4fac", 0xd2, 0x9}, {&(0x7f0000000540)="641a5ffe9a026c3819516fa59b8462bc907bbf55d85b0909310a8062e9817236c242808e80ebdf7421ea89f69c787cd7943d1a333b9142ba6855503b7e90be67c3d024d26c604aabeb1e921df40a5c3848e067e679be5a0c75c22c958a8d1705f3bac6716018a15b4e87033afcec1b961a2ad3227ed0a24b37ea8fe84ada93f224b2159be20046130852de5205dded65cde12a4e9cd490af3bac1cf42485a112e9f1f0d6a133250acd2e518e394c56a5478779bccfb1bcfbb382d263324b579bab95948afcf0806d6856d215e25765400bc5ced1a175a8762e009d9b3544dd2d01c0", 0xe2, 0x7}], 0xa3a3123fae37294a, &(0x7f0000000700)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@nouid32}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}]})
poll(&(0x7f0000000280)=[{r2, 0x2009}, {r3, 0x8088}, {r2, 0x1}, {r1, 0x4000}, {r4, 0x8}, {0xffffffffffffffff, 0xa0}, {r1, 0x9}], 0x7, 0xfd4b)

22:57:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xa9c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x9, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xc0}}, 0x0)

22:57:02 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)=""/65, &(0x7f0000000180)=0x41)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000280)=""/164, 0xa4})
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa0}, "c8ef2756e5eb5430a7b3473bb954f34fc7af0a03623c56cad414da695449f1d24d3ccf5bb0335640926c0900a038dfe2c9740800e14ae27ff37bd4323ee730414e087517c1cdcc333b2016512329c45ab0953523f47628631432b1c7c79f5554be5695f36b5218405bd420a32c28a60487e5d65d86700d354b8ffa3ef1dc81b3ea6379ecc2607bea28bd32ddd125718822d87b273bf71d308c035d5300000000"}, 0xa4)

[ 2841.077213] loop6: detected capacity change from 0 to 140
[ 2841.100176] loop3: detected capacity change from 0 to 10
[ 2841.106395] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:57:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xf, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:02 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001400), 0xc801, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000000)={0xff, 0x81, 0x8, 0x81, 0x5, 0x40})
sendfile(r1, r0, 0x0, 0x8000000000a0102)

[ 2841.139785] Bluetooth: hci7: SCO packet for unknown connection handle 200
22:57:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xaac9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2841.155200] Bluetooth: hci7: SCO packet for unknown connection handle 200
[ 2841.175816] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2841.195005] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:57:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xc0}}, 0x0)

[ 2841.203767] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:57:02 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2841.215010] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:02 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_data_len_change={{}, {0xc9, 0x3, 0x7, 0xac, 0xfff7}}}}, 0xe)

[ 2841.256440] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 2841.257487] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] 
[ 2841.258116] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code
[ 2841.258897] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 20 00
[ 2841.259603] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 2
[ 2841.270319] loop6: detected capacity change from 0 to 140
[ 2841.280589] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2841.296967] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2841.298122] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2841.307048] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2841.307745] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xc0}}, 0x0)

[ 2841.903939] loop3: detected capacity change from 0 to 10
[ 2843.286426] Bluetooth: hci1: command 0x0406 tx timeout
[ 2843.350358] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2843.350397] Bluetooth: hci4: command 0x0406 tx timeout
[ 2843.351428] Bluetooth: hci7: command 0x0c1a tx timeout
22:57:11 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x80}, {r0, 0x1}], 0x2, 0x6)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x9})

22:57:11 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:57:11 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xabc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:11 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xf0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:11 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x4000010000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:11 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x400000000000000}}}}, 0xc0}}, 0x0)

22:57:11 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdd}, "debad784f126a4566f0edc6127529eb3288065417540af2aa77897eb6c7fb156cda17e85f8fd245c9585bc4a652a14021f1f109f560b896c0e21db126ebbb5108250912bf42492b23eab51d879f229d7e0047b58a98a720ee6bc05f781cf09a655f99e74802df171cdf4198a89bb6eb840991e07a9d688722741a6bd2a2c7196066fdec69a1a2e02b6a3e18c5e38026c4a54e6e5cef7b1274359a50548151049d42913bd0dd4db4c1804bf073ddeb411b528705f7105d621830c8b82ab02a34d2f8a1580db696272f5de299517bf6550b0ac2801899564301bd6df2aa5"}, 0xe1)

