16/298825 (executing program) 2023/07/24 22:38:57 fetching corpus: 12800, signal 268550/298825 (executing program) 2023/07/24 22:38:57 fetching corpus: 12850, signal 268814/298825 (executing program) 2023/07/24 22:38:57 fetching corpus: 12900, signal 269044/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 12950, signal 269347/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13000, signal 269599/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13050, signal 269816/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13100, signal 270163/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13150, signal 270553/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13200, signal 270775/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13250, signal 270971/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13300, signal 271177/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13350, signal 271442/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13400, signal 271721/298825 (executing program) 2023/07/24 22:38:58 fetching corpus: 13450, signal 271889/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13500, signal 272049/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13550, signal 272251/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13600, signal 272598/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13650, signal 272839/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13700, signal 273085/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13750, signal 273287/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13800, signal 273575/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13850, signal 273890/298825 (executing program) 2023/07/24 22:38:59 fetching corpus: 13900, signal 274151/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 13950, signal 274417/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14000, signal 274656/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14050, signal 274843/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14100, signal 275067/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14150, signal 275239/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14165, signal 275285/298825 (executing program) 2023/07/24 22:39:00 fetching corpus: 14165, signal 275285/298825 (executing program) 2023/07/24 22:39:03 starting 8 fuzzer processes 22:39:03 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x30, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x10000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x58cb, 0x1, 0x81, 0x401}, {0x9c6, 0x2, 0x6, 0x8}, {0x55d8, 0x0, 0x2, 0x3}, {0xff1f, 0x81, 0x1, 0xffffff20}, {0x7f, 0x0, 0x7f, 0x2}]}) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r2, 0x8, 0x4, 0x6c, 0x0, 0x1, {0x3}}, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0, 0x9, 0x2, 0xdac}, {0x4, 0x70, 0x3f, 0xffffffb3}, {0x3ff, 0x83, 0x7, 0x9}, {0x7, 0x6, 0xfe, 0x100}]}) r3 = syz_io_uring_setup(0x3756, &(0x7f0000000140)={0x0, 0xc6b1, 0x2, 0x3, 0x29b}, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x6b0e, &(0x7f0000000240)={0x0, 0x17bf, 0x0, 0x0, 0x1e}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x7) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x7, 0x1, 0x854}]}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_io_uring_setup(0x7add, &(0x7f0000000400)={0x0, 0xbaf3, 0x0, 0x1, 0x35a, 0x0, r3}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0xc0100, 0x0) syz_io_uring_submit(r8, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f0000000540)=@isdn={0x22, 0x3, 0x1f, 0x1, 0x8}}, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r10, 0x107, 0x16, &(0x7f0000000600)="003551792a636d11c01549f2eb1541b41ba726f983873d95", 0x18) r11 = signalfd4(r9, &(0x7f0000000640)={[0x400]}, 0x8, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x0, 0x9, 0x4, 0x1}, {0x7, 0x1, 0x2, 0x9}, {0x7fff, 0xed, 0x0, 0x5}]}, 0x10) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0xa, &(0x7f0000000700)=[{0x5, 0x4, 0xcf, 0x20000000}, {0x8, 0x1, 0x66, 0x1}, {0x7, 0x0, 0x0, 0x6}, {0xfbff, 0x3f, 0x3a, 0x3ff}, {0xf000, 0x2, 0xf7, 0xffff}, {0x1, 0x2, 0x9}, {0x2, 0x1, 0x7, 0x5}, {0x40, 0x1, 0x7f, 0x6}, {0x5, 0x1, 0x60, 0x6}, {0x0, 0x7, 0x4, 0xfffffffd}]}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000800)=[r10, r9, r10, 0xffffffffffffffff, r12, r5], 0x6) 22:39:03 executing program 2: sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x24}}, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104002}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x67}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9f61, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) r3 = dup3(r1, r1, 0x80000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x148, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x148}}, 0x20000000) r5 = openat$incfs(r1, &(0x7f0000000940)='.log\x00', 0x20a000, 0x2) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004845}, 0x4811) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x12}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff7f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r1) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x20c, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xcc, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb145}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "4bbe6806c4a34c4f3c1ce65b8397017941723ee6caa4"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b364b1ed9a0c9c10582d2001c6ef16279b836f5ce605b8f6ea8ce57b63"}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "30fa3816cd9272ef2c119bb570769b0d4554c6bb"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r0) r8 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x82002) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, 0x1, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) 22:39:03 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf22fb1ea1065f502}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x10800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x1]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e22, 0x1, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x0, r5, r6}, {0x0, 0x8, 0x100000001, 0x81, 0x0, 0x3, 0x7a18, 0xff}, {0x6, 0x1, 0x101, 0x6}, 0x7, 0x6e6bb8, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3506, 0x1, 0x3, 0x4, 0xfffffff9, 0x6, 0xbf}}, 0xe8) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'syzkaller0\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, '\xff\xff'}, @NFTA_COMPAT_NAME={0x6, 0x1, '\xff\xff'}]}, 0x5c}}, 0x2000c804) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpeername$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000a00)={@remote, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x4, 0x3ff, 0x54, @dev={0xfe, 0x80, '\x00', 0x3d}, @private1, 0x7800, 0x80, 0x1, 0x688}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000bc0)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'ip_vti0\x00', r5, 0x80, 0x20, 0x8, 0x100, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @timestamp_addr={0x44, 0x3c, 0x24, 0x1, 0xe, [{@empty, 0x5}, {@empty, 0xd664}, {@private=0xa010100}, {@multicast2, 0x7}, {@remote, 0x4}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x24}}]}]}}}}}) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x13, &(0x7f0000001000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r1}, 0x14) pselect6(0x40, &(0x7f0000001040)={0x4, 0x3, 0xfffffffffffffffc, 0x100000000, 0x5, 0x5, 0x6, 0x1}, &(0x7f0000001080)={0x80000001, 0x400, 0xc9, 0x80000000, 0x6, 0x3ee, 0xff, 0x100}, &(0x7f00000010c0)={0x8, 0xdad3, 0x5, 0x80, 0x5, 0x101, 0x7, 0x100000000}, &(0x7f0000001140), &(0x7f00000011c0)={&(0x7f0000001180)={[0x1000]}, 0x8}) 22:39:03 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x100, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "850d851726508cd8a7f0feae999d215cb6ce7d7a831dc1d10b3da7619df32e94"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xb8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x70, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0fc90077baf9738c2aac60384fd8a213b709cdfdd5243e3cb3b50867cc5cfb03"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "02b9adb15f9c7f70e6f75e3744ee340f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e8c318ba08443b1ef17b61a83b60ff864174e38a1d0193cf33885e6e679b82c3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x1, 0x3f, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7c}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}]}, 0x70}}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) r8 = creat(&(0x7f0000000840)='./file0\x00', 0x148) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8087) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0x0, 0xee00}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000001980)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f00000013c0)={0x580, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x344, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',+#[\'\'$!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcafe}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan3\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-]@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{&%\\\x19*.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5b}]}]}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "777b02521308285658f396c997c2eef03c51bb1d0e1bb48a90870658e7b45274b0dfb0b4b64e058b61be441a30e00f894e1f"}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "b2fa726f6dcc61860665b41c17c0a10b21382be05a04b84c4608e0b4a8b3e270b79de10a00474b25aa2206b7012ce3fcb28e4a067fb37d76f867aa0badc5390340286862ba4d307123455f813471aebc09bd900007f56f4aa49fe888b47573bd911651b4a46d26fd006429dbb94143ad16961e8f1e9c76b22c51f3db48d004c4a7cde7a3001ac408e1b97ce3eae32f29"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "bae1bbb44a257cbd9fd6bf62450ce2576547e008c2665ba8c2028b90adb22e771d7b3c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "e7569cc55bbd368dc0e0288212890a1ad9e9480c491de2ebd22a4fa752e4c8096db29f3b9deda71f2cf2149ac91595ed2dd496c93468b5ccec4cd17859e46dc171386da97d688bf645863831c3bb5635d515e9b81d8820f6d792c43c690beb2b40afc1705fb102ee475746d37860eb251b03546b52"}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "a58a2bd562143f2c279dd64a2a32"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x580}, 0x1, 0x0, 0x0, 0x4800}, 0x20008800) [ 86.876045] audit: type=1400 audit(1690238343.290:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:39:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0xe4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0xd0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2588038d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af34bc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bb6067a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7404}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59801882}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee28cf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b50b06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4774}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78e74bd6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45a2fd0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69913e9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f7d2bd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b862f01}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540a878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8267}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82b6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab11025}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62f1dc9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cb3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33061375}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f232a25}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fad8cfd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c7a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4000084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x184, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b5c1c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f7fbf10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63c44085}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52360057}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59283e02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d5a8d1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b6bda09}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d4776d6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43e1a23e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd47a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a479bfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5d25ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4944f730}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x147eea21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37e668ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e26be65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c97cb33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6a121a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60c097b8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e2e2470}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ed307c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xce77577}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc343}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7f6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724a59f8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = creat(&(0x7f0000000a40)='./file0\x00', 0x3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xfc, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x8000) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x98, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 22:39:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000bc0)=@HCI_VENDOR_PKT, 0x2) 22:39:03 executing program 6: r0 = socket$inet(0x2, 0x6, 0xffffffe0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x7fffffff, 0x2, {{0x1e, 0x4, 0x2, 0x30, 0x78, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast2, @remote, {[@noop, @rr={0x7, 0x1b, 0x7d, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback, @remote, @broadcast]}, @ssrr={0x89, 0x23, 0xbc, [@multicast2, @multicast2, @broadcast, @multicast1, @local, @loopback, @multicast1, @multicast2]}, @rr={0x7, 0x23, 0x5b, [@broadcast, @remote, @broadcast, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, @local]}, @noop]}}}}}) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="f574cceb89750b96d04d026355a2543a416646c87215fe74bd127e9f1000dc18e45f861e216b874746b34f7ae66926c10159b9d961bd7a0f2df6c9055bcd3df689ab2a1abe55965af76e8267a9c022adf7ab19c2bd51ecf9e34e863d6fea258dec06", 0x62}, {&(0x7f00000000c0)="753f8803b0857b6b1530", 0xa}, {&(0x7f0000000100)="328baa985123faecb7cc3ad32fcddf84e1c6b6880969c40162b792f23dcaf939c30443083bcc9be4e36fe0a6481690f4ba878cc346bb98da8c31ff037e79c1affadb0882be518bfb7112cd564359a3aa571d6156b4ea5c2276164d62ed97471fdae747ef2f929602b7aaf38b27118e7054d254fd23ed19de16dace5baf17d1be0ac4f1ee67ea551b7db2db98d92af0ce72482582e0f9b75261cc1b2e33ce4bc8777d0a21dd326d81cc3963036db95231479c26a5e5ba1b7c241f02cbee1e0be4868943b49b00294d", 0xc8}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x80}, 0xc0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000004c0)={@mcast1, 0x17, r1}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x2f, 0x80, 0x5, 0x81, 0x0, @private0, @remote, 0x80, 0x10, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', r2, 0x2f, 0x3, 0x8, 0x1ff, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, 0x1, 0xc0, 0x5, 0xdb27}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r4, &(0x7f0000000680)={0x2, 0x0, @local}, &(0x7f00000006c0)=0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000700)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x0, @multicast}, 0x8, {0x2, 0x4e20, @broadcast}, 'bond_slave_1\x00'}) r5 = accept4$inet(r4, &(0x7f0000000780)={0x2, 0x0, @private}, &(0x7f00000007c0)=0x10, 0x800) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000840)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x400, 0x6, 0x1df, 0x1f, 0x1], 0xa, &(0x7f0000000800)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'sit0\x00', r3, 0x2f, 0x8b, 0x40, 0x81, 0x20, @mcast2, @remote, 0x7880, 0x7, 0x4, 0x1ff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000e80)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'ip6gre0\x00', r8, 0x4, 0x1f, 0x2, 0x6, 0x60, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'ip6_vti0\x00', r8, 0x2f, 0x4a, 0x96, 0x8, 0x10, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x80, 0xc8, 0x3ff}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001040)={0x1, 0x10000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'rose0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xbc, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000}, 0x4800) 22:39:03 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xef81}}, './file0\x00'}) finit_module(r1, &(0x7f0000000040)='\x00', 0x1) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4d3d}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c084}, 0x40010) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x40, 0xcb, 0x0, 0x2, 0x3, 0x6, 0x10a, 0x38, 0x193, 0xff, 0x4, 0x20, 0x2, 0x3, 0x2, 0x9e3}, [{0x4, 0x4, 0x0, 0x3f, 0x9, 0x5, 0x9, 0x7}, {0x1, 0x9, 0x0, 0x1, 0x3, 0x2, 0x7ff}], "9ee3cfb1ea4125bbc3a35a53efb01fb6c9b7ff075f780c5b0918305bc371cbf4666f69b4ba42441fd04938c73017f42ce4ae22dce9ae3507b8079d75848af43eb0bb4369ed06f925578e29fb765a794249c761c15f8bc380b559f2254c37736904dcb799c03e09970bcea87c98e4a18cf4d8be1b82bc77652851612236a5e69788184538134eaca961b3b925cbdaa4fd0118bfc77b34a53f87aca91feb42caec9b4a18850fc2470081784204c024a49f8da95bdedb55fba2950e64e1450bbbc6952b3534e8941eca810c578f12e6ab5be7e402561ace282fe9baa69835043d63f9b17f0cbfcfdee09dd4e2be50056a11c90163", ['\x00', '\x00']}, 0x36b) r2 = syz_open_dev$mouse(&(0x7f00000005c0), 0xe570, 0x400) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000640)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x54) recvmmsg$unix(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)=""/192, 0xc0}], 0x3, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/146, 0x92}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000000c00)=""/190, 0xbe}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000000d40)=""/128, 0x80}, {&(0x7f0000000dc0)=""/111, 0x6f}, {&(0x7f0000000e40)=""/40, 0x28}], 0x7}}, {{&(0x7f0000000f00), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/233, 0xe9}, {&(0x7f0000001080)=""/176, 0xb0}, {&(0x7f0000001140)=""/97, 0x61}], 0x3}}, {{&(0x7f0000001200), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/61, 0x3d}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002580)=[{&(0x7f00000013c0)=""/248, 0xf8}, {&(0x7f00000014c0)=""/26, 0x1a}, {&(0x7f0000001500)=""/69, 0x45}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002680)=""/205, 0xcd}, {&(0x7f0000002780)=""/100, 0x64}, {&(0x7f0000002800)=""/108, 0x6c}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002900)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002980)=""/41, 0x29}, {&(0x7f00000029c0)=""/169, 0xa9}, {&(0x7f0000002a80)=""/125, 0x7d}, {&(0x7f0000002b00)=""/244, 0xf4}, {&(0x7f0000002c00)=""/137, 0x89}], 0x5, &(0x7f0000002d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f40)=""/132, 0x84}, {&(0x7f0000003000)=""/99, 0x63}], 0x2, &(0x7f00000030c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003200)}, {&(0x7f0000003240)=""/187, 0xbb}], 0x2, &(0x7f0000003340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000003500), 0x0, &(0x7f0000003540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0xa, 0x10000, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000003880), r6) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x24, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc854) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000003980), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003a00)=""/55, 0x37}], 0x1}, 0x40000141) pwrite64(r3, &(0x7f0000003ac0)="1e8c5d708fa515a6b36849a386b6ab2935ae76f02204f49dd28a65fe91a65b40538d6d1660205e36a002f707d744a14d1bf39bf9e3df681766ff613240971cef2afd6df9c82cf6bf16b23f8af13e7e8fadd62764b4c9bc84ce534130130ea02a4714863c01602136534383ea884e736ed74f3a97cbc9b43ecd516eb0b706afe5d900a3f9e0a2c5e5322264ad489b4531694de03a7b96f0f6812f8ed3e67574de777183fb3a9e43a4ddb43dfd1ad6f081dcd0acbaa279038bd3cc696ba6a7e72060678ef7e293ea0ac5fffa4f714f899125063749", 0xd4, 0x4) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000003d40)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c00)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x39}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xb3, 0xac, "459f363ecd351441b4129f997ec68523ac417d3566d7d73b320ee6f5122c5b7480367e819ab405f73c2333099797680c886157c1267325c7d9f9f7f1f4b4a231284579548bcba840680e76e945f645fd4c5352b8e0050bcbef45c6fcfc0ac912d7f7e987be19fe2d5d853169d6e3ed89131dce8b6bf6ef3a6a65ee35c28e03665d09c897982dfe01aac4be04c3bb235325f6b5fd5b64fef5b4dd9f50160880c7d7bb443057fe22caaa54dbd65de6d3"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x40000080) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003dc0), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x70, r13, 0x110, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x20}, {0x6, 0x1}, {0x63, 0x1}, {0x1, 0x1}, {0xff, 0x5}, {0x0, 0x4}, {0x40, 0x3}, {0x3, 0x7}], "7926010d93143431"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x5}, {0x4, 0x6}, {0xd4, 0x6}, {0x20, 0x5}, {0x3, 0x4}, {0xd6, 0x2}, {0x7, 0x4}, {0xff, 0x5}, {0x3f}, {0x9, 0x7}, {0x80}, {0x6, 0x4}, {0x80, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x1}, {0x4, 0x4}], "0e982ec93236d98e"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000014) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000003f00)={{0x1, 0x1, 0x18, r7, {r11}}, './file0\x00'}) recvfrom$unix(r14, &(0x7f0000003f40)=""/4096, 0x1000, 0x40010023, &(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e) [ 88.209234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.212182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.213492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.219333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.221042] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.225177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.279245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.281711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.283312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.284732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.288287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.289977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.296002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.296932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.302010] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.302078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.304452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.307190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.311800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.316856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.327838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.340932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.343057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.345059] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.348093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.349699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.351892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.352467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.355924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.367911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.373265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.375157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.376476] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.378791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.382557] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.385971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.240214] Bluetooth: hci0: command 0x0409 tx timeout [ 90.303692] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 90.306672] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 90.368697] Bluetooth: hci3: command 0x0409 tx timeout [ 90.368722] Bluetooth: hci2: command 0x0409 tx timeout [ 90.433733] Bluetooth: hci7: command 0x0409 tx timeout [ 90.433792] Bluetooth: hci6: command 0x0409 tx timeout [ 90.434524] Bluetooth: hci5: command 0x0409 tx timeout [ 92.288393] Bluetooth: hci0: command 0x041b tx timeout [ 92.415724] Bluetooth: hci2: command 0x041b tx timeout [ 92.416466] Bluetooth: hci3: command 0x041b tx timeout [ 92.479707] Bluetooth: hci5: command 0x041b tx timeout [ 92.480417] Bluetooth: hci6: command 0x041b tx timeout [ 92.481142] Bluetooth: hci7: command 0x041b tx timeout [ 93.922988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.926786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.929785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.938758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.939979] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.940779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.336841] Bluetooth: hci0: command 0x040f tx timeout [ 94.352040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.360260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.367118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.379489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.382872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.391751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.464678] Bluetooth: hci2: command 0x040f tx timeout [ 94.464694] Bluetooth: hci3: command 0x040f tx timeout [ 94.527688] Bluetooth: hci7: command 0x040f tx timeout [ 94.527753] Bluetooth: hci6: command 0x040f tx timeout [ 94.528125] Bluetooth: hci5: command 0x040f tx timeout [ 95.999698] Bluetooth: hci1: command 0x0409 tx timeout [ 96.383676] Bluetooth: hci0: command 0x0419 tx timeout [ 96.448707] Bluetooth: hci4: command 0x0409 tx timeout [ 96.511697] Bluetooth: hci3: command 0x0419 tx timeout [ 96.512105] Bluetooth: hci2: command 0x0419 tx timeout [ 96.577665] Bluetooth: hci6: command 0x0419 tx timeout [ 96.577682] Bluetooth: hci7: command 0x0419 tx timeout [ 96.578086] Bluetooth: hci5: command 0x0419 tx timeout [ 98.048733] Bluetooth: hci1: command 0x041b tx timeout [ 98.496992] Bluetooth: hci4: command 0x041b tx timeout [ 100.096697] Bluetooth: hci1: command 0x040f tx timeout [ 100.545696] Bluetooth: hci4: command 0x040f tx timeout [ 102.144656] Bluetooth: hci1: command 0x0419 tx timeout [ 102.591690] Bluetooth: hci4: command 0x0419 tx timeout [ 130.298923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.299520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.637319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.638289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.657971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.658615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.814877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.815448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.826044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.826517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.914243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.914812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.930662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.931159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.046213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.047169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.177875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.178417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.313966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.314495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.389675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.390204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.515239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.516086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:39:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB]) epoll_wait(r0, &(0x7f0000000240)=[{}, {}], 0x2, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x96, 0x3, 0x8, 0x0, 0x5, 