22:57:11 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff7693, 0x40000008}, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = getpid()
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000))
r5 = getpid()
r6 = pidfd_open(r5, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r6, &(0x7f0000000040)={r1, r4})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x3, 0x1f, 0xfb, 0x0, 0x1, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd2e3, 0x2, @perf_bp={&(0x7f0000000140), 0xf}, 0x0, 0xfffffffffffffffa, 0x28000, 0x0, 0x5, 0x1, 0x6, 0x0, 0xfffff000, 0x0, 0x1}, r2, 0xffffffffffffffff, r7, 0x8)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x46, 0x5, 0x6, 0x80, 0x0, 0x47, 0x90004, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x40020, 0x1000, 0x0, 0x7, 0xa68d, 0x1, 0x3f, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r0, 0x9)

[ 2850.679198] Bluetooth: hci7: SCO packet for unknown connection handle 200
22:57:11 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x701000000000000}}}}, 0xc0}}, 0x0)

[ 2850.680785] Bluetooth: hci7: SCO packet for unknown connection handle 200
[ 2850.686071] loop6: detected capacity change from 0 to 140
22:57:11 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000700)='./file0\x00', r0, &(0x7f0000000740)='./file1\x00')

[ 2850.707410] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2850.720760] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2850.721581] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2850.722206] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2850.741546] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:12 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9)

22:57:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x300, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:12 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='tranc=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

22:57:12 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

[ 2850.823323] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2850.825920] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2850.828968] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2850.836768] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2850.863456] loop6: detected capacity change from 0 to 140
22:57:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x800000000000000}}}}, 0xc0}}, 0x0)

22:57:12 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000013a00))

[ 2850.875318] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:57:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x3d8, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xacc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:12 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:57:12 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:12 executing program 3:
syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

[ 2851.029967] loop6: detected capacity change from 0 to 140
[ 2851.043720] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2851.133138] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2851.139098] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2851.144337] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2851.149250] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2851.212126] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2851.218866] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2851.230922] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2851.235582] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2853.206376] Bluetooth: hci1: command 0x0406 tx timeout
[ 2853.273495] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2853.274544] Bluetooth: hci4: command 0x0406 tx timeout
[ 2853.275593] Bluetooth: hci7: command 0x0c1a tx timeout
22:57:23 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a40000000a4ffffffff00000000000400"/34], 0x22)
syz_emit_vhci(&(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

22:57:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6716000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x8000000000000000, 0x2d800000, 0xffffffff, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x9, 0x2, 0x0, 0x0, 0x20, 0xa0231, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x76b, 0x0, @perf_config_ext={0x10001, 0x9}, 0x12000, 0x5, 0xe0f, 0x5, 0x6, 0x0, 0x8f, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r1, 0xa)
getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f0000000280))
io_setup(0x80000001, &(0x7f0000000040))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x4e5, 0xe2, 0x5, 0x7f, 0x0, 0x2d800000, 0x1, 0x4, 0x8, 0x3, 0xfff00000, 0xfffffffffffff1c8, 0x4, 0x4c87}, 0x8, [0x0]})
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x5, 0x5fe, [0x200002c0, 0x0, 0x0, 0x2000053c, 0x20000750], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xcf32a1c62780ff38, 0x2, [{0x3, 0x0, 0x88f5, 'virt_wifi0\x00', 'hsr0\x00', 'macvlan0\x00', 'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, [0xff, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x81}}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}}}}, {0x5, 0x2e, 0x6003, 'xfrm0\x00', 'veth0_virt_wifi\x00', 'veth1_macvtap\x00', 'ipvlan0\x00', @empty, [0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0xff], 0xbe, 0xf6, 0x12e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 0x4e21, 0x29, 0x1, 0x4e22, 0x4, 0x2}}}], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x8, 0x888e, 'veth0_virt_wifi\x00', 'vcan0\x00', 'wlan1\x00', 'bond_slave_1\x00', @empty, [0x0, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0xd6, [@mac={{'mac\x00', 0x0, 0x10}, {{@empty, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {0x3, 0x2, 0x201, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', 'hsr0\x00', 'nr0\x00', @random="b71619aae04b", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x80], 0x9e, 0xd6, 0x10e, [@state={{'state\x00', 0x0, 0x8}, {{0xafd}}}], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x11, 0x28, 0x22f0, 'macvlan0\x00', 'syz_tun\x00', 'geneve0\x00', 'bridge0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0x9e, 0xd6, 0x10e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x9a5b, 0x2}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x676)

22:57:23 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000002c0)={0x6, 'macvtap0\x00', {}, 0x200})
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x210243)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x6, 0x4, 0x58, @loopback, @mcast2, 0x10, 0x10, 0x1, 0x6}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r3, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb0fa6c4167422a94}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x1c}}, 0x800)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r6 = dup2(r4, r5)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
syz_io_uring_submit(r7, 0x0, 0xfffffffffffffffe, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f0000000300)="489596135571aa6c230b6f02e0b291c28d4a165dd0c4eb2b7adc503fb7d4871d8bae7d95688415b581786ba210f4274064a44c02481a4b44d1145d753648258ead37ae2d2c3151ebc9bede763b246c5b72ca8c956f28f94d5ab44f2cb295660720117084d837fc047c02cae5f32926", 0x80, 0x0, 0x1}, 0xfd)
mount$cgroup(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'rootcontext\xf0\x18s\xbe~\xae \xdb{.\xda\xc2\xd8\xe2\xe0\xe7#{*\xb2{k\xa4\xee\xeb\xe8=\xef\x8c\x9d\xe4\x8e\xe7b\x8e\xeb\xa0\x10\xb7\xe0Vyd\x10\xdco\xc5%/\x10\xe2)\x19\xf4\xcf\xf5v\xd7\x81\xfa\xcb\x9a7\xbe\r[\xc3\x03\xb7\x11\xd0\x85}\x82\x88'}}]})

22:57:23 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x900, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:23 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x900000000000000}}}}, 0xc0}}, 0x0)

22:57:23 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:57:23 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xadc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2862.545209] loop6: detected capacity change from 0 to 140
[ 2862.562675] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2862.597647] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2862.612064] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2862.623787] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2862.625156] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:23 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xf00, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2862.716603] cgroup: Name too long
[ 2862.751676] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2862.755046] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2862.758344] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2862.760338] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2862.820281] cgroup: Name too long
[ 2864.726386] Bluetooth: hci1: command 0x0406 tx timeout
[ 2864.790408] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2864.791307] Bluetooth: hci4: command 0x0406 tx timeout
[ 2864.791328] Bluetooth: hci7: command 0x0c1a tx timeout
[ 2873.021863] loop6: detected capacity change from 0 to 140
22:57:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xc0}}, 0x0)

22:57:34 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[])

22:57:34 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x20, 0x8, 0x1, 'queue0\x00', 0x5})
keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffffb)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000290000000000002925", 0x59, 0x8800}], 0x0, &(0x7f0000000080))
mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ocfs2_dlmfs\x00', 0x40024, &(0x7f00000001c0)='\x00')

22:57:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x2000, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:34 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0xffff9842}}, './file0\x00'})
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
statx(r4, &(0x7f0000007740)='./file0\x00', 0x0, 0x800, &(0x7f0000000100))
mount_setattr(r4, &(0x7f0000000300)='./file0\x00', 0x100, &(0x7f0000000340)={0x60, 0x4, 0x60000, {r2}}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="4516496300e6b1ba10348d5c41e48caaab31856a3e9867ed4684a69a39bf383a9de4864b276215b5db90626dc329ac9053c2da2eaeb94f422c34f64858b17e79d698e671404edb8265514143951ce72a291951893fe218940c8a5374886f4caad30ef2a133b1e5dc57fe71c18e6c6f6425e7ccd703cff68e2bc846d87c2c6981534b4eb32743442f1c12c130bdac1ae662c5c3ae89feea0eb009d64b3e9ea01d93f22114172c9b069bc9eb78910bc4306c222cc271589363eb69f2c6a965e7d4d498188cd63fa11253f0512520f3adccae8b65182966"], 0xc8}}, 0x0)
copy_file_range(r3, &(0x7f00000000c0)=0x6, r5, &(0x7f0000000100)=0x7f, 0x800000, 0x0)

22:57:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xaec9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6816000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:34 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

[ 2873.033928] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
22:57:34 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xc0}}, 0x0)

22:57:34 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, 0x0)

22:57:34 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x54)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000))

[ 2873.150768] loop6: detected capacity change from 0 to 140
22:57:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xd803, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2873.172970] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2873.179139] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2873.185161] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2873.191473] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:34 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, 0x0)