0x10410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0xc8, 0xfff, 0x4c1d, 0x1, 0x0, 0x3, 0x0, 0x0, 0xaf, 0x0, 0xb66e}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x26e1, 0x0) syncfs(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = getpid() pidfd_open(r3, 0x0) clone3(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, {0x3b}, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/82, &(0x7f0000000300)=[r3, 0x0, 0x0], 0x3, {r2}}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x61c0, 0x189) [ 131.641456] audit: type=1400 audit(1690238388.055:7): avc: denied { open } for pid=3772 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.643224] audit: type=1400 audit(1690238388.055:8): avc: denied { kernel } for pid=3772 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:39:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB]) epoll_wait(r0, &(0x7f0000000240)=[{}, {}], 0x2, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x96, 0x3, 0x8, 0x0, 0x5, 0x10410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0xc8, 0xfff, 0x4c1d, 0x1, 0x0, 0x3, 0x0, 0x0, 0xaf, 0x0, 0xb66e}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x26e1, 0x0) syncfs(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = getpid() pidfd_open(r3, 0x0) clone3(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, {0x3b}, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/82, &(0x7f0000000300)=[r3, 0x0, 0x0], 0x3, {r2}}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x61c0, 0x189) 22:39:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xffff9f54}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 131.922790] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 131.924357] audit: type=1326 audit(1690238388.336:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3798 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f61500b19 code=0x0 [ 131.951125] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:39:48 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000bc0)=@HCI_VENDOR_PKT, 0x2) 22:39:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="6eec5f9242dd955b911c965da987b3ee61593718c5d13d5e7a09f4e130efcb76ac0018b8853a0f6b0d0462dcabeff3cc111d3f1bd41d6257d6d549cd7b27acc113b2386901c508b06295e3fd1f897f4fa69efed3237dc344d909ebe185438f96990d96f7ff4db73bb644"]) [ 132.078174] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 132.096683] 9pnet_fd: Insufficient options for proto=fd [ 132.105012] 9pnet_fd: Insufficient options for proto=fd 22:39:48 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000bc0)=@HCI_VENDOR_PKT, 0x2) 22:39:48 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)="2f48e97b79b5ffd51fc64ec6a667d457ed1ddb4e9611cd994b2aee3e3daaefec868bdf423c6df8bbf75d547b893fd24454d03074d2b10bbdd6fcf92cdd5ed55e1929697b5ba239ec7d672d82c3477566b40d942532fdf1545d0e9cc35334fbd7e78af29edb131910638bc7928042316f68c7f4365effe531b35dc2caf27906f3869d5c30237670177b92d71134d0393bdd5591199902b698054ec04f7c26a5a9e552ea3b1c52e5b346cab33f9e6a3d344d83b01ec76abcd518517b491bef2436426f904f600fb4685a5795cfaaf6a7e562db", 0xd2}, {&(0x7f0000000480)="f35c3b418bba3bf214ec", 0xa}, {&(0x7f00000007c0)="6fd22b7978f0e6e9cb197993d8c44932c842c498005626326abe7cb43319f594cc878a3187afc51b43bca01ebbca0958bb0ba100313f148fd514bef77b1f1f0756a4769c48ba8e86a8883ccb75d0a54ed279cbef", 0x54}, {&(0x7f0000000840)="ad567c824df8a94132dedeaaf911a980a16dae8ad9d706263ad12442a1f9ead89cc755f05f871105658fba8901058d6417b406150a08c815c70b0cd2fe7c1a610b2eb091cfb500411355ca4f3ca1e63835135cef0985bf19a5977ee160277864f37fb60c0f968d6dd1cd95f8479a7e6d17f4206950d114993cf7017c6cebc4596df63aedc185b074ce6f07a62d824b68247bdee01a4da8b6f45391571af54137030a5aeb14191516e21fc1b9f43076fb0223316ef45b7a22af0bbe346e728dcc4b78", 0xc2}], 0x4, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x78}, 0x81) chdir(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@private0}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffffffff, 0x2, 0x1, {0x0, 0x0, r2}}, 0x3) lsetxattr$security_selinux(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 132.230942] audit: type=1400 audit(1690238388.643:10): avc: denied { create } for pid=3822 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 132.239206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.262744] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3829 'syz-executor.7' [ 132.272147] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 132.319532] audit: type=1400 audit(1690238388.731:11): avc: denied { relabelto } for pid=3825 comm="syz-executor.7" name="file1" dev="sda" ino=15997 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 22:39:48 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000bc0)=@HCI_VENDOR_PKT, 0x2) [ 132.433804] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 132.455284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3843 comm=syz-executor.2 [ 132.466014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3843 comm=syz-executor.2 [ 132.485808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3843 comm=syz-executor.2 [ 132.499857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3843 comm=syz-executor.2 [ 132.510571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3846 comm=syz-executor.2 [ 132.516901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3847 comm=syz-executor.2 [ 132.754299] audit: type=1326 audit(1690238389.167:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3798 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f61500b19 code=0x0 [ 134.449292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.450023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.470141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.470839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.925802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.926474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.947230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.947985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:40:04 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)="2f48e97b79b5ffd51fc64ec6a667d457ed1ddb4e9611cd994b2aee3e3daaefec868bdf423c6df8bbf75d547b893fd24454d03074d2b10bbdd6fcf92cdd5ed55e1929697b5ba239ec7d672d82c3477566b40d942532fdf1545d0e9cc35334fbd7e78af29edb131910638bc7928042316f68c7f4365effe531b35dc2caf27906f3869d5c30237670177b92d71134d0393bdd5591199902b698054ec04f7c26a5a9e552ea3b1c52e5b346cab33f9e6a3d344d83b01ec76abcd518517b491bef2436426f904f600fb4685a5795cfaaf6a7e562db", 0xd2}, {&(0x7f0000000480)="f35c3b418bba3bf214ec", 0xa}, {&(0x7f00000007c0)="6fd22b7978f0e6e9cb197993d8c44932c842c498005626326abe7cb43319f594cc878a3187afc51b43bca01ebbca0958bb0ba100313f148fd514bef77b1f1f0756a4769c48ba8e86a8883ccb75d0a54ed279cbef", 0x54}, {&(0x7f0000000840)="ad567c824df8a94132dedeaaf911a980a16dae8ad9d706263ad12442a1f9ead89cc755f05f871105658fba8901058d6417b406150a08c815c70b0cd2fe7c1a610b2eb091cfb500411355ca4f3ca1e63835135cef0985bf19a5977ee160277864f37fb60c0f968d6dd1cd95f8479a7e6d17f4206950d114993cf7017c6cebc4596df63aedc185b074ce6f07a62d824b68247bdee01a4da8b6f45391571af54137030a5aeb14191516e21fc1b9f43076fb0223316ef45b7a22af0bbe346e728dcc4b78", 0xc2}], 0x4, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x78}, 0x81) chdir(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@private0}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffffffff, 0x2, 0x1, {0x0, 0x0, r2}}, 0x3) lsetxattr$security_selinux(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:40:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:40:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) ioctl$TIOCL_PASTESEL(r2, 0x5427, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001) sendfile(0xffffffffffffffff, r0, 0x0, 0x4001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5427, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x20000000) 22:40:04 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x30, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x10000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x58cb, 0x1, 0x81, 0x401}, {0x9c6, 0x2, 0x6, 0x8}, {0x55d8, 0x0, 0x2, 0x3}, {0xff1f, 0x81, 0x1, 0xffffff20}, {0x7f, 0x0, 0x7f, 0x2}]}) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r2, 0x8, 0x4, 0x6c, 0x0, 0x1, {0x3}}, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0, 0x9, 0x2, 0xdac}, {0x4, 0x70, 0x3f, 0xffffffb3}, {0x3ff, 0x83, 0x7, 0x9}, {0x7, 0x6, 0xfe, 0x100}]}) r3 = syz_io_uring_setup(0x3756, &(0x7f0000000140)={0x0, 0xc6b1, 0x2, 0x3, 0x29b}, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x6b0e, &(0x7f0000000240)={0x0, 0x17bf, 0x0, 0x0, 0x1e}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x7) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x7, 0x1, 0x854}]}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_io_uring_setup(0x7add, &(0x7f0000000400)={0x0, 0xbaf3, 0x0, 0x1, 0x35a, 0x0, r3}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0xc0100, 0x0) syz_io_uring_submit(r8, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f0000000540)=@isdn={0x22, 0x3, 0x1f, 0x1, 0x8}}, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r10, 0x107, 0x16, &(0x7f0000000600)="003551792a636d11c01549f2eb1541b41ba726f983873d95", 0x18) r11 = signalfd4(r9, &(0x7f0000000640)={[0x400]}, 0x8, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x0, 0x9, 0x4, 0x1}, {0x7, 0x1, 0x2, 0x9}, {0x7fff, 0xed, 0x0, 0x5}]}, 0x10) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0xa, &(0x7f0000000700)=[{0x5, 0x4, 0xcf, 0x20000000}, {0x8, 0x1, 0x66, 0x1}, {0x7, 0x0, 0x0, 0x6}, {0xfbff, 0x3f, 0x3a, 0x3ff}, {0xf000, 0x2, 0xf7, 0xffff}, {0x1, 0x2, 0x9}, {0x2, 0x1, 0x7, 0x5}, {0x40, 0x1, 0x7f, 0x6}, {0x5, 0x1, 0x60, 0x6}, {0x0, 0x7, 0x4, 0xfffffffd}]}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000800)=[r10, r9, r10, 0xffffffffffffffff, r12, r5], 0x6) 22:40:04 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)="2f48e97b79b5ffd51fc64ec6a667d457ed1ddb4e9611cd994b2aee3e3daaefec868bdf423c6df8bbf75d547b893fd24454d03074d2b10bbdd6fcf92cdd5ed55e1929697b5ba239ec7d672d82c3477566b40d942532fdf1545d0e9cc35334fbd7e78af29edb131910638bc7928042316f68c7f4365effe531b35dc2caf27906f3869d5c30237670177b92d71134d0393bdd5591199902b698054ec04f7c26a5a9e552ea3b1c52e5b346cab33f9e6a3d344d83b01ec76abcd518517b491bef2436426f904f600fb4685a5795cfaaf6a7e562db", 0xd2}, {&(0x7f0000000480)="f35c3b418bba3bf214ec", 0xa}, {&(0x7f00000007c0)="6fd22b7978f0e6e9cb197993d8c44932c842c498005626326abe7cb43319f594cc878a3187afc51b43bca01ebbca0958bb0ba100313f148fd514bef77b1f1f0756a4769c48ba8e86a8883ccb75d0a54ed279cbef", 0x54}, {&(0x7f0000000840)="ad567c824df8a94132dedeaaf911a980a16dae8ad9d706263ad12442a1f9ead89cc755f05f871105658fba8901058d6417b406150a08c815c70b0cd2fe7c1a610b2eb091cfb500411355ca4f3ca1e63835135cef0985bf19a5977ee160277864f37fb60c0f968d6dd1cd95f8479a7e6d17f4206950d114993cf7017c6cebc4596df63aedc185b074ce6f07a62d824b68247bdee01a4da8b6f45391571af54137030a5aeb14191516e21fc1b9f43076fb0223316ef45b7a22af0bbe346e728dcc4b78", 0xc2}], 0x4, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x78}, 0x81) chdir(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@private0}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffffffff, 0x2, 0x1, {0x0, 0x0, r2}}, 0x3) lsetxattr$security_selinux(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:40:04 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffff", 0x39, 0xa00}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="59f4d27461849117e3d9b1108930e40aa0ca41d42596ba5300e5a0434dc00bbd59146af24a60766363e61a976bdae9d3cfd05562b9910adb9b8db086ed598401f4730e9ebd28056a5fc82e76aa40d8cbb4f0dc31f40a082522cbcabef6c7b95db80f758e6f4ebe80c3829d4fd803777b8827ff97f31fe9ac30742f17545ca1e299bbce325ea5320bc9d2ddc19dfb"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='vfat\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)) 22:40:04 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = getpgrp(0x0) r3 = getpid() sched_getparam(r3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4, 0x2, 0x3, 0x8, 0x0, 0x3ff, 0x20000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xfffffffffffff001, 0x3}, 0x1, 0x1, 0x20, 0x0, 0x0, 0x1, 0xff, 0x0, 0x80000000, 0x0, 0xa85}, r3, 0x6, r1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1b, &(0x7f0000000000)="f16be69c90901ad096ad1449831572dae703658c689b0bd7417442", 0x8c, 0x0, &(0x7f0000000100)="e846eb53b1eb2a1494b9cb05fbe3244b3ab96f786b1a5bc0a3583632f74b4b8f012210febbe1b462c3629641cb242c460da5773ad051f262eb286a3372bb7ac4dfd2b3276684b003038a96221f867bd9db4f5ebc04427afbfe811398c3f17b6a7eec5559a908afca1c76cbd3ee51a00a4976a97d3f706c8636e32497b8942c8fb3035a55812f79e8538b3011"}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3f, 0x2, 0x9, 0x7, 0x0, 0xee48, 0x18000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x53b908f9, 0x1}, 0x4, 0x800, 0x2000000, 0x6, 0x7, 0x55eee883, 0x2, 0x0, 0x3, 0x0, 0x718}, r2, 0x10, r0, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="708b06550f4d67810bfa0873023e9b3a693dbf2a71507f4cacc237e0dbfcf025ffa19651676fa49fe8f1ce56db457339d98cf6c098a155381e6cbee4a5742fdbc6859444699ec8b4b0030c50b4acc4694489d2b686412fd279d2b9652b65446055eac59d3fae5dbba32c8becfc16be99963f71178aab9f5fa84edbc3ba1d11626caeee87de2e3de26be073f63e23bb0f5a32c31ebd72d242beaf0ae95e0f62a161174a085948ff1b3b24f514fadb07", 0xaf}, {&(0x7f0000000040)}, {&(0x7f0000000380)="51ace93f27016d2eeab4a79d4e2e4ea9641cc2f3f2e218be43a0f8f04f958fe1ff30079177c235bc51dee0240b3cfab1de85e3b02a905c29ba1af0c5f8a46af1f01e035a8d169af935ad50f05630413129f6", 0x52}], 0x3, 0x0, 0x0, 0x44001}, 0x4050) preadv(r4, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4090, 0xffa}], 0x1, 0x0, 0x0) 22:40:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x0}) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101000, 0xa0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000140), 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@private0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x6, 0x4, 0x0, 0x10000, 0xa40020}) [ 148.522481] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:40:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) [ 148.593647] hrtimer: interrupt took 26630 ns [ 148.604598] audit: type=1326 audit(1690238405.012:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3985 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f61500b19 code=0x0 [ 148.682964] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 