[ 2873.283723] loop6: detected capacity change from 0 to 140
[ 2873.358930] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2873.360121] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2873.361683] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2873.365546] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2875.350338] Bluetooth: hci1: command 0x0406 tx timeout
[ 2875.414372] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2875.414392] Bluetooth: hci4: command 0x0406 tx timeout
[ 2875.414889] Bluetooth: hci7: command 0x0c1a tx timeout
22:57:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xf000, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6916000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xafc9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x343602, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xed, 0x7f, 0x7, 0x9, 0x0, 0x7f04, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x868, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x80, 0x3ff, 0x9, 0x5, 0xfff, 0x5, 0xfff, 0x0, 0xffffff96, 0x0, 0x1}, r2, 0x9, r0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x4, 0x0, 0x2}, 0x8)

22:57:44 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}, 0x1c)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xe423a28eb74ca7a9, 0x0)

22:57:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xc0}}, 0x0)

22:57:44 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:44 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, 0x0)

22:57:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0xffff, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2883.143206] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2883.147655] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2883.154426] loop6: detected capacity change from 0 to 140
[ 2883.156088] Bluetooth: hci4: Opcode 0x0c1a failed: -4
22:57:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2883.157911] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xc0}}, 0x0)

22:57:44 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xad}, "536f3b40f39665600d194ee345a15a38a79d43391acbdda6fc42989dce8ab82c07171929e515dee67065ebcd4c055aeb9f3e75868b0a57fa44eebad74dddcd2a423d933b9efd5d360d3d47426adbbeca92c3bdd953a37bb78832111aa7de55052c530d3609ca30ebb30229eb6eeb2bb3e74a5d77caf681415f8314aefe7df19a2c35a1361a3e9f72951b94ddec9338a476fac0aeec7f675b139cbd583db03c6a48bc1ff128ffd18248043d33e8"}, 0xb1)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)

[ 2883.231661] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2883.234956] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2883.237460] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2883.238041] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:57:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x4}, 0x4)
sendto$packet(r0, &(0x7f0000000080)="f7000000000000002f24dd51ef98", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

22:57:44 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x5e16000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:44 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xfeff000000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x2, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2883.350346] Bluetooth: hci7: SCO packet for unknown connection handle 200
22:57:44 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 1)

22:57:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xffffc90000000000}}}}, 0xc0}}, 0x0)

[ 2883.352222] Bluetooth: hci7: SCO packet for unknown connection handle 200
[ 2883.439473] FAULT_INJECTION: forcing a failure.
[ 2883.439473] name failslab, interval 1, probability 0, space 0, times 0
[ 2883.441198] CPU: 0 UID: 0 PID: 20296 Comm: syz-executor.6 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2883.441217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2883.441226] Call Trace:
[ 2883.441230]  <TASK>
[ 2883.441235]  dump_stack_lvl+0xfa/0x120
[ 2883.441261]  should_fail_ex+0x4d7/0x5e0
[ 2883.441280]  should_failslab+0xc2/0x120
[ 2883.441299]  __kmalloc_cache_noprof+0x73/0x6a0
[ 2883.441314]  ? task_active_pid_ns+0xa9/0xd0
[ 2883.441326]  ? alloc_name+0x41/0x110
[ 2883.441345]  ? alloc_name+0x41/0x110
[ 2883.441358]  alloc_name+0x41/0x110
[ 2883.441371]  __x64_sys_memfd_create+0x130/0x280
[ 2883.441387]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 2883.441408]  do_syscall_64+0xbf/0x390
[ 2883.441425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2883.441438] RIP: 0033:0x7f079a4d7b19
[ 2883.441448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2883.441460] RSP: 002b:00007f0797a4cf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2883.441472] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f079a4d7b19
[ 2883.441481] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007f079a5310fb
[ 2883.441488] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff
[ 2883.441496] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2883.441503] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000740
[ 2883.441523]  </TASK>
22:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb0c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2883.482119] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2883.484840] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2883.489690] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2883.492477] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2883.556111] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2883.557544] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2883.558908] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2883.559988] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2885.526367] Bluetooth: hci1: command 0x0406 tx timeout
[ 2885.590379] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2885.590416] Bluetooth: hci4: command 0x0406 tx timeout
[ 2885.591424] Bluetooth: hci7: command 0x0c1a tx timeout
22:57:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xc0}}, 0x0)

22:57:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x3, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb1c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:57:54 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x80)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353033313039333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003b6f4d0472b34eacba0268aaada5ab8e010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x6}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffddf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000000080)="0000000000000000010000000000000000000000000000000015590000000000000000000000000008007b00000000000000000000000000000000000000000000007000"/97, 0x61, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000ddf4655fddf4655fddf4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000ddf4655fddf4655fddf4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(r2, &(0x7f0000000700)={'syz0', "cdbe2ef29e9e851d8c91eb160660b3187f556b80f7edc91e2f8872d7a049005ecaaf04c97117bdedbb54ebe7ba8a6afc5e029e89641ddd52977c9c6ef2f9ac10c146ea7798f1d975e0de57beb4ad33f19b6c01ee6855d9de4f17f99f231f1d40892c1c3265d7db65fdf7c6ace036"}, 0x72)
clone3(&(0x7f0000000a00)={0x100, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=<r3=>0x0, {0x3d}, &(0x7f0000000840)=""/99, 0x63, &(0x7f00000008c0)=""/219, &(0x7f00000009c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
kcmp(0x0, r3, 0x4, r4, r1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = fork()
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r6, 0x200, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x8000090)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r6, @ANYBLOB="04002cbd7000fcdbdf254c00000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d6500000c00a70000000000010000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x1000c000}, 0x50)

22:57:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 2)

22:57:54 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201)
r1 = dup2(r0, r0)
ioctl$SG_IO(r1, 0x2285, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="9811b416240000000002000092675a9eed92a8c20c45248749b7df52000000ce92000000462af67a1bfa35600a54", 0x2e}, {&(0x7f0000000140)="df09bcb20fdcba50093710d672f92a44a50fd55e73e6044207c7e924d723c0c01f5600eaefefc2ad25b37570a2e08a6baa", 0x31}], 0x2)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0x1)

22:57:54 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xffffff7f00000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:54 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x50, 0x2}, {0x9}}}}, 0xf)

[ 2893.725409] sg_write: data in/out 1354423275/1 bytes for SCSI command 0xef-- guessing data in;
[ 2893.725409]    program syz-executor.3 not setting count and/or reply_len properly
[ 2893.740501] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2893.744226] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2893.751480] sg_write: data in/out 1354423275/1 bytes for SCSI command 0xef-- guessing data in;
[ 2893.751480]    program syz-executor.3 not setting count and/or reply_len properly
[ 2893.756717] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2893.757397] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:57:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb2c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2893.757992] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2893.764535] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2893.784825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2893.790532] loop6: detected capacity change from 0 to 140
22:57:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x4, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2893.838384] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:57:55 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004)

[ 2893.850634] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2893.854643] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz-executor.6: iget: special inode unallocated
[ 2893.860746] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2893.865637] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2893.867886] EXT4-fs (loop6): get root inode failed
[ 2893.869348] EXT4-fs (loop6): mount failed
22:57:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xc0}}, 0x0)

22:57:55 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xc9})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)
sendfile(r0, r1, &(0x7f0000000040)=0x9, 0x5)

[ 2893.959184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
22:57:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xffffffff00000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:57:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 3)

22:57:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb3c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2894.025329] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=513 sclass=netlink_xfrm_socket pid=20361 comm=syz-executor.1
22:57:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x8, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:57:55 executing program 2:
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f7ee000000000aaaaaa2394c923ffcecd74c829c420ffffffffaaaaaa000000002000001e00"], 0x22)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x58}, @l2cap_cid_signaling={{0x54}, [@l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x7ff, 0x7, 0x0, 0x40}}, @l2cap_conn_req={{0x2, 0xd6, 0x4}, {0x5ded, 0x20}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xfc, 0x2}, {0xabc6}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0xfff7, 0x1}}, @l2cap_conn_req={{0x2, 0x73, 0x4}, {0xe74, 0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x9}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x101, 0x0, 0x80, 0x5}}, @l2cap_conf_rsp={{0x5, 0x4, 0x14}, {0x1ff, 0xbe19, 0xf000, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x47, 0x5f8, 0x40, 0x400}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x5d)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0xe0, 0x2, 0x6, "cb2866", 0x2, 0x20}]}}}, 0x13)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)