148.810842] audit: type=1400 audit(1690238405.086:14): avc: denied { write } for pid=3984 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.615089] loop2: detected capacity change from 0 to 10 22:40:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x50200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x800448d4, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000340)=@ccm_128={{}, "7484679b6e659b8c", "515c6db1f73187d0643cc60bd826e128", "2342c2c1", "546db627f19c38f4"}, 0x28) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xfffff801, 0x294, 0x3, 0x100000001, 0x7fffffff, 0xfffffffffffffffd}, {0xffffffff, 0x8, 0x20000000001, 0x7fff, 0x3, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 22:40:16 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000140)={0xf9, 0xbf, 0x1f, 0x973a, 0x0, 0xfff}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0xff, 0x0, 0x0, 0x0, "2f9d2f98bf0e301d"}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x8, 0x9, 0x4, 0xfff}) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="d6e18f254fb07f2dc777b62352f048c58bf44903ac00252353f42f632e0d3bf9f5ac3b0bf8ca4e0e3fa5b46913e73d2d1d60464615f2349ada092ddd78be5297cc236dd1fbbf777d73697577b618a9a2810c4c7419553fee57bc516ddedd2e371c60ecfad24f6d489ce5253dadafc2a2d5f6", 0x72, 0x8000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:40:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = getpgrp(0x0) r3 = getpid() sched_getparam(r3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4, 0x2, 0x3, 0x8, 0x0, 0x3ff, 0x20000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xfffffffffffff001, 0x3}, 0x1, 0x1, 0x20, 0x0, 0x0, 0x1, 0xff, 0x0, 0x80000000, 0x0, 0xa85}, r3, 0x6, r1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1b, &(0x7f0000000000)="f16be69c90901ad096ad1449831572dae703658c689b0bd7417442", 0x8c, 0x0, &(0x7f0000000100)="e846eb53b1eb2a1494b9cb05fbe3244b3ab96f786b1a5bc0a3583632f74b4b8f012210febbe1b462c3629641cb242c460da5773ad051f262eb286a3372bb7ac4dfd2b3276684b003038a96221f867bd9db4f5ebc04427afbfe811398c3f17b6a7eec5559a908afca1c76cbd3ee51a00a4976a97d3f706c8636e32497b8942c8fb3035a55812f79e8538b3011"}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3f, 0x2, 0x9, 0x7, 0x0, 0xee48, 0x18000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x53b908f9, 0x1}, 0x4, 0x800, 0x2000000, 0x6, 0x7, 0x55eee883, 0x2, 0x0, 0x3, 0x0, 0x718}, r2, 0x10, r0, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="708b06550f4d67810bfa0873023e9b3a693dbf2a71507f4cacc237e0dbfcf025ffa19651676fa49fe8f1ce56db457339d98cf6c098a155381e6cbee4a5742fdbc6859444699ec8b4b0030c50b4acc4694489d2b686412fd279d2b9652b65446055eac59d3fae5dbba32c8becfc16be99963f71178aab9f5fa84edbc3ba1d11626caeee87de2e3de26be073f63e23bb0f5a32c31ebd72d242beaf0ae95e0f62a161174a085948ff1b3b24f514fadb07", 0xaf}, {&(0x7f0000000040)}, {&(0x7f0000000380)="51ace93f27016d2eeab4a79d4e2e4ea9641cc2f3f2e218be43a0f8f04f958fe1ff30079177c235bc51dee0240b3cfab1de85e3b02a905c29ba1af0c5f8a46af1f01e035a8d169af935ad50f05630413129f6", 0x52}], 0x3, 0x0, 0x0, 0x44001}, 0x4050) preadv(r4, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4090, 0xffa}], 0x1, 0x0, 0x0) 22:40:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:40:16 executing program 7: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x40000, &(0x7f0000000000)=ANY=[]) name_to_handle_at(0xffffffffffffffff, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)=@isofs_parent={0x14, 0x2, {0x6641, 0xfff9, 0x81, 0xabe, 0x3, 0x7f}}, &(0x7f0000002340), 0x400) 22:40:16 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) 22:40:16 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = getpgrp(0x0) r3 = getpid() sched_getparam(r3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4, 0x2, 0x3, 0x8, 0x0, 0x3ff, 0x20000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xfffffffffffff001, 0x3}, 0x1, 0x1, 0x20, 0x0, 0x0, 0x1, 0xff, 0x0, 0x80000000, 0x0, 0xa85}, r3, 0x6, r1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1b, &(0x7f0000000000)="f16be69c90901ad096ad1449831572dae703658c689b0bd7417442", 0x8c, 0x0, &(0x7f0000000100)="e846eb53b1eb2a1494b9cb05fbe3244b3ab96f786b1a5bc0a3583632f74b4b8f012210febbe1b462c3629641cb242c460da5773ad051f262eb286a3372bb7ac4dfd2b3276684b003038a96221f867bd9db4f5ebc04427afbfe811398c3f17b6a7eec5559a908afca1c76cbd3ee51a00a4976a97d3f706c8636e32497b8942c8fb3035a55812f79e8538b3011"}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3f, 0x2, 0x9, 0x7, 0x0, 0xee48, 0x18000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x53b908f9, 0x1}, 0x4, 0x800, 0x2000000, 0x6, 0x7, 0x55eee883, 0x2, 0x0, 0x3, 0x0, 0x718}, r2, 0x10, r0, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="708b06550f4d67810bfa0873023e9b3a693dbf2a71507f4cacc237e0dbfcf025ffa19651676fa49fe8f1ce56db457339d98cf6c098a155381e6cbee4a5742fdbc6859444699ec8b4b0030c50b4acc4694489d2b686412fd279d2b9652b65446055eac59d3fae5dbba32c8becfc16be99963f71178aab9f5fa84edbc3ba1d11626caeee87de2e3de26be073f63e23bb0f5a32c31ebd72d242beaf0ae95e0f62a161174a085948ff1b3b24f514fadb07", 0xaf}, {&(0x7f0000000040)}, {&(0x7f0000000380)="51ace93f27016d2eeab4a79d4e2e4ea9641cc2f3f2e218be43a0f8f04f958fe1ff30079177c235bc51dee0240b3cfab1de85e3b02a905c29ba1af0c5f8a46af1f01e035a8d169af935ad50f05630413129f6", 0x52}], 0x3, 0x0, 0x0, 0x44001}, 0x4050) preadv(r4, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4090, 0xffa}], 0x1, 0x0, 0x0) 22:40:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) ioctl$TIOCL_PASTESEL(r2, 0x5427, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001) sendfile(0xffffffffffffffff, r0, 0x0, 0x4001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5427, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x20000000) [ 160.340897] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 160.345050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:40:30 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x0, 0x803}}) r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x0, 0x4, 0x7ff}) 22:40:30 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007, 0x11, 0xffffffffffffffff, 0x47a79000) r0 = syz_io_uring_complete(0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e6ff0000220493732903fd149f8586d61c6a53fd388d9af2502bcccbc0a471a1748bbfc1c2306052ceeb5253409712695ca15b8ba7e57de58cf3677330c85a20ed361ec417d6ee515693384ce5fc121ed727dbca63bcff29c6c62e7218893409b28ad2f3dffaef83dd058a47d19959c6e8285b1ea8176a458a05cc6d08bda676a31d0eec634ef9f35740386a7e3627843e5e5857f6cd1348dca3b8c86d15521eafc6ebea2e7fc2590422ed95cb94964694349cbaa82a14b5ca6919f5c7b72d08c754c35afced2bf0b58999b430a734ad71d85238bc5d772b94bc60b980"], 0x19) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000019c0)={{'\x00', 0x3}, {0xffffffffffff8ccf}, 0x8, 0x0, 0x0, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)="0d8c2d0b1d5da68622ac896b1e2d920ff507b81fd576616f5e0761a68cf4c3a80d0e195201a53f654f63", 0x2a, 0x0, &(0x7f0000001840)={0x2, 0xea, {0x0, 0xc, 0x6a, "a61b60ab7d464bd770a09ac560cba845a535713b423efe0fd60af1eac436410520703e95fe60a5ade58abdda68e1fab7569d68bc9e9f2cd1f355960e6837ccd3bc06e1b0e8d24cf038b8eeb26da8d5f04ed012b54019ca58e457b6fede6c63795204b546457672d16ee6", 0x73, "38d2651d5cca17cddb60a42fee3fafb9f886d994d9972f5fea7d1c1dc6a365e44718163ddee64f525a97bef85a3e3f08ddedb125c422cf04dab9fbae5533ab66220c9640c2892b21df8455dd4736069632fa9c8a20ac1fb9d9612b0df8dc32e001ca55f3891d2a3008d444564d2235197f94e2"}, 0x64, "8f2a1fbce22d5c3f17dd6956ba2d02453285ea961ad311d29320674e2423fbdcfa6ca5423d51ceab059da18f66d2c9f79a82d4db46a06bc4a6bf5edc36bafa9b396dbd203f511de7fde5bb4d81366acce69fb0ae8795ae5f6f5cb1b963d17d945b28b08d"}, 0x15a}) recvmmsg$unix(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/206, 0xce}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000001300)=""/138, 0x8a}], 0x5, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001600)=[{&(0x7f0000001500)=""/234, 0xea}], 0x1, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x2, 0x100, &(0x7f0000001740)={0x77359400}) close_range(r1, r0, 0x0) 22:40:30 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, &(0x7f0000000280)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x800448d4, 0x0) io_submit(r1, 0x2, &(0x7f0000001480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_setup(0x1, &(0x7f0000000280)=0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r4, 0x800448d4, 0x0) io_submit(r3, 0x2, &(0x7f0000001440)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x401, r2, &(0x7f00000002c0)="09b3d6f7caa1e8815e0958bd704a38fbd0d71e95c2527ea234da915ac650dec4fe9cfafa054a90ecfd0df28140c8ad0aa34379f47175d04ecdd7105354b4b29c823a7516e4846b7c79b1f018cf2417f8ba8b1b9c972f76b819727a67095fa3df07653844f7918bb87f54788ee9d3107ccbeca9ef3cef5952895df8fc1d7f838184fce4cfe63bf7903d44972e7de01143d3e6c3a7b838a5f46531676ab03c4c8bde13d887db1792058c050909e2256aeb16821e8c367ca9eedc3d70fd692a29d6ad0d38ef1301fb1a085ae417891d6c85d018e497935e0274c37a8cd8ef601e668ca8714aa3a79fe848bcac1ca156e3207e82dc086675d0760c1fcb5e8557bc9fb9b6216c2137ba87e9038f475e651f61a66a38118163527e5d8f36e9442ba7fe9f47137ae4bfdcbf3bff937d526f5ce25f4c61e39406b57ed63fe8b751e2eff1851d6ca5a66a02435a303553921b3433b9dc8085b90e5a4912fdbf787aabc1d91870a0512be94b6efcd06e013efa34c5f65a7718b2cbdf69e2dfb231787bde1d7f59edd3c563e56e2db6535e33af8825d2a906c8c96ba808f74449950203b791171cd1e5ca65536d66aaa2a2154295283854162b6de1b287cd5fb4fdfec26dbcdf2094ab227b7ec92981649b9ef2581360fbbac59bf2217b81b022f8f52a278939b24c8c97884ad9205b6d6d3d99c42c158918e077fb609956d7f8b336fa479ba0f5709e795d5ae580b7b27df095d668262b10c45d870827a5335db4c0f088dbb3803ccbd7554b211e560340d939ff848a2a0b946e7fd6080f0a3c326cff8f90bf9cce59f4fd865a5f85a0b0619f9d9698fc7eedec8cfcabe2e4e0247889b53de690d34b27a18fb9536bba30c3b2a691b1360663a3a98c7f498e2a34521cbe3361f1547d6243b8dd77d461f2fa25868161f94e5e4996b2b2453d0aa712e64c0b5f48bfea4c35e722b9e85d18b91afb721c32b96914411d6ddfe111ac02b9229c8e70990dbcf89931db45ed9ed10f3e39a8880fd09b7bce0727227d821b2274dc0f44caa10092825ebf19dea0d9066efb6ffd5904c53d7db00b88c61ea98925a33fed10f4f70901ec9f5fe1dbd9a1e55d1dbe82a61a234c3723f1b41ca7196b84765e1b23c559a211818a4ae7d22c7559f49717d029d9ca0f9caa2ff2a0f7a08c2dfb74af3c0d681fc5bc26dd884f1f0d129ba435cfc47492792be325071d3e564dba68a024a713e6af722c3f8997eb5ba81ea155af7a1fed488954fe5c6ab146d9c5b1ea228069c77edc0c7da4aeff1d7fc3d4e98418c18f1c5f8bb2d4e9170b9fcd9ef4c84cd90ce37a919cc2471906e7e0cd79f8a77efa1f7960d7c37bf414e3bd84e4535faf1a3d4ee250a6367e19f705884cd99b617c118d776519af2dbd93955cd53481e9fbbe7a80b032a3474686160d940ca99b7aa208afe1a39198851840e2236918aae35aad2adb613fb15df756187dd5aa91cf4b545ddf9d475ec47db26aa42298ed75b8878c530f002dcc7f3124b616e7d423c1a4833f12fab5af0b4024af5974b2eb6b09176c8c6424b51546dcebab9ca6bff7be6f5dd8cfeac00283391e9229aaf44a2ca9d4bbde8565825d7ec6272dceb9190d27ed2f12739edce5ea78abfa9b3d444cc92e375bef3b70e5591f6af98978d1bb0e787c333fbeba4e1cc8e60a722115bc0fec52717faf071eba8a81c5f7bcf1c49f092678850097ba2cf51a8860d265d9aa248a6a0da54be920288ddfdff9a96783356d6569e00a4b83eb8f9279d9507280718b9f318eb6e2f4a66be6342f39c92292977eaea78e46005ac9f4cb5562002069fc9e03b4b8d1aaf66587858ac46c592d9483dc3fcd9164d4756fdc6c1539f22feedc80064d8c830620f1a014973509a87583dd3d114ad324499946933da0445c4680f524ac6545e9ecd624bd733128c1f6b20763a3263bd4f5ad89451ed89a49febd2d087e842a5441de60cde5ff4850ee2763fcc39e81431fca3e504463f4f919a56c6736f4b61451750937e8733f6926d8e71c37e594952cd2194e34f89997c79c40525a5e83ec8d5a9dec4df9e2170a90c8cd6970bedf3194aba72f1e0328a112d42e1e3910db6f3a75a95cbad7068e3bb1e66bfcd343a8f6a65dd6b5e427e46d83e9a3de35070351229538dc25545ba2abd05c55d7bdf244f317aaca65e5dab18596875cbff90148eeeacec3d7e4e4f0b2e6723cb6fd5615a1c2d9a7bc0063139cd34556dd3e70d7ecedfa8c9f0bdf1b9a149ca961b7870aed5f8f17e63c4bbcc963531fdfe0cde414e99cec82e8edde050d658e88ae0297ba7e6b9e0c8901a810ffbabba4107e867cd4997cb838905c82aabae9294ded2f541855725357511bf3e32de854982af3ed00f4c7a207f3cf5477a85aa40f8804607441ffe0ccce4a8efd6213d13f32d391100ca4557167b25c43d5937c1515374fe718f6cd9df690f54b2ae736e60d004ec4b4560b333b14b0b11309b1bbd50b78b9f626e80f617e7722ccc41c3e3d316f7819e52e615b232b3d37c0a71c127672375147c977c6da52b3ee17e05882e901e4db49d48c5e5fb11c50b351d982621b54c379e8624ff196fdd0936443dc350e4b2a5cdc2a66cdf3a61fc8416cd0e9b03c607afd2bab10aa50f7914fcd9ebb392628b2aa7dbafa6358a95479a9d4983a76e9bd557e86f193bedf0f85ee3588227febc5cba10cdde8de901e901a805af3910e8caca7141063d0373def493e8d43eb4d5f1ac8db2e58052e000c9e3171872ba03924e987e8f401dced4490e5adc2d4a669c1d67ed6ae31239de7c6edbb19b0e8a7ed542f94badbc700e7bef4750435e76147bbc5598cb9e9ac2b55b04c519228a94f25d8a77ce6a5c91d0331df43602d35900ee7499aae07605a48105680a471b27cf6fe9b76869cbaac3476af62c030335fd3078fa7bb23adf612ed2e913103df72769e338dcf55618ec114f80c780e9a7f769e00d801faa4d60d3a8393e4000f84c197e9b6968554d045bdf27fe91985cf58cd57e106a6ce4e411291d2e4f18e97842e4090ebb4684e7bf1c283083ac0a13a6e39d705fb950ddb03d74bfb27a8c62eb4a9b12d346e5c00f16c48ee1dae988bc3ae25007999f576532becd303339b6685a591ac240de0da83455a2318232111c78df65a90659c47289f2b2e72b2f2c27e8fd668ecc8ae664c6990b32da0df7db1b23e75c4f14dd4ed488e59a73ab998d7b93cb9a13e4456499e4d455acab043f42d1e254149d9a608925484600d015f587646fdc2d8a08c1ca1668d48c624e3a85bde4c1a18cfc26cc6977bb6fed15563fddad2a3599304123cf246870e12ad8b4fe4a1d9071c64cd8cb1029ef7aae1f41523a4c516e2133faafbacc92e71dfe4c327ed572d70e2bb302ad030e2fc9633200ad01d8627d12b1376ae2dc51af6e4df5ce19f0642d0de0d1746812223f12b0437a8985fd9e9111122765804d22cfca750d0f676da2ceaa2a9a8681bd9439c6dff1c91c96693328d511485aeb15561e9fd3b009db6b573bdbc43e16da1a8025b4bd56a1553d2cf4a1f17f33d53ffa0676d67867ce22fc040fa9e3fd948f38e148276b3b43a8b623134dcb8c20394c630be6bbaaedc75c7d1c9ed7f7eb4382be92efb1286dabe53ca66faee21e4803506a76a9ba99f8d4735524f34361b54776337a64c02d7c43870fb7edcfdb996afefb7c47eceaf435163cf1af0d733ea5507368a6bf70b4e4410ecdf372f06912a8fc42a051f5ff269bf4e6d5f4624707b5a49c3a70361e7921ef05a0490b50425dbdb2d7d149815ffbd45798da03cb92971afb2422dc856c8ea8525e10199c1f10405314c6f6d146da4f62385ddc56a15b23dd525c6bb981f698bc22d3874a79b7d74a5ebe00b7825057143a31d32e095f1d5b2a34e19a878f6c6f70482a70fe1da60466a77f156a91b4646bfb96c08a85194a2d5e37dd39c092e184cd7640ba2b415fc0fa82b8db74f0538105329883a58dce2789b8860bb21f5e111a0907cc52243be60aecd035e7ff8d9ade1e463100c6f94324a10ecf6d8e97ff013b4cc06b6d8fb9799d6c50dc6caa3b895969150eca95902c225f8e29ea929e5a11a2818742c77d4449e13e098954cec398e5f07718d8603a5ac7b94d04c97348329cdcb59a663db77c6cdae2999a758d6e5180200ae7f871019ab51f203cd889f4dc7080e1389b95f9296e27aec241d8ce28ed714a9cb482e82adbe6950bf52f7bca92d3c9f950296a977c9493abca429cfa8c7a54d912b13b2368c9bb39f09bd1316bff2d274b8e61ff7b68f3d48192773d3141982f9a644610268cc919e4a91e569aff9228b18af10677646b19734261b0078a1d1a7c5763b5d1b08648ae6c1a98a723793dd802f50fb1d7864d64fb24993d710f7aed4b4809d4d7d96ec1701e085ca7d73f510157ad12cf1762858380743e0882d8bb0d12539f641a28366bb2a5cc10e576308df38ecc9ab8c29a899d94612466f3ffeaf02f1de4793846ed1bac466afdc2830a333f4b1e61f81cd4fd7a1300200f365b33cfe3ea9a875a5126d9507b9c52c4e36546a0f210cf3a5bb8aa3cf3e987e80c5add6a6cf592453231d0d1e9c3faeeba721ec6c0cd6b0067667380477ff4799647e3b95baa43e4c5a2df583a2d3caa6c429b2f3d115413f45773c886fa415a2813ce7e13bb51f49b3e965d81a4bcf691458cea75ef0177b0ffcfb1bedce4752d4482fd10208decfa8cdb77eec47bd87d0ee61638c4b07a718a13f7b48e9372b99d8c8f2e36f6859f7c22b6e38576225c60b2ab994c355a6840989d65f1f48d98ee816da5a0ac300bd43a9f7f6843d33db5fdc89fb79b2d68f4464b59df1cfff903ff40dbf8d9dca38159e695505d0eecbb26171d72040655334cad0d5430f73418f2acc9a650f94821bde5808fe978d3c7849c4094c610b3ba3bd81b113c8ef732f3608b94af294c0e4a317fbb66cc21ed88e6e3c1c465ee282257fab2243549723b5bcb9a30a342f443292abdbdbbf5f322c652f61fc1532722ff531225adabf6f7ba4f79f9de18d0c7f4a9cf85e7435171f62ce60d2ab2b41c07a81e593fdebc11637f71e420e38b92937bb82d1ddfb4c11790bbead089f50945ccb7e73d03a077bfc172b54c5ba2f61314ebca21d4b918e582f2b8990cccbd744f131fda687c873f74a320ee78bedb882f9ea38f8e9f65f5c8bf23eea1cbdbc4bc99d49b36f397be5ed8660748019b79c487a71ff4f8c5c6c7295dd4f13ccedaf6004da856e6900de07c4374246d8fe4843cb5424ed12bb1c43c3bd479cc6fc668593ae69b2766e8b678cb31c359864cbd8141ba7285ff9e295e2f28c6e06f6ea863bb41bc510b7d502c08a1818a6e9d55bd453e6878cd49cdb3a71590cd17435929e418efb5d71d50da5060f82c77ae9ba5e70912f2a7f9cb1ea44586c30dbbee31a7923220bbeeebcf2b4f6c9395f5cba2fd13b1ed82d230da824b97570bea137031b365c37e1cc1d4a0b073694d4372f962437faecfb4d11586b9a3cf7b8d1d6635f245a3372ca0d4e743c7932a3f190c09a11fe556fd2e762ae1ee38708a651403c0d4019c761656ac2e7b7d33ca89286251aa2d09c0731f42d7816bf95ff867fa60bd7187e40dbdaeed4123e3a2506c329a090992294a25d6abc4bd0af5e688ca4e20d03ec162607c47b8b45bef2eac3c78ac98fff6a041a6342619a4d02bca814ace71c6db87032ac2ba20c6f4cef572980ce26818ff54226de4ce377be186b479475b2586e01ebcff475ea2a7c342a2b", 0x1000, 0x5, 0x0, 0x3, r4}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x1f, r0, &(0x7f0000001300)="2fcfb663e6f805f00ed1e01612182750aeb5f6b793ce2a3d45496ab42cd8c83dcb2fd81e9b551f6819c5dfaa52e47f9ba6c4b3a8f2627367535f12b953812ce6820293ca558c34b7cc76c71d6d6ee85e7295570b84a77587d7d73b74a5ca19d734b2ea5ce8348864561cde2b750fee061d20602e04e37dec21a0492b4b014fc4af7cc3aa8ebf7422b7846592a48f0a877a6440d753adfbbc476e284fb9b62d2b94b2ea07065663269068dace097311a602530b98313a4449f27a583cb2391d02db7a089eb72ed5e89da493a57f257d63f589b4ccad32a9b39f2aa7bdc23c5004570fd3081afc74c44d", 0xe9, 0xd4c, 0x0, 0x1}]) io_pgetevents(0x0, 0x2137, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f0000000140)={[0x2]}, 0x8}) 22:40:30 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x58}}, 0x4010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x3, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 22:40:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 22:40:30 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) listxattr(&(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 22:40:30 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) syz_genetlink_get_family_id$fou(&(0x7f00000016c0), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001740)='./file0/file0\x00', 0x0, &(0x7f0000001a00)=[&(0x7f0000001940)='\x00', 0x0], 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x8081, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x1c, r4, 0x225, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002dc0)={0x1228, r4, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x90, 0xc5, "47e3a6dbe9c3dd40a97647ce5a988f5ba68fc2fef916333e434a3813a94c7ed94f1c002f51e34e15e82164c946cc72d5128bc77275c65685fef50061e04c72401183006ca63eca8218863820b9577d39c0afd37dac00e9eae08552b4116b3e0a04e4f3225b1abe8442d58c3bc1921f438b18270c162f3bc130a066a716957be880109a8666575ae4ab514eb8"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "f7fc3ab6ca4a4c19119d4fc427065c9b1a0a49871c22bd8546ab32574fc8facf18db24babaef71d234b3eb4958cd53d5615e86760600b50c0953cec13e6e3215b5360529a565b7ec1dfa72091bc2948829431b6096bb483a814772"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xe5, 0xc5, "1052210c8347298a8eb671adad86601a975dbfd78fccae9edc3f1aabb207b48dc735237f0c1814309efa7d718fd1b6e55a8f45b82a397742315c2b7f8eca2a1f7d137ba1e71a220c055387bd5f85662dd65b37b24da23cd0fd4bcab2bc5de57b69ee219ceea79c796601cdfa5ff5744946d5e8fbaade82a55485cf4aec5821add5aa12e2e87a6f34018efc3e7d9750808354be7afea15f1a9db7c09b31029c587886da6f8c0a62097c3ab17439b93d308ef17b0ea4ca85260a2e89986e5037d442b3763dae63537c98112cd4693500f1933639196d7c1fc9e5c76f2fdd042e01f6"}]}, 0x1228}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c080) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x500, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x6000, 0x20, &(0x7f0000000480)) syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), 0xffffffffffffffff) [ 174.218299] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:40:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:40:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) 22:40:30 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 174.300753] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 174.302278] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:40:30 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x464041, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) write$rfkill(r0, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x0, 0x1}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}], 0x1}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) [ 174.314674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.326283] process 'syz-executor.7' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added 22:40:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) [ 174.356038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.374372] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:40:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(r2) ioctl$TIOCL_PASTESEL(r3, 0x5427, 0x0) close(r2) openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x80000) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000380)=""/221) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x0, 0x7, 0x0, 0x0, 0x40, 0x9d59cc855cace2b9, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x59ea015a6ff69280}, 0x0, 0xeb7, 0x10000, 0x2, 0x0, 0x2, 0x20, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x4001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = dup(0xffffffffffffffff) ioctl$TIOCL_PASTESEL(r5, 0x5427, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x828d1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:40:30 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:40:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) 22:40:30 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000701c19a9f6a298632fd5bfae1cc9b0f169183a89e9b6cb9781ce49f883adb0000100002ef02b7d7b6d59da9134b79bd468b2ae7919b943b265aabebae1c9a3b0deb3157"], 0x2c, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x81) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = dup(r2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r2, 0x29287000) r4 = dup(r2) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:40:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:40:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) r2 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3f0, 0x41, 0x100, 0x70bd2c, 0x25dfdbfe, {0x16}, [@nested={0x18a, 0x68, 0x0, 0x1, [@generic="15e1d80b688e3f0c886c4038a382997843a376f6aa82cd2e0262bc00d2581b40012d7bc9aadf19e7a59fd36f2f3cda1226364a19f7ab3c3f37257d5d67143f3bb6a1890bb80a578679232feb5138e44b971f8e14dc71011b0a56abe682e3ee965596cb474bb75e0a7abe828eff896667a36ec4c7a33acfd3006fa47578b2ccc92b8686fef592c5186d1c0ebbcbbed2a8dab61682b9a1ef5997838dbe5441ce061179917fbc7c05e63e4f25535d406797122b5f906aa9de209633c493a05ae3f76182707d743b42fb1e45567f5c9b6f899cc5752b664c5143e101f7ba321df5e7145e366e0289ee2c6184bbe12b864a99b4ce606dec57d5d9", @generic="0fe6da57aa6abd866af8d07a50ab84e05508798ab3ff5d6b06349388b661ee7c9da769a357cb7cd1dd0cbfae2bc817d4b62af5e1404177a0f9b4f71cd0d9c97b907264c6d6ee2ce07a1dbf86cafc047f91200323c78154ea5b4101f5748287b8180918ab038a5556c6314315a29095be9ddee9a2426fc7651ebc", @typed={0x4, 0x3a}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x95, 0x0, 0x0, @str='sip\x00'}]}, @nested={0x249, 0x38, 0x0, 0x1, [@typed={0xd, 0x1f, 0x0, 0x0, @binary="709bcadb89add98d31"}, @generic="e8e80e36e7f0d16709bf54a7d74bea8d678e39eedea68fe8839313d66b17ade2f17be68e04aa89669cfacf2941ab0d93dda3a436982d988672a9dedf768bbbfcfbb79717402d1c2522a44a602297dc443c6a8377ebc172e9f798d850971c463eda4c0a6062cdb2b745a763e30718a0bccd65bbbfdf7686975561defacef0eceaab52cc533fdc2023ad5775847955faccfc38a9596053e9800d", @generic="bf5c9aa391eea6014c0148fe7217044c9691f6f929a46feb9110fed6907408b8806caae28bbacf8b218a235775890fc7dd6947f4c318b1c0763d1ec852b7c92ec918e03dedfc7b37a856839413ce9f64ae4bf081949f5dcaa3adc8ece0ebb920ed5df7b047acde60917ec47cad8ea18e75e78db863136f9534dd82968077db6263a309bc3642444f7198487f421b17a195c0587ce803f5770ec1278f4cda4af57c9eeb742befce04c702d776a609dda27316e59ff35d390895b5685f2040eaa1df7f33", @generic="2ff8a3520dc32cd89ad00bca393c25eeab40ce6457a0e4a62c1ec5339eea5582341b2dcbcd5c7083c65809b4ca4494151053bd37ad9b7359dc56da82ce8580fc96156095e672376e6c5d6167c53dfb5c6a78df58c0f62a3a2fd903c087d7396b1b0fe445071aa7693e8349f3d171b879e7b0063f4aa921718e8e59fe6d6abc446d9c1bb73e143dd53e8247d3308b407852d2fdda999937a3635e028c3492c30367c3e960579755c6fcf78ef4d68b4888b472d8acb51666f70ea3c12a6fefc89a7ff4a9a6a9c13c7f55a20abc446e18dfd6be6104910dc8fbe2"]}, @typed={0x4, 0x64}]}, 0x3f0}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3baa446a98c2e19d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 22:40:30 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x58}}, 0x4010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x3, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) [ 174.545599] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 174.557470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.583845] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:40:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:40:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x3, 0xff, 0x4, 0x0, 0xffffffffffffffff, 0xe3740, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x635, 0x0, @perf_bp, 0x108, 0x3, 0x401, 0x5, 0xc, 0x3f, 0x0, 0x0, 0x605, 0x0, 0xb274}, 0x0, 0xc, r0, 0xa) pread64(r0, &(0x7f0000001400)=""/4110, 0x100e, 0x8) 22:40:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000001c0)=0x9, 0x4) write$binfmt_aout(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:40:45 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x58}}, 0x4010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x3, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 22:40:45 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, "f1eb57", 0x575b, 0xe0, "22caa941bd7d83032958bfc37dd62c4bc9d18eed0d6f89974aa3340856384161acc7a089589bf09fad2e8eb7f78ab0900e7de89385aa056e7bbc4d99e337a6914818f0c9b44b62f58f3b3531402b9130b557c06eaa6988f6c4d8bf212d14be95bf689d00f6eeabd4bb40d77d63f71037aa024346517493bd979aee90775a9688dffe090a7cc9f160392dc192e71d1e871472693882ed46d690118767b39bf9afec8f038fd7ba5730b91d43d76bb850e8589f9e3f89a592ca79adbfdf25d99abf402e51d43d38fa852ff3256b263f35c2267590f2425abfcd1e0e23c97d81d0140718da00f0835d50504b595d4c5c87c3"}, {@any, 0x3, 0x0, "3324ec", 0xd45, 0x0, "d00f0c6a8a6baee27b2df6f2703b74ae3f69072735c37ada34e900847af2673a9a3f40662a2b723f3083e2d5bb4ea87f9bf6c72b4d0e7c7ae1d9c229b366e70f41e78581458ebfb0798f25c0d5526f44934b5c42316c3dc6d86a0a300286a8a2d56c5af0a23643a426d677adde7d8c131beb1113e0730d4451fe9870dfd314f6579d01ecc3e0b9d25f24e46be8586f35f6489049f8d7d0acf92bf6229bf25743c77d3f0609a32240b697b0f92ae3f561b6c413d94935c8a7ecd4c1013e1adc553141e2bbb04bc1a154977f61baa09cc3fec922f8cafc35563641775453519fa241dc820aa5848bb64e8534b4f78eb42d"}, {@any, 0x9, 0x2, "c8caba", 0x1ff, 0x5, "cccdec26d8b6495c4ae4c8614fc55df6c209eb191ada74cf7a09113c54e8497074e3c9d66273fc3c3980005b15e6eec6a6a56c6166f6521c16d03bccdcc7b7c2ccf64aa664b22fc2020b42b4a3e7e48453299b8f5c1ceb303edcc75d220d3e3958bfea048134fb7afad23444d3050564d6073ca42a68faa7661e12b2cdbae50ac20bbb87a0b5f2b6772b1bc8ef5f1a9d28830066ac9f50b7a34158a2bd03b544c90715d887e6dc070092cd1472d888768eda059960c6571f9baa5b65846eb092b57573de113febc52c15b2018ec540f3a2bebb4b123c8b304cea7c2dc753ffbc06ed98522e6c86997c3ee3e608a3778c"}, {@none, 0x1, 0x1, "a2647a", 0x8, 0x40, "0c03ae4d4d463c9fa4a4967f5ee9277343da002033b474c0fe66628d9f42a6bdd16b8cf66b3657a40070b8ea9263afded9ca580cfb9f174db1df34692977cff8a9c659b3ce3c9b70e48770aa965720f8016905978451aeaa1910b05ea78831a193592944e85f26ec3a02b727a8c0530d55a2336b55b60823e0ffeb75f66e4bf1d14da20d21fa817528a5aaedaf356c0d6c164cc2efd0bdf46919c2adee053ced6cdc82337788134ba5b8a48c1fb60603a1f6f0aa74a7ca2cdffb59fdf44d84a6abcc10e0fe03cb7fff74d6e6faad9862d7b503dc5b346300f9e3a723eaeff11349b4169135752abbbdf57a9701ce5a81"}, {@none, 0x8, 0x1f, "0dffd4", 0xd1, 0x81, "0accd046184371f5dbe60dd4b23ac61685b7832ad83800774cec964196d15bea548025f8bb83ff122950123b162c79982d55bca2ab37d17bc4f2ae0334439ce5cf9e0ffd2b867f3946d735088c1a2ae41a84df0b54ccb7bb556499a818fd146a69bb9d412498a7ed96189d156f66f979b7092abd72ccd95faddcb32cb83a413b78b1543de4fd8cb7dc4992d2338896a9fc7369ad1f0f99bbc63cd0eb285efbd7705eb72ef283e57fe98ca991848c0d3f452059a51b0de93f92c814e3fe109061336cc5d2b47af79ac764350098d61c633e61a22d13d8a5599ca1aad92fb9f929213cfc6e3c76bc89d1685220775d3587"}]}}}, 0x4fa) 22:40:45 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010", 0x4c, 0xa00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\'']) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x1, 0x5, 0x1, 0x0, 0x101, 0x12002, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xae4, 0x520, 0x84d, 0xb, 0x8aff, 0x7, 0x101}, 0xffffffffffffffff, 0xa, r1, 0x8) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x9, 