[ 2894.111371] FAULT_INJECTION: forcing a failure.
[ 2894.111371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2894.113592] CPU: 0 UID: 0 PID: 20380 Comm: syz-executor.6 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2894.113624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2894.113638] Call Trace:
[ 2894.113646]  <TASK>
[ 2894.113655]  dump_stack_lvl+0xfa/0x120
[ 2894.113691]  should_fail_ex+0x4d7/0x5e0
[ 2894.113727]  strncpy_from_user+0x3b/0x2f0
[ 2894.113770]  alloc_name+0x78/0x110
[ 2894.113798]  __x64_sys_memfd_create+0x130/0x280
[ 2894.113827]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 2894.113868]  do_syscall_64+0xbf/0x390
[ 2894.113899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2894.113923] RIP: 0033:0x7f079a4d7b19
[ 2894.113941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2894.113963] RSP: 002b:00007f0797a4cf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2894.113984] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f079a4d7b19
[ 2894.114000] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007f079a5310fb
[ 2894.114014] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff
[ 2894.114028] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2894.114042] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000740
[ 2894.114078]  </TASK>
[ 2894.157351] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2894.158035] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2894.158839] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2894.165459] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2894.215325] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2894.217008] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2894.221701] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2894.234605] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2894.235221] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2894.250717] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2896.216546] Bluetooth: hci1: command 0x0406 tx timeout
[ 2896.279684] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2896.279715] Bluetooth: hci4: command 0x0406 tx timeout
[ 2896.280537] Bluetooth: hci7: command 0x0c1a tx timeout
22:58:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 4)

22:58:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:58:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x9, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:58:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2909864, 0x0)

22:58:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb4c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:58:06 executing program 2:
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a4000000000aaaaaaaaaa00ffffffffaaaa3e78300c4431e8130000eb32ec8797bb000f2b5e226af96e37aaec75b3a833f122df470ea4f6dacb1e3cc59b0dd2d4da20a47933e1be5be60a9776fa337f79537e9cc41d36e2fa148ee5814403a0a06c5917df9b4d22d016ca6e2a8c73dfca7d3b38f4d6e89e20125b2d20de9f7dd3a53fe8f8ae69dfb30dbae3cfdd8fe7c2ee3684225ee13880bbd7a1492bb13f65542764efda1ffcec52b7a12a41d2380dee1afdb6effd5fc360fd573c5f3e85ea44b243c303b770e0843ad08eeff52093b39b474f3cdf07b477076d6c675b9f"], 0x22)

22:58:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:58:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f801002000400003000000000000008000295d20d2f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100080ec70325132510000ec7032510300000000002e2e202020202020202020100080ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200080ec70325132510000ec70325104001a040000", 0x80, 0x11800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51800}], 0x0, &(0x7f0000010f00))
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1f, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="c62aa7", 0x3, 0x7}, {&(0x7f0000000140)="de7a952f82", 0x5, 0x2b71}], 0x2000000, &(0x7f0000000400)={[{@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@nodots}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7}}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', r0}}, {@hash}, {@uid_eq={'uid', 0x3d, r1}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '\\'}}, {@uid_lt={'uid<', r2}}]})

[ 2904.903170] FAULT_INJECTION: forcing a failure.
[ 2904.903170] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.905008] CPU: 0 UID: 0 PID: 20422 Comm: syz-executor.6 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2904.905041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.905055] Call Trace:
[ 2904.905063]  <TASK>
[ 2904.905073]  dump_stack_lvl+0xfa/0x120
[ 2904.905110]  should_fail_ex+0x4d7/0x5e0
[ 2904.905146]  ? shmem_alloc_inode+0x27/0x50
[ 2904.905180]  should_failslab+0xc2/0x120
[ 2904.905224]  kmem_cache_alloc_lru_noprof+0x76/0x680
[ 2904.905274]  ? shmem_alloc_inode+0x27/0x50
[ 2904.905304]  shmem_alloc_inode+0x27/0x50
[ 2904.905334]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 2904.905365]  alloc_inode+0x67/0x250
[ 2904.905404]  new_inode+0x1e/0x160
[ 2904.905445]  __shmem_get_inode+0x17c/0xe80
[ 2904.905492]  __shmem_file_setup+0x107/0x370
[ 2904.905536]  alloc_file+0x11c/0x500
[ 2904.905566]  __x64_sys_memfd_create+0x193/0x280
[ 2904.905597]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 2904.905640]  do_syscall_64+0xbf/0x390
[ 2904.905673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.905698] RIP: 0033:0x7f079a4d7b19
[ 2904.905717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2904.905740] RSP: 002b:00007f0797a4cf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2904.905763] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f079a4d7b19
[ 2904.905780] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007f079a5310fb
[ 2904.905795] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff
[ 2904.905810] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2904.905825] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000740
[ 2904.905864]  </TASK>
[ 2904.916906] loop3: detected capacity change from 0 to 1304
22:58:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0xf, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:58:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2909864, 0x0)

[ 2905.003028] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2905.006981] Bluetooth: hci7: Opcode 0x0c1a failed: -4
22:58:06 executing program 2:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
prctl$PR_GET_TIMERSLACK(0x1e)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x40, 0x0, 0x0, 0x0, @fixed, @none, @fixed}}}}, 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5)

[ 2905.011740] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2905.021442] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:58:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xc0}}, 0x0)

22:58:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 5)

[ 2905.097537] Bluetooth: hci1: Opcode 0x0c1a failed: -4
22:58:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0xf0, 0x0, 0x2}}}}, 0xc0}}, 0x0)

[ 2905.109169] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2905.122079] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2905.128307] Bluetooth: hci6: Opcode 0x0c1a failed: -4
22:58:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2909864, 0x0)

[ 2905.176848] loop6: detected capacity change from 0 to 140
22:58:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb5c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

[ 2905.231044] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz-executor.6: iget: special inode unallocated
[ 2905.246975] EXT4-fs (loop6): get root inode failed
[ 2905.248019] EXT4-fs (loop6): mount failed
[ 2907.094420] Bluetooth: hci1: command 0x0406 tx timeout
[ 2907.158410] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2907.159945] Bluetooth: hci4: command 0x0406 tx timeout
[ 2907.159985] Bluetooth: hci7: command 0x0c1a tx timeout
22:58:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0xb6c9, &(0x7f00000002c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0)

22:58:17 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000740)=ANY=[]) (fail_nth: 6)

22:58:17 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1e}, "0ab7c68ab1a2694ccf22754a0034285597693935625fc1f31a12cbf52331"}, 0x22)

22:58:17 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

22:58:17 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x0, 0x4}}}}, 0xc0}}, 0x0)

22:58:17 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2909864, 0x0)

22:58:17 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private, 0x0, 0x0, 0x300, 0x0, 0x2}}}}, 0xc0}}, 0x0)

22:58:17 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = inotify_init()
fadvise64(r1, 0x4ec, 0x100000000, 0x5)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r3, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf25160000002c0007800c00030006000000000000000c0003000700000000000000080002000000000008000200000000001400098008000100ff00000008000100080200003000048013000100f3a962726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a3100000000"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x228000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}})

[ 2916.699580] Bluetooth: hci7: SCO packet for unknown connection handle 201
22:58:18 executing program 2:
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x22)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{}, {0x1, 0x8}}}, 0x8c)

22:58:18 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}, 0xc0}}, 0x0)

[ 2916.699868] Bluetooth: hci7: SCO packet for unknown connection handle 201
[ 2916.746512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2916.780380] FAULT_INJECTION: forcing a failure.
[ 2916.780380] name failslab, interval 1, probability 0, space 0, times 0
22:58:18 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2909864, 0x0)