0x2, 0x0, 0x0, 0xfff, 0x80000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0xc7, 0x1000}, 0x800, 0x3, 0xac0, 0x7, 0xfff, 0x2, 0x6, 0x0, 0xe6, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) readahead(r3, 0x1000, 0x8001) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r4, 0x4b47, &(0x7f0000000000)={0x0, 0x8001}) getpid() ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000300)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1f) r6 = signalfd4(r0, &(0x7f00000001c0)={[0x1000]}, 0x8, 0xc0800) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000240)={0x0, 0x4, 0x4, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) chdir(&(0x7f0000000280)='./file0\x00') 22:40:45 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5301, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="757365666e65652c636865636b3d72656c5d02e2bf13c5"]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5301, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@bca={0x3, 0xbc, "ceca47bb4b7a9b6534f5feadef814608f8bdc84abb15c4b171dad61d76f5a638ab2538305c03e52ea25e3b01f2f013be3491cc8e811fa197f5dcc6ff8ce53f2734543d9134cd92e308c21460d7d4f3d1a47ce591bb3d43d0ab5474a30b8e1fa84dd817d5e059d034c6473109bb642d18b17e263e7f1a41d696c33886a59383b4db752772fdc315059649d4086a1e989cf335639083148de7a2efd4fc4cc3546f80ce7c3bdbeb4a2d96cf055829e1babb21e83f734c1ad9489f1e45d8"}) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) 22:40:45 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 189.181512] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:40:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) [ 189.266400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.273607] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:40:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) [ 189.307400] FAT-fs (loop7): Unrecognized mount option "usefnee" or missing value 22:40:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) pread64(r4, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="010004000100000018000003000000000000009b98300f28766ed40bfa48283f200730be245f88be34f27bb2a440d03d0849891609052e64957953ac5e20a393f427918520582e8b5924d306021239a8e5da9cec0710598e5a234628a483a0d18fc095c1cd4e768ba9c930a31879ea2d6333146048e5d85c79b16e741966d11377a09c5d81a7a79fec32357781ad4176564e3614e49d804675d577ac6db47cd207d4239f6a736df18f7c01663044f9f01188186506fe3c551aa5678604da59c0219715b0070ea5ae2dfcd05d0ed202675211735740ba66fb74acfb3e9a82b08e2a4c3950975a5a05fda87dd74204bb457f25a89a565b", @ANYRES32=r4, @ANYBLOB="02000000000000002e2f66696c653000"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="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", 0xfb}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0xffffff66, @private2={0xfc, 0x2, '\x00', 0x1f}, 0x5}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000600)="8ebb2275d4dbca64f3fcdb1cd8fe37b85bd9ccddee57a6e45aa79d7aaee5fd1130ac698a2e0df60d132b3e1305c1205e7d28287cf3dd168bf8d303353dd8835543c9b2e1f0dac2a0ed72842825dc37d3e2da2e85bfc1d39d021db80f8c5b324671e11620335854200f71169c364daaf4cd13d3d2131f412976660f7b86b0825029bf5cb34c132d5b75da0c0f55fe66326c08859838adf495592d9627395ff2121fa3be70776856f8a7d70d766aabf5bdd03d45269f996ebcd6bf3dd38c5f60844d551e4ffc64ff7a2db2073c94f25c3de301f58740a7b697d4d0079b21e3b4179513504314ee682ae9aebad82e70c7fb35156bd5ab5882628fcddb29e35c7c58d3750029b56ec0be3d673e23149151869a4ef7e92904b5fdb20fd0de45b3a45d67dfa4a469947b850ec4a54b3e7fb1beb3db816f3f7e040d940ed3429b21a8e2cd98a90bf1c76797711f23d381bf41731f7054482431fb018ad59eff48f92e874c9b09d0a67f7a2e90036c3a6d7343e330dfe9ac6db7dddfceb1febd9159edacbf4cd979451ed3c126b47fb663aa0404fb46389cc6b8c8aaa6fefca642e61e753621c38da0a6585f886939921dbdf5f7f17d31cd292bbe4ff15f2ed2e6830ed079516262b0f059ff2ea932a2dc1f4294b7191095e71cb37fdb5159e9088b507992022ad13b6ed6bced698a007caf0283ba113258271da9b0c0c579fba4650d07e461d238a85918b11c95ab46f4496726a9d46a0c1715c75055fa48d8b3c00c96a8e03c14ff6d35519616805276e74a448305240ca6c8d4d9b3a01cff5a8c018fb80c60e7a81c23fadf7fd5ad2ee55708a3118d76c8c56235c89ccd2d6b0fe4d02e41e62824ee95effe66f276fd7fb289601978f7284c64d4d52e7d1a1f6b8473909a6917ba63c5f00a0cc4047eb1b76bd5e7c8cd575baacc942aeabc8ee60048cdad2729768858b61c2b27218279ba015065a7824e74435a7d4179c5ed4f0367d8089e64267d4bcec108fb641f9078dbe34c237582f21acf663e25b9535e706c5413cd5da814782859e760afe76fbdbd82179a637e2f042fe98391c45f6ec121267982a9c07e165188cd3be4a69922dd452a8771d21716ef71596937a554ceb47bc7236671168ff4025c37ddca10feef989e687cbbb5050a229eb2a2362bffe058d44838fb0ff2bd886d784b6f218737a424e20c3f2b7fb3c7bba8b809ab3e2b7ea33b42e48884a09d06c0e1bfbc957e1f252a0f2dd9eb47ffce44372aa1dc1a6905bde28ba3d272987b79bc9ad129384e120aa895be7159ffdd4e6025279385037ff3ba94bef31bebb8fe6b7cd05a1fb822f64b5b718ae38cbb2a701bb001079c59354d01c8a3d45de97be73930333446c2b50b1c035d1980bfc58cbd0d3d3728bdc6699456b34084e5f4886358636bb38db0931571bf1e26558ea29506e4f4de45a43b09d68f8c992215ae815566b39f5746abd47fce08b0b69f2168b56a9b2fa78d38622b174598a3fc4557e8e985ce8b5d0b8324956b465c4640681b8a90f2c270a3ea9172f274ac9f2f5138aeb9f28a2c7056a5c0b38202681db07d286c98775d8a6558dd9b4872019c0271d2e8ffe8af5258abd9da9be6de73a2cb533e5f5b3a2a7d632b825e7f21bb1f75e6601f8d1264aa5f7d8512b57ad3489c61e244aff9b3c4b9b850d8d48b7d467d30369790f5bb80f6f4bbb8b8e6697a61a088619e4b1b3af06188497e3227efce3a612015505d9a659c7902da049b52bea4c4cfb0d96f6fe1f4672644c3433e7578121ef18a1dc53f22486a6ea2836f64a03018dbb6261c6e27dc494e77111c4f07345986c7f3b04c300dce13e803fe85bc3fbb3dbc6d281f4e8f10ac1bbfb2e0904de8531d102b7cfa7d83be5d4fa4c7553d999ce80620fb4cef53a70b2daf25d80ca88c25eed3efc15b760571fe9e125ad5337434edee6cf64881bee70eb7d25b6d9720e92fa27b474ef4b2aaa7f1d1264daf234f2069e7a0db37d3c3a984a1bbebddc8d8f6e0826e4d21102158e61f553f3568c60d749d1d06f28b00eaf5cfd4050626bb39de436c800b818d952985a9aedad3d2da44049791c2789aa52610e0bfae8cae78f5253860578eb65dc9cce9a367def7dc016cd835f47c969f6d7bf6f2d6d9596e2ee03af34575a5e96ad2fb7b9212ab1fdcb85a0e0168d91f53c98359530f271298a751b39773be93c21e56a48d8fd4c9bb53218ef649fa213432ba03017049d8708639ce4fd539d9ccef17b80aaebcb266debd7e637847c1a8073208cb4930fe77df1a7344e149a0339319b7514dc82ec5627c5b7e8cb4f25404c5f92d7a1f086cbd75a6ff21df4fc3216e8a1524594b5bbac0e0f2f1f80190db56f5d90c2ed244ff53e7377d132bc40e31adae4d6cc3885275e2fac03f729095d948ca61d91cb23450a0095aa8b1681e3c6c7d64b12192bcdfb5f30d1e8f07fb6da99689252a851ddf3277a0ec3d717a4f401be8b62cdc20a897e0794ad5d2af2d09317943a13c7ff1ebeb6f50df3cce5e3ba2d08c1e27e73013c7d0f3eb679a09930c87cd2b15d07413c7e7d25480f452e5f89e2a6103f92f9b31c99bae61fc7f77b9deed6e2f58cc2368fbe54cdfd8f689b4dae0b8b964ed5f131318774e440236a995cc81f1892728ed05fcb62548384ae482704d6c9fbb63c1bcf266f03ac8723d1940787bf66f4a6e668fb37810438037eae74827bb4d85531ae0912f546e56dd323584c85537449e4f409cc8e519f092c2124fce91eea68e43abc3509d1ad93ad33c3fb249adebe86bbfdd85eb6a0cbcfe4fc889a87dd25ef0696084c38bd38d6694549cda0ad4679db510602d491ccce6aa8f1226f817053a4a70de2c652d08f3de96ae4a6ec9a702d131f528ee6271f786b73e5986e376ec5a45ae10d465615d096b6293673c9554661c701049e366df611130ad61368b618df96560b40071a6161f873b5a8729e726647a4aa0e755b0bbeeda088ec19fff9b52c8d5cbcc630d480e98f45732d5b8fd83494ac0954855b4a83a4b982891c7244f80a9a28b5a0b9408f4be5253d7804fb48447df550211e3fccc9c8466936988c3e5321444f180c257ce61899c5a8cf3ac81470d79059ae49c6386d49abde610e8a4faeee43ac3c08a2ee8053387d8e4de5769546c26030202a22ea52c779c5e13e24ae49786dc06bc85fe4f7df33d3f2d81f24ea1f8e6b2ef0e5dbafcc5609f45ebb7232229fbb8ef8e660e309419650f7f10da137b75b666e8232c6889e77562c6ce70b8c44b1439ec8ffa8f3e1f9dc263eb7d51c9137e9c2841495b49b3e46d18deb9e06c8c0ae72f10dfd9d6789ffe73b4a1cfe927d3f3402fd23a0074bdf913a853d1609852f76ecbf37930f0ded72126116d9cf02b70f5c8071f03c8a3641e52decc1c1680ca78ae5f5f10641ba444d28e9a29846d97022459841d722eb0b104be9834ef7f135498c0ed6279b5679cdbbcc81ed2387cbcbcc09cb0730342f1847db60ed21cd5258aaec2a0b99c3531dc45d366ab102d29ea4cc6ef7a3ed4191fdc9286677c7ef9127814920650d62425cb1b826d242e77d283a297d3cf6f81ef492bd32d6b7b4446a2594b05fd672b04a8b5e53c4a87807c0c9c743fdcb6ac9ae915e7b7b568b0960f14d449c5fa4d31da2db614139de26961587fa77f2286efbe0ab85d681b763215b0f8fec3459a62fb86c6171b1d0e2727e51421e87d2bd8e1a9c2c8be813daef87a3dd2a5b321020bc5c9e7509150f4af6a668b358de7f58b73cba65c8d045d049c7469e51474673544ac7e28b177dae4eac09e5d8105f8d3ff4140a3f4d35cac836c43d6a9fb52ec1449efdd5a1be25960ecfdcb7e3d68a81fd667e0d07114ee9654adf74c8db119c60cc37a5621bdb34089c4081dded4679fdefab304eb7c3d24473e2fc31cf875dfa46a63481b7d790c7d1bca35093869bd9b44c5f38f006fde2e8b8051b78e694fc6b7c9ce0119e15f3f5ceea1621ae9e278a6c6797086b09474581e332001061018eaba579656c286b1325ca74532c96109bdd0989c31e65496bfd40015d490b6f16a4c7679302fdb119844affcbe8525817f06a9831c58bbfe7930678d06ec5c1f792fa6a569178262b2356b8191bacf10dd213c204a83ed8a044d9978644755864a4284cf4db84e5058d6fef32e48a2d0b66557c157b3bb62609cd036a6c8bd271433e424a597adf72a3dea514e234cad9ce64c260e5c8a50cad4eca54ed6451002d8d6997934f25ef811169f6b7e36dd8c8df305801cc4a4a5694df06c6f91234c92b62945015b9675efe1c8db91a9ce247db7e1dc6bdb8533826711c501888fd4c181af509d1f5232ce71d634457721e28def59b0db8118dc91207ea7ed4f8d89d3f064bc4c9f0eb32d3752fc948d779569b36a0e6a558d010980cc104d4bcf2deb476b20d47e28662e55f05e0064e35ce591bd1b8a7ae10eff70b3a5736a61cc0687268fb8cdfbdb30dd01771bd414d4e1e03db47eebcb27ac839d5cbe71e4237b03a682a303940926d488366effb2ee66b8b7e5feb14d149e7160eeb40eb9ebd3747fe83cc7dc4bddc7a917508a85e59670921d20d47f9cdd5eec5c14ed34fd2d3740d578c2158658bbe231c1a1eb6d90dc349d16a85c440d867dd4b02ab4063e04cdea6bdd6201266e46c46cb1d2c7406512d5c86e9f6d1eea33b4efda98ac7e989a3b3c57d950b2c0cfb9e5d8ef70a433969ee6f2cc4a7f5b23f0fb513b9c39aead0df0644621f970f4e647cc4a418ebf6ca2e094dd3e764930c7dc39f7dbdd8431e41be871573712b936cde99094217a48daff0309a8b7e5e459aec61cad2be6aa9e7bcad7cfb0628a9c88ec102846760dd6232d251a0e50de088834bfcf2c7736003b301e28cff1b566bdc72eb4bc18358cd739c2680a3ba919ed6069ff65e0e9e6c0104992c39b30e513368dc0955690d8a43a410db36bce95746f03b58c3cdaaa9f8286b5085fefa72c25cb55394e82c4c202c6631fd01f298648ec2ef15f2aedec6601334201b4c57780e11a5dff5c81a6cd3dffd25c150e8193c605ab650baa82c098dc57703957009c777ff8a4a7f7c58d22ad3d570fa5fff5dac7473dacca9044ebdd601ec7a226d9dec88f3e2fcad19509af6eeadd63776b18dcf7b7046dfd7709cd1f3f24c171aa5d7593bf609cc0a01bf3bf48d7bbbe5dbe5216d0cae6f95135d8198e1a2ad1cfa9a99c8497862093a669f02e0978ec1675e418aa335a7632e05251614d739600c928829786a156c83227a99c0203b18cf519fc27380a0bffa0f1befb9aa97dd0bd4f9022fb7460a11e49027740a45075029347bbe649a5a01572eab5e3e96a8944e595c9f159966baa3338a5bbae1810484758dfd125c7570ced37a7078e28393752e7a844299e3a7b9fa4a3ef68d4306cb48edde7984982191bc77b74659907785c763e822b7e025d763a43cd4d44359aa4b6397a1fb9db137a691f89d147ea636aa47bdbc272ed89f963def377cddbdf1ccd5d289aa73497301db4ae4914493359410a8dcddb9ce428b752f3149c0956dc0d2dfa9df499f1ceb48e02bd93aecd6385ac6fb0d8c69cb5343c7e167b0c6be258499188eb66b5a0d9e4145144365703a4854c13ee5470579b822929ac8edba7acb47ba189c720693a62d2d0ed412117944502370d15a757d7a3554870997de8363bc1773e3871ceab8d14c890619d480a54920a76caba24c2c9be6b1e2958705dcbca2c89b4937925ee0c797647c5055f8e6ca85f8ac01728e0c1f4ef92", 0x1000}, {&(0x7f0000001600)="d18e0539e8cc3f3ad588039e61f0020b1fb58cd38b90cc879510e8d59dbc049950e922ae05b766d62aeafa72108ad4f339fd", 0x32}, {&(0x7f0000001640)="3f324b89491019331954c9cf68c8297420cbfa18a46bf8aef63c1c29dfce68e533698c33c32fdcda4fdfbe4cb40f8d74783c98f0aaf4b013894f81b425c02a16472e26c33401b36e7614a03277fff5c3a4fcd4fbdea5ef5ad5fb208713631df516248ab7488cbc5d124fbba8f34a8bf8219096c0439bd309036e660d503b42a5", 0x80}, {&(0x7f00000016c0)="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", 0x1000}], 0x4}}, {{&(0x7f0000002700)={0xa, 0x4e21, 0x80000001, @mcast1, 0x7}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002740)="0fbe9d8130afa00a4a80b28e7dbdc1bc9d421562968b2d4bfd01b2ddc51c18ac126b73f97c541eaf15e0131e87f62ca0c51ca9deccf926e06af18765b50f0bd6deb43a81f88a639aca903a0619f261a8e73806f7d403f28d884c4d464f5eafb07510c72f4044abdd188e1fea74ebd505e349e6d345b810bf49f37610433e2597aaa66ce37bcfe4bdb61727425a33673ea3f8de849e61c10047c2389f212232523b48ef", 0xa3}, {&(0x7f0000002800)="1e5b4fc17cec77b2cccff1232ab64093af33380746909f41843d6019491f5b499d973851244089977d639be44be208575cf7a46a85ef70a72d7d9edcb211cbbde0dfd622b3087aad9bb001c80c88bb7eb474f95bbb628147fb4b47994db15974c30911930e2d22865d4839db83720fa54fc63d7033f25577099b3a4094187152bbe35bf2f0a6c951286dffc05a9465f246fac65f99fc6699116abf9a7d9e679a17bd713c06094a74374ec967ce0580160aa98e06c0731f30093805d655", 0xbd}], 0x2, &(0x7f0000006740)=ANY=[@ANYBLOB="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"], 0x328}}, {{&(0x7f0000002c40)={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000052c0)=[{&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="5998322e0a9dd2200700dbd56f17525ce86659874e038150192e7785b6fbb9b44e212d6648cb1747a187c5d9e92f7cf7add988a06dc5b50d6bfe49a006b09972024d73a8dc506912e1e32737822ea03afc46fbb0eb8ef395f11940833017c0b001e655dcca49dd9e9e3e790dfa8adfd0ab39604e1f06e885f892d7cc90c414e7ce27f7d8058aeafaf40e16d9713b789d1bd0d8b8f19fa63d7e9dd41c45d5095a0939d23041419e7f4256cd5a564d49637a1329ab50c67fd35c1ad7d2ab2cbeea9187a9dda64ec116aeae9188dc8ccea7834baea50682df0871954fb0526dce863dc977de5109", 0xe6}, {&(0x7f0000003d80)="8e78751839f027e6ac2dba90b24f04fbf89683c4763d51187e9212bd7df1952e8f9eceab307da9ab09897133fd373a7be05d0e49261dffa55141c0f7242d4522bd52b1cea8f6a552d7faf5586368c9330fcfec202608074d3b9d6ae9d1f7035d72746b2149770a2b56123a62453c584c8102b8417132f946dc16f54d9232716d905d0f6ecdd070361ed78d638e4c33e725e3aae288db96aca3e3029c4fa0feaf6a299a3f8678d19b4661911e4b33fcb0b009724a678a9178a514769bd290c4d7ee4552d87b16d83ee0adaf48d7ed435385bb0e27ffdf9e298cebc88f0deebaf246ec7bd23393194c36fe461643", 0xed}, {&(0x7f0000002900)="0858aedd279b963c9dc9299e9f3f52f796040ef6dd0d530cc90817b0b2eb0a105ff547a3367975f631dc2103d2a8adcbbd1cbea066a8b434d903da347b34c5b9131b1ef85ecff4011cc759a766c1c51987bca4ab7834898e3aa8a5f212741f31e3fb453753fae31ff98ac63fb23d4ec17cf551f1ff3b79157ccefe40f62db3fcc896c00d2930d1a25d841dd735654458285772cf93ce1b60a06364f8cee34ba0e515140b27811e92638420587ad6eebaadfecdd95f7f886f354351c7525c0cfcf90b2f4ad8f97a1f0fee3de1885e14e0d8e88ba0eaa287d77356", 0xda}, {&(0x7f0000003f80)="6782de1872756a982c18bf94bd78f826768c81cc93b59907cf8bd789da0acf7793e64cca137d3fe61a6240430f03d1013e391bf0e2c9e956c4b6661455bac844ddbef0cbb249e30037178ddffa49584e312d61ddb94b94ed9af38920dc2de883a604c8a28fc7eb5e503a3bdeb7a928f692e2734a9bf7abc706523fafc2cddb866e325b69370e117aff71520619fa", 