[ 2916.782561] CPU: 0 UID: 0 PID: 20491 Comm: syz-executor.6 Not tainted 6.17.0-rc7-next-20250926 #1 PREEMPT(voluntary) 
[ 2916.782610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2916.782633] Call Trace:
[ 2916.782646]  <TASK>
[ 2916.782660]  dump_stack_lvl+0xfa/0x120
[ 2916.782714]  should_fail_ex+0x4d7/0x5e0
[ 2916.782765]  ? security_inode_alloc+0x3e/0x130
[ 2916.782802]  should_failslab+0xc2/0x120
[ 2916.782852]  kmem_cache_alloc_noprof+0x72/0x680
[ 2916.782890]  ? __pfx_map_id_range_down+0x10/0x10
[ 2916.782975]  ? security_inode_alloc+0x3e/0x130
[ 2916.783017]  security_inode_alloc+0x3e/0x130
[ 2916.783066]  inode_init_always_gfp+0xc94/0xff0
[ 2916.783126]  alloc_inode+0x8d/0x250
[ 2916.783181]  new_inode+0x1e/0x160
[ 2916.783253]  __shmem_get_inode+0x17c/0xe80
[ 2916.783325]  __shmem_file_setup+0x107/0x370
[ 2916.783395]  alloc_file+0x11c/0x500
[ 2916.783442]  __x64_sys_memfd_create+0x193/0x280
[ 2916.783488]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 2916.783555]  do_syscall_64+0xbf/0x390
[ 2916.783603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2916.783642] RIP: 0033:0x7f079a4d7b19
[ 2916.783668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2916.783702] RSP: 002b:00007f0797a4cf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2916.783735] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f079a4d7b19
[ 2916.783760] RDX: 00000000000118c0 RSI: 0000000000000000 RDI: 00007f079a5310fb
[ 2916.783781] RBP: 0000000000000003 R08: 0000000000008c60 R09: ffffffffffffffff
[ 2916.783804] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2916.783825] R13: 0000000020000100 R14: 00000000000118c0 R15: 0000000020000740
[ 2916.783895]  </TASK>
22:58:18 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a4000040000aaaaaaaaaaffffaaaaaaaaaa00"/34], 0x22)
syz_emit_vhci(&(0x7f0000001140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xb3, 0x4}, {0xffff, 0xffff}}}}, 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004)
syz_emit_vhci(&(0x7f0000001180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x81}, @l2cap_cid_signaling={{0x7d}, [@l2cap_conf_req={{0x4, 0x1, 0x7}, {0x5, 0x0, [@l2cap_conf_fcs={0x5, 0x1, 0x1424676f7b021c09}]}}, @l2cap_conn_req={{0x2, 0x7d, 0x4}, {0x1b3a}}, @l2cap_conf_rsp={{0x5, 0xc0, 0x4a}, {0x8, 0x7f, 0x0, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0x6, 0x7, 0x5, 0x20}}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x1, 0x0, 0x1, 0xbdd}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x7d, 0x81, 0x4, 0x40}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x5, 0x6, 0x7, 0x2, 0x20}}, @l2cap_conf_mtu={0x1, 0x2, 0x3}]}}, @l2cap_create_chan_rsp={{0xd, 0x22, 0x8}, {0x3, 0x39, 0x26, 0x3ff}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x5, 0x3f}}, @l2cap_move_chan_rsp={{0xf, 0xfe, 0x4}, {0x4, 0x400}}]}}, 0x86)
syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x7f, 0xc8, {0x6, 0x2, 0x8, 0x2, 0x2}}}}, 0x17)
syz_emit_vhci(&(0x7f0000001080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x4a}, @l2cap_cid_signaling={{0x46}, [@l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x5, 0xdf2a, 0x7, 0x9}}, @l2cap_conf_rsp={{0x5, 0x5, 0x2a}, {0x4, 0x6, 0xb9, [@l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x3, 0x9, 0x0, 0x7fffffff}}, @l2cap_conf_efs={0x6, 0x10, {0xeb, 0x3, 0xe8, 0xfffffffa, 0x43, 0x8}}]}}, @l2cap_create_chan_rsp={{0xd, 0x40, 0x8}, {0x0, 0x9e9, 0x1, 0x46}}]}}, 0x4f)

[ 2916.785949] Bluetooth: hci7: unexpected event 0x01 length: 137 > 1
[ 2916.902650] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2916.928378] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2916.935559] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2916.943132] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2916.944054] Bluetooth: hci7: ACL packet for unknown connection handle 0
[ 2916.945667] Bluetooth: hci7: ACL packet for unknown connection handle 201
[ 2916.946563] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2916.948847] Bluetooth: hci7: ACL packet for unknown connection handle 0
[ 2916.950849] Bluetooth: hci7: ACL packet for unknown connection handle 201
[ 2916.953500] Bluetooth: hci7: ACL packet for unknown connection handle 200
[ 2917.024185] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2917.025149] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2917.026301] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2917.026965] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2917.580135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2918.998392] Bluetooth: hci1: command 0x0406 tx timeout
[ 2919.062442] Bluetooth: hci6: command 0x0c1a tx timeout
[ 2919.062507] Bluetooth: hci4: command 0x0406 tx timeout
[ 2919.063495] Bluetooth: hci7: command 0x0c1a tx timeout
[ 3089.812692] kworker/u10:4 (273) used greatest stack depth: 23208 bytes left

VM DIAGNOSIS:
23:03:21  Registers:
info registers vcpu 0
RAX=0000000001390241 RBX=0000000000000000 RCX=ffffffff84bf70b7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c9680 RBP=dffffc0000000000 RSP=ffffffff85c07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff86645350 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84bf5dae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e53be000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055def9d2f018 CR3=000000000e080000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=1ffff1100d9e10cc RCX=000000000000000d RDX=1ffffffff0bc3b37
RSI=ffffffff85e1d9a0 RDI=ffffffff84e95400 RBP=ffff88806cf08708 RSP=ffff88806cf08630
R8 =0000000000000001 R9 =ffff88806cf08810 R10=000000000003c229 R11=00000000000be988
R12=ffffffff85d24560 R13=ffffffff85e1d9b8 R14=ffff88806cf086e0 R15=ffff88806cf087d0
RIP=ffffffff8150eacd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e54be000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0ce400c010 CR3=000000000deba000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041075e0000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000