0x8e}, {&(0x7f0000004040)="62adaa58147f287ae18f4db31b798eb638465800b9c82e5153f7a88f8b7b328b5b439a9742f08ad3dcda2ccfb71a0e70e024b636a098ed92746ca1615b8825140509f296e3bc01cdd3f58c58dd83c04309fe8a991ff3e266cdc30d9f2d23be56ba7f71652d79c1e325d0324951821ee0ab96e29029fdd3e4e863ee68a3923700d5123b28e0423b0962369721200645595db16576753e749d7c2ebb8c775a6f", 0x9f}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000005100)="e7643c9c64d7b9aa3dd2c12c15bee2ec6ff0a10b6cd992f488cb857286204c4fc6d20d0f22b06f0f11e31b0577", 0x2d}, {&(0x7f0000005140)="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", 0xfc}, {&(0x7f0000005240)="f5c663c4e0c2264d51bb2dc905e162595e3ff37a0b5031d832be79a165dc2a610bfcf616c3920423028a57ed19317d78497b7b1a5234809ee78538a749e7f4d83bfee0a4b418c554b63c5a3669d5cc796835b54152b6154e933e701bf492fcc9e9c2b9221682a9f6df99d7ce33b610fccae3955e8c", 0x75}], 0xa, &(0x7f00000066c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32, @ANYBLOB="0000000028000000000000001d00000039000000b402e73f00000080ff0200000000000000000000000000018a6caefc01ec5d056fcd104619f14a8542006685882af44ddb5e844a800000007e40d81a1c69b7ee884b67"], 0x50}}, {{&(0x7f0000005400)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x81}, 0x1c, &(0x7f0000006540)=[{&(0x7f0000005440)="4715983d2aca95e444f5a14b7723d9f83842724509920e23448db7a4016e8d4887f969b7fdcf85948c4d84e91ff45359c1c07b16abbde1a617405babaace471c6a38aa6e31385f3b599d537e21f2ce7bf10c33267da728d141d67a1fdb452b7f251571cf380d99039d70512014fdf0f6124c93a7b4c2141f40ddb5c8690f75e27c4b426f6e6dfa4535a5a756ba76bd0716ef4ae46b552365aede54f95cd8987f21287ceeb7920479938012dc88d6f8081f465db5b5509e8242d1b427cf42fe", 0xbf}, {&(0x7f0000005500)="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", 0x1000}, {&(0x7f0000006500)="82d912a432effbf6dc51c99fe05090ab18", 0x11}], 0x3}}], 0x5, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) 22:40:45 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x800}, 0x4c008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:40:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 191.209885] loop3: detected capacity change from 0 to 10 [ 191.230359] FAT-fs (loop3): Unrecognized mount option "'" or missing value [ 191.239241] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 191.298239] FAT-fs (loop7): Unrecognized mount option "usefnee" or missing value [ 191.328144] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 22:41:00 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6023000800081100fe8000000000000000000000000000aafe8000000000000001000000004600aa0000000000f89078"], 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000002400)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/206, 0xce}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/169, 0xa9}, {&(0x7f00000022c0)=""/235, 0xeb}, {&(0x7f00000023c0)=""/6, 0x6}], 0x7, &(0x7f0000002480)=""/105, 0x69}, 0x12021) 22:41:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) 22:41:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2141135a248505a6}, 0x0, 0x0, 0x9, 0x0, 0x6b28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x80, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r5 = getpid() sched_getparam(r5, &(0x7f0000000080)) ptrace$pokeuser(0x6, r5, 0x7fffffff, 0x8) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x800, 0x0, &(0x7f0000000300)) 22:41:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 22:41:00 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:41:00 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_getparam(r0, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x3, 0x0, 0x0, 0x1, 0x0, 0x15, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x40}, 0x0, 0x4, 0x1, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x73e}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(r1, &(0x7f00000002c0)=""/182, 0xb6, 0x37) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8a) r3 = fsmount(r2, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x103) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffff8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000200)='ramfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) set_robust_list(0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) 22:41:00 executing program 4: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000300001"], 0x28}], 0x1}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) [ 204.473273] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 204.489340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.490829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.542067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.543472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:41:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "a7227b81f9ec641c9df931c77a319dbe9360d1546c4314db81a936442dd525c00b6d028ca98bc5cb27e363ac3556e1258dd5e2458b4d0561efa2c2064b09a3206676ea1beff5fd760481fdbd1bb5b64a07a63df2bf781a7f"}, 0x5c) 22:41:00 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000180)) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)="f492a67a3c00bad3169639a1fe6a9c3e989ef0f60dc4d7a64872e3204f1674acace967791d721cf58b8b74cce614c8c18b66e20b07366bba315a44f91a386239f71a72bfb59c7c8f3d54cd8267a462cf07b6b6ebcbc60922601a36a3fe79b07e2359337bd3a0ee52f40abfe254721002254a7f979a46735e6e", 0x79, 0x6}, {&(0x7f0000000100)="eb85fb558c760ff01e7e31a2d0dc8407ddce72974aca719815548999b27a81794eb5e2e78c0bb71472feec59035697d1457afecf2f9d7b97b533bc6cc59ee026d8ac6187ce1bf2c47e0da902f4bf26", 0x4f, 0x9}, {&(0x7f00000005c0)="5512a8e92812fbe33936969ee476390b1f3cd0159d91a0fb91d173fb83be86909e6fbb994dcc6ce34701f36ff5889e4895c3c1a486e1d8592decd22828a3801fc6dd6113c5258d50377510888c2f72b1f13ed789e5bc31b33e2d7a773122c4970d8129808a22bb685ad1ba492f2dc61dfa1c2b0b31617010df9ae51c52a31bb882ab319b8fce43f3c2dac6c02d373e6d8e54a53b77b721049882446ceb68a1173de0352fe3b8d8b37796c5b0a032d15ab61e20b92966e1a6a12f1153d8894309c30a3cf67d81219dc49dd136e54643b766af3a5d340a9db85bf4b017640b472ed98c103f45fe0400000054", 0xeb, 0x100}, {&(0x7f00000002c0)="22ee34c57ade8e53442a623aa508b9b989f350a6a7299c63ba651f5a4e12022bd67ae2d0e935c4ce81b89eb2c62f005dd96c7f45419cfafbcd992fabadd6293847003d921c4f51ecb96bd7d8eae75976e51232887c76aee5a9b232651b320b8c26a093896eaf42531002f647ff3f0e0915a1d6606670d9d995d934f255289faa34882088a8603e52b4c12b458ee5db554f50ff837a9273337829b1ad01ded53c5b89d42c8b968fa3d58c99416b3d8e39119650bff58e8f094391b014fb5d2f4ba39064c2", 0xc4, 0x200}, {&(0x7f00000003c0)="83053482ebf24889ac3747be92bb9e4dbc257558b7783c0f84536db275839885e816dfc00411536f47c07720866b61657c8b89f0c4228f873fb0f5d3a216c66a9e2767d525137e441278d5c6a399f8d48ff81a32d8ded5a2fcb61272ab849d8cf0e3deb0dd58b043817f8e3f1acef23c60e17bdf53bb3427292906b2e20c2d9707da7fd01845b891ec7fef6751200b9457adf8560beadfe90445c9d86d30400f1e27cbb2d5a289daf01720a922aadf70123af1434c377444ddaae5f8d1aa4a90e6c89b3c06fc1c0c66e6cfe6247dc4", 0xcf, 0x9}], 0x4000008, &(0x7f00000001c0)={[{@resgid}, {@noacl}, {@data_err_abort}, {@nomblk_io_submit}, {@debug}, {@usrquota}], [{@hash}]}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5301, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000540), 0x4000, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@pcr={'pcr', 0x3d, 0x2e}}, {@subj_role={'subj_role', 0x3d, ',\'^\x05'}}]}}) r2 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:41:01 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 204.602680] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:41:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x46043, 0x44) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/152, 0x98, 0x0, &(0x7f0000000300)=""/73, 0x49}, &(0x7f00000001c0)=0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='filter\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x101842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000200), 0xa00) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r4, 0x40, 0x383, 0x9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0xbe, "9a5b4bf88a47790809fbfe8c6a973f5360dc205a923335a12fdf02b54458ba6d409281fe7c5191f0da7fade98bdc1a91ac68bab6839ba877231559b6593e48a2979999b01b1e8c444627a656ca64a762fda7531c124e5d763d23ebbc15111ee59d1006fc51746271df97e65dceeff2875b34d00432099bea482dbe6c5094047de9642e1b26a7be0147feb9ca4bbc32861658872d744436b1a01c938bbbdd5907ae1a3f0e3ab69c6eeb5c8b3a564bc641ea415a3244a22df657943ff39af7"}, &(0x7f0000000380)=0xe2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000240)}, 0x409, 0x0, 0x5, 0x4, 0x101, 0x3c61, 0x6, 0x0, 0x0, 0x0, 0x8}) 22:41:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) [ 204.704099] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 204.704768] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 204.705187] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 204.705593] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 204.706106] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 22:41:01 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) [ 204.760225] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 204.760604] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 204.762154] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 204.763058] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 204.763928] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 204.764904] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 204.766089] Buffer I/O error on dev sr0, logical block 0, async page read [ 204.766997] Buffer I/O error on dev sr0, logical block 1, async page read [ 204.767899] Buffer I/O error on dev sr0, logical block 2, async page read [ 204.768804] Buffer I/O error on dev sr0, logical block 3, async page read [ 204.769736] Buffer I/O error on dev sr0, logical block 4, async page read [ 204.770602] Buffer I/O error on dev sr0, logical block 5, async page read [ 204.771496] Buffer I/O error on dev sr0, logical block 6, async page read [ 204.772396] Buffer I/O error on dev sr0, logical block 7, async page read [ 204.774097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.774592] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.775271] Buffer I/O error on dev sr0, logical block 0, async page read [ 204.776047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.776434] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.777066] Buffer I/O error on dev sr0, logical block 1, async page read [ 204.781887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.782289] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.783932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.784324] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.786212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.786598] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.797274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 204.797693] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 204.847850] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 205.227412] ======================================================= [ 205.227412] WARNING: The mand mount option has been deprecated and [ 205.227412] and is ignored by this kernel. Remove the mand [ 205.227412] option from the mount to silence this warning. [ 205.227412] ======================================================= [ 205.233446] 9pnet: Unknown protocol version 9p2000.Lÿ 22:41:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = fspick(r0, &(0x7f0000000440)='./file1\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000800)='./file1\x00', 0x220400, 0x2) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5301, 0x0) sendfile(r1, r2, &(0x7f00000004c0)=0x7, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1', [{}]}, 0xc) r4 = fsmount(r3, 0x0, 0x5) r5 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x20000, 0x89) close(r0) syz_open_dev$vcsa(&(0x7f0000000400), 0x9, 0x101200) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) fsmount(r6, 0x0, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r7 = open_tree(r0, &(0x7f0000000180)='./file1\x00', 0x400) r8 = syz_io_uring_setup(0x1323, &(0x7f0000000240)={0x0, 0xd6d3, 0x4, 0x1, 0x210, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x4042, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653d5b5c2c76657273696f6e3d3970323030302e4cff030000000000003d3970323030302e752c6d6d61702c6d6d44ff628525e85a677e4a3143c96c61702c7365636c6162656c2c736d61636b66736861743d23219d1d66736d616769633d3078303030303030303130303030303430302c00"]) 22:41:01 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "1046361cd025e9f536d353aef7194e2c0a40f4382c9ef5fc2d2c30309a1d3d0368ba2b8ddaacce1b6ee1146c2ac78674c1aec5313a9943ad382ba3f19da50faf24dada69de2fc6f2dc6adad844e4837efc06790cc5d6ae5696328332ba96dd4dd9290934856e972a0ce41f918a6bf08f2b84901a7aa09368fc3f803f0da01df6fd732a80aa9688"}, 0x8b) [ 205.383910] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 205.385476] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 205.386594] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 205.387610] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 205.388740] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 205.428262] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 205.429169] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 205.429840] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 205.430434] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 205.431279] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 212.351807] Bluetooth: hci7: command 0x0406 tx timeout [ 212.351839] Bluetooth: hci2: command 0x0406 tx timeout [ 212.352481] Bluetooth: hci0: command 0x0406 tx timeout [ 212.353226] Bluetooth: hci3: command 0x0406 tx timeout [ 212.353832] Bluetooth: hci5: command 0x0406 tx timeout [ 212.354529] Bluetooth: hci6: command 0x0406 tx timeout [ 216.447699] Bluetooth: hci1: command 0x0406 tx timeout 22:41:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x46043, 0x44) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/152, 0x98, 0x0, &(0x7f0000000300)=""/73, 0x49}, &(0x7f00000001c0)=0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='filter\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x101842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000200), 0xa00) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r4, 0x40, 0x383, 0x9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0xbe, "9a5b4bf88a47790809fbfe8c6a973f5360dc205a923335a12fdf02b54458ba6d409281fe7c5191f0da7fade98bdc1a91ac68bab6839ba877231559b6593e48a2979999b01b1e8c444627a656ca64a762fda7531c124e5d763d23ebbc15111ee59d1006fc51746271df97e65dceeff2875b34d00432099bea482dbe6c5094047de9642e1b26a7be0147feb9ca4bbc32861658872d744436b1a01c938bbbdd5907ae1a3f0e3ab69c6eeb5c8b3a564bc641ea415a3244a22df657943ff39af7"}, &(0x7f0000000380)=0xe2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000240)}, 0x409, 0x0, 0x5, 0x4, 0x101, 0x3c61, 0x6, 0x0, 0x0, 0x0, 0x8}) 22:41:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) 22:41:12 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2141135a248505a6}, 0x0, 0x0, 0x9, 0x0, 0x6b28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x80, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r5 = getpid() sched_getparam(r5, &(0x7f0000000080)) ptrace$pokeuser(0x6, r5, 0x7fffffff, 0x8) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x800, 0x0, &(0x7f0000000300)) 22:41:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 22:41:12 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) unshare(0x48040080) 22:41:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000a00)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5301, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r7, 0x5301, 0x0) [ 216.542949] Bluetooth: hci5: Ignoring connect complete event for invalid link type sendmsg$netlink(r1, &(0x7f0000003700)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003640)=[{&(0x7f00000002c0)={0x168, 0x42, 0x2, 0x70bd29, 0x25dfdbfc, "", [@nested={0x156, 0x9, 0x0, 0x1, [@typed={0x4, 0x59}, @typed={0x80, 0x10, 0x0, 0x0, @binary="76dbc727929ec8e42f5b21d9661433ede781e38ff057c2bc5b0efa44d3118a72097d86a46a98b05736574a6e5fe2a9d15f9fb1e8d11ba21ac5ffec19a9c9f3fca2de177562b8a5ac30396a6705b5e05e68b51333313a46498e2c5eb1496e3e782d3b257041dfbc3cf1b1d55ce9f96cf7e9b692d1db6c9755c76c8571"}, @generic="de77a625abc5702e9f81c9b46a1beb354cdcff6f735c7b01b9c23800d89446da", @generic="132b915879d88e6a65b709e4e242aca5f15566fddc1dc02289d783441283e830b771d269cff7816b24c826f3e461796bbc2e4a7f49b6044a94d0b9f71bb3752ec4d18a3f2d768f32bd189ce073a9b17f59a362cda66fa4c4ab65a66ace1c56c85ba8f2cfcc9bd0de26ec56b54285dbd0e930ea782d062a27f9aae995", @generic="2bddc8b5bac95bb0b2f21c75cd140bf3ecf67d705ce0f43d58fc5d4f86071ea0020e7ff98a90229d3e4f33908fe9b6c6ee2d"]}]}, 0x168}, {&(0x7f0000000440)={0x360, 0x19, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@loopback}, @generic="1f3b3af476d0d185e3bd110cdc4abdbb7f20bf92a0ce58b4fc2d6577d17d5a28b6f0d5d22f55c7bb3e6bf6e8310399819717803d58a5a4419e500ef97eeaf8215b7a536a43222731c2af8e82084feab4f097b8788ad3e9d72f0cfe685b8b112319a8db43596c43fcfa990b298718bfee34d2f162347d9354792c51dcc954b0b8f79b75b3717d44398b0d8b9f4580901676c8cdf872720534486614b937e6f58911", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="951c1c8ec1956584833a9c7a1d3ec779faac717c6b176d34e80ccb", @nested={0x279, 0x6c, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @u32=0x6}, @generic="87ce0a8435aab3c5", @typed={0x8, 0x76, 0x0, 0x0, @u32=0x6}, @typed={0xc5, 0x41, 0x0, 0x0, @binary="1a526ad889763213f77c74e2ff9e19e7d5d2c6d2089efd8a5ac4281aeb99a1e32cfa42713484f72f1dcb441afc067881ce120e34123b9666bd936ba3df2b87259a32e2e948d2f733dd2d04d20355cfdccd05548a425d33ab0eb82a948be9b85f8271cad57f6e8d5313e3b7f17d77f818b5330ed96ee8ba76096e9decde883c3caef89ca235b50cf5dc8221b0a4593d6aac2f72de2e347fc8afcabd817ac64209575f44b9e29cad1a74269c646283729df52f2e3574397ee93430392a30e8e00648"}, @generic="414906e74c5bd46280ebf131e03296a08aa2480571478ad43aab3b9a76982115a09de008bb7aea7f5149b6a7b16ed7bdd0e1a949548c962dd35f92bde668e2095cd5f6c6e52e765b2daad1195806cd5eeb84de472c99f7bc9ea39fd364fb80145a4e0e81a92c17c7ce043abcdf8dffe1b9bd4d237996f4dbe37d565a7ceb9211d3f3f30c4245ff67c21a1003b36e2b900940ba77c28e83758e6f6ed4ad3e3f", @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@empty}, @generic="843b45e65173158e78560dd9b31b0d38c8708759960d3a0290a6f11bc3d3f8649a78e5d10c6495f1f6e237025bb55e417d300b56cfa5936e1e4cb1cc87b6dd36b843fb3e5c53965564ff2aacc189ee65cfc6fd85e9e2288456babab7d9c960b02ae18e877763d19c30785e6337157afcb544d92efbfa59c68009365966987467c5adcf857391366c05ceffd13dce8b657f65462dcd8e28114a11270cb893da5f7473432baef1f91fc884bb1a7f0f1841a0c6ce2c27173ed65c07ee5a2cc4e05499b257964fb3b04c7182c9b1162d010095c6b9dd5c56e34c4f00", @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@empty}]}, 0x360}, {&(0x7f0000000a40)={0x3c8, 0x3a, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0xdf, 0x2d, 0x0, 0x1, [@generic="6496ca2c42c77db7d5613472befc37c145b9e9094f365b9fe2b95ef3f18f16864cf644314a9bfbedbbd34baf0b970e031ba943646f3e64e963711e64324f565ced8fd6558cac033e2cd0a13b495fea3d916c9543ac80025aa9c13d621edf4ef03c02468edbeb4934e8f604d46234fc3546764c749aaf9f715eb56f2f5a84a7b6e15b321ba87b5b908783547a0bb9b69c4c15b0a3e3e8cb4074b1eb798298a264f24dd981f179ba13103a330296282a7b20edead2e13f100d69f384b7ace2be4718a09419acdcc27f01c469116b532eddef59888cc366cde1366e1e"]}, @nested={0x1d1, 0x8b, 0x0, 0x1, [@generic="37e52c29404554b0faf842aa4573f9f6d733cf14b4e6e12d7e008566e8681d70382a577aadc6", @generic="26d36cfc3f3f4659d6c2e22dd0e5ff8444822c2f6be05c2493ec25a355a9170ad0c96d8f814d60d062c4051871c11f28e20cd5f698fbf79e74af0a246a1a2fe5f370ce727e0fa3c1c1971e806146f3efad1374b7d7d1003d305baed0acd5a71939fed2d629a6877f4c68d38ce0bebe34db1c3b983489538639c5e9143c807f410b5dfd3602d2f4582084f26a1dedb2", @typed={0x8, 0x8f, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x28, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x7e}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r2}, @generic="00bbb62c54f9ac6cfe975266ebceae592198b5a0eec52023186eae313b4e2be078298cffbb4a9a759ac651c09ff7c819edef64a54b67c0506b5b5db0d19cd868b021d1bd8cfe117293ffcfb0fa1136384b2a5470d73480945642a7ffdcf9fd49cf57b98a5e3021ebc556f8ccec4b8399cec3e579d22e5700e290fb6802994a5ba082", @generic="ea6c153f7129105597980a00742ea395946ae3dda7af5a470abee6e917c0897830974bd1aa2e0b43f5908a78f5e724a91b096dcdcc40dd9620ee19d799cb930cc05f53708ad0d10d0ea884e8808ff5c475f0eb4bc4bbc39cab7f111ed106a6e4eec713f16236ae389da37504839d68dcd91b"]}, @nested={0x102, 0x44, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @u32=0x2b}, @typed={0x5, 0x3d, 0x0, 0x0, @str='\x00'}, @generic="35d40a58b2aa0c93d26720bf6d4fc4e5e873dbbaee774cb8e1a20d8de6e53cd81b7b74364c88dbb15703c0d0ce920ae7e378bf38cf495ed7ce7e32778a70ae479a16ae653c422c445f262cb4b0b4de1e4a56c4416f6d029cb5b8131b1b24b5db97347071a3af244a0e6e41f39b79376f21f5908059a10e04c6660a890f18f0642db3eb45239a9f085a7e76bebb17fdb9d4de67f7a752484541c867b31e7c677112ef954d8b8a75b9b25c864e61ed51cdd2aa7490f10a12dc6a0bde87bb74", @generic, @generic="397682d502923c28e5", @generic="4f728005f95f9c62d7cc64743228e40f14aab27b41b7be9dd5bd043af70f1d", @typed={0x8, 0x5, 0x0, 0x0, @fd=r3}]}]}, 0x3c8}, {&(0x7f0000000e80)={0x269c, 0x1f, 0xe0c, 0x70bd2a, 0x25dfdbff, "", [@nested={0x5d, 0x4, 0x0, 0x1, [@generic="352d85279fcb2d2b5e7367be2e1c136e7e7b6f409e5541b06f28b8bff08b92300dfa65cfa60280c1701d9ce79fcbce5481c022761e", @typed={0x8, 0x7e, 0x0, 0x0, @fd=r4}, @typed={0x9, 0xb, 0x0, 0x0, @binary="a44ecd7845"}, @typed={0x8, 0x13, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x48, 0x0, 0x0, @u32=0x5}]}, @generic="0c53b55e097d802c4603b994be8d93e97c53e96f8504b69b432a3405a392f361445a5c56d2001881777ebb1e4edf8bef959e068b1bde29f6ca2f25d5a57eee8f7a7159acb52d51b34751290a653ac629e8f4aec3df322f4d75348366486562031f5b4955f10064be71d5e15edcaf23140479bc22", @nested={0x12a5, 0x6b, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @fd=r0}, @generic="4fa29951ea93487116e0c61f0150e28fff0ba50595579c9479de02dee8ef9d725c8de8bc998b99101dec54a905d9c3e346edf6cf40e8ae40cb57d9aee1699e6c763ca48cc78a3b9326466f1967d7bf3159ff815664c1849f01132bf310f34cdbf6b24f4e73e6ca398474d56d3e9c7d450298811ecc8131ca674386c80526107ffd1b6ba6c336306b726a9d589c190c0aa7376be62859e31d93ea", @generic="e55a5a1462d6c3c8e4efadcf030931d8003b123df68b5758ee889d86bc3938b2108acc1635e541c2fe96acbc81c8abe067cd0352ce0082e22fa4af526e9420c91f31c77851832e6506aa1739b38da0fbb26c274ffc89d9ecaeacd7167d46c766c6092223d674f1635848f701311c6c7e3c76e1416b9eddb923171abfcff08ede906cba3cec21cd4ed3ee03628f4e2c2530daa4a3bac4a81df5768ae9f8a5c8d99cb3c75fcde7ddd3d4382597568d0edb67913e38a46703002f486ab039b4ee94d7175e879aaff17f1d81742b934338ed75c2f2de7673bf6c0fcd690553c9572d60139ca8c7f187544e14ba5ab64e22e84026c1b4db9c5bcba8f83b995f8d15f2a1bd5ad71f7de214041988db835dbb1112c0f085adfa265991f7c1d318f69640dc0f381a2553ea9392d5728340bd9ae22785961fcc93eebe432bdcaf76158639735049573b3d858799cae7da877337b2bc807521d4a8562e7d882295f4d1db7f87a102c55587a4b816a577073c52ec46545684947d832a1fb50b90482b3c81a645655ed6ef2f7e0fe8708d4e433538f340938c16854213cdb29160d944ed2adc4844df1e5fddcffa50b7ef38401961400bf5d24b99d0782a3d682279748db2bb9a02e0e0d1f5529748a15e4b7759b63e7767166a2d9f45481bb1fa532d722c288be81f7fc6330d4a0520eb555afcce30f0445a899e973270028ee0123364308b86ad9cfe596864e6073c1e810978f5ecb1d3165a5976e1a399a31a9c07766dae5deeb6a3d4fb6e0c23ca7c36a9863433be2111d19c43206bc55d3db60a08c3c1f3a782b28b735725efae9d464dceb19f457ef880c22266df6bb75dd25705bd1c0d1695d8f898703b1d2b57259e26aadcbb99dff950ade09241b42b33417505fcd0216db979bf4629b562c81110d71ce97348b82dd77212adb398c3fbe264ff5825080cdd9ab3a81978c9ca1366e4e9dc497093dba739ca7ea627ce6d7f0780274a2d19a9c08a34d073346a5495e00cef317c434c7fafae75af62612e3b053746aa32a3038bfaee18371f138aa25a985c022f8bda436f5003c18f09e4fb23d66be4b8a428717c6b06a82826379f4240981cc4e541655d68942f71ec5836f70dcd040f5bb1094af5fe240ecfaee04064e37150cd2d1693687eda8dd0cfff00b495465acad9c324986e807fb7f4052cf103e7b55c5e4fe73eff1e2a48fdd463c0535ca05517fda5376af9f393e1301216d0dcfd9c42d31ef10233dfff701c356786ecf4b4044d3b417368b4376cf0db582c816741394d687e895492113e2697109039bc9ff36a5df9ab789b734b6f1916bcd89a2ae186f0e125a29a5fbfe54264717e4b36e9634cf1e0231d2f0abf6b4dd57ecec2972ceaa9e9db037c9591178752559052337bfdbe97e63cb0a46374f878da374828469ec8a1aa97f85778cd37e0a1e14eebb71369a0bab0c84afe5c63e160b6033df8e9a6a86fcba29ac552fdda9afda5b736b7f4b0358ebc63b1ec3584341b7a89514f9311b01f61fc210d68efcb91d0936024de6d9ec5e22accce31a5daa0e46971f5949bfd6191eb5935b778b084b3b5c6b3cd453c3dac5175ca50722773faaf8ddf48d00e13909a589dc174bf93a0703e412b15cdaf15a8f7506925a8fdc551476da706d0a56a4175b49c4bd40419ccaca48e6e38f2d95f0dd836550e323d6215d13d6562d56dcb502d3624d36d732279f72bff51f9c0fee58f1e200a5d45879644df33944f507080c4671ef6eb883b5672135f4ba4148d6cae00fa9b0dbd2aa58dab7230aa38930863cc1d80e614e3dceeb8406b74ab5f3c62aa805135bdf62482910fc8881e47527e84ae0f7a60c3c72db91adcd920387bd1412f56de492566e52da31396bcf868e932e0b6d71e05833f67ca30c3a90457b96a6b1f576b1402b1279ffda8a9de4ea339155d7ec955e5dcfc3cc42398312d99cdd43d95c519122f47fcb72895e24882975482832403fa83de6ddeddc270dbbc8133c58cc1b704a6bf05a29d7f14a8abe6af7f72d78875e0dc28868899706d66b88301306369b4eba4ac9980efaec3ce2c93f5644a3b074d3b3658f5b69dde67fe13226faf46416bf95ede516adc344d150a14be6192c2d7b747e7ccbb414bd8f1e9853725d5a4d5fc68f25de23b247c3e3ab73b0028879f39230da3f6a7ad1f1fa5b8abc79bd3be145adbca3490a1a0d328cc871e20421663b42df793deb2a053027dd1118cad7116951d596eb14f022396c0a911c522247c14dfc43b1f6d61610c17ff0065a44be01262291b22d28f9a0b4c6e4223276c52e150c5f2a73ab28599cc60bcc13f8c846b0866be5e832b7368d2e24cfbd107df7d8a738c47ce7d07cb70fc0c75528d948e8c40dae37d44ac4cc5952022dbe3135dca85c84ce2da50c05064dc487e097bd9891773f2a525de6807b4e62a1c8230e0e945d1657813405406ef14d71a501d4a4ae8900f3ba0dbbea7c3e0ee876c80c60ef4f9622d9d72bd08da0fa9ff69dd88ed520d30f6e823c6ee9f04d27a3243345bcbbdf0145bd24d6cf59d16fac4049bf87a6f46d5e343f3122cce4193ffbe65549bc81a20c0c1dd86110eb5652249f7047e6713a21abe4aed050d67ffc1d1623932e7db5f50fdbfa37ed3b753ce97acbf185743833a7fe2f22ce2dc535d8c4b860d8858847c0feb410a6466a5b97c1a6a6e0d4426be6094142c2484eff8a66144289f392fc45aca461c08b2e0ffaaf314476cf431005ebea38f028fb5ba57c4523645329ce8afcca330a922d302831105746316ef1befae3f19b9c1257a463ffd2249a18c73fa1bfecdcef959647fe8097f2819e80f68c3d72bf30e5af9bdfc280c596bcbbcd4a04a697ae494477223648d08a20e144df130e0638489db91641187c27b97ae6b24f65208b8bd1edfdcb44b7980be41eec8b2b630a56436fb5d91af184daed3f76562c2720fac8d5e9db6bf78fd6736cad69ce7a3d18c1d6930c4bfc0b3eb9404448112dbb13cfb2ac3bf1c6d0c589e8ab4faa4a75a568df1a450b5bf0463a3df388dbac8b69a67b76816bb9e2af957a5db73602ba77d096ea912fe4cc0e57ac0dd6625b9d2f5058dc3bbb3d9ee3b535b1b7357e12bd75d138ab74f66d956920d76bda3f4a6db95ccb9ed6d5817c137f4fc3ae554d18e25e4d3d6f81c9ec874b5bb0ffbdbf84eaae64ea5bb80ccccffdbccfe4bc89f0039e20a5b95c7f697efdbd9bfe3a1469bef87493d02f0d7af780899366b8b56c7a8a43ca82cd9eb7c5fd59e550c29e18e04b51b7b847a68a1751773d9dd7c253aeeffc82185b1f294ff95f4b8c78e4bf58180454621be53ee89919f2842b1fa7c2d546d91b021a59ad9f4d3b1ab91a33b6aa55782d2f0b69b0f5af3e486e456e48030858f7c0c82672becf7a997bba11f5b28ea1ec0fc95e8a696f2645bfb5bb659cd0c03dfd5bfeaba342ced821590c9c60172287a12efdaa3c4aee3748db893c767c7f6a38f393f3812fe99460f35f96e0ad3a20e93ea14d67500a3a080470368e153c776c6dc94d12335069f4cfa8a0a404f42e43d425c2909c9e7337fcaf1f40b2b7744f4b09127c921e807fea99eab2cf751c88af8f7f6ad7e68c1735601f3b3d98082358cbf5e45acc9e08e5e584ab9aab10b43c9076b0d14b80fce4e5cd443b23dc42506db9b911540a7d6d58abad609484a9f9901fdc26d20acd5e944b27ea8519f8d8a0fc22adc08a3264541ee50b8fb99522fb9e8cb24b314301a7fcdceb6de444d876507345145ed3fa175c35ce4d109fdcac355f39fadda3d1fd71ab8ba9a370eaa68e00cf8b5d76ba8e815f684cb7bdc3cf5b590d1149053a1ad33f7c532e82dfe84dfe846c0bf25cab4be8a27e363afe7d7c9ed0da340a166c2ea135b886213f68df30e02ba6b571bafbbd0f70e66a0bf343aac96953146c903f9b4524d8fa422bd1d066fefa00575d07fb8c7df51333004ed423c79ca32d506b236e347b8a2e18a046c6b225c684fecceaca147d899f6c4b35b80911db11c843d1e90a2cda90b3dbc271c1093081cf84223e96ebe91f205b76890600947d70f6dc4329f0f403689ddd68251c1f271d8cbfcbbab41773c03185b604793f9eeeee62bf8e5d584cf8e8e862131ddf6be1f34e84a3b58adeffd7c7a0e2ec1127a90748c7e6a82fb92ca594aab663c2532a1575fffdb598afc34fa7f353b66d2e7d63c828734ed217715e988417da5338e0c538a7997229fc90ddfd2cccca4150a4ae5431aa4f0e61612c4c196a45ee1c0c1ebd4321b85f7fb9d24e6725eb6c60d747cc7d4d6e4258b7968669a18abc20f90046bdccc5f7f7fc681cbeae37c59983c3847ae6a6e8a736817ebdb8289002b441186d9f2daa2b6b700040f0ba3a46cb7cd2274170db52ec7e7e9611fde173c27c58c6174e010063446860e4f905efa11046e9a2e626e231acfd950985eb2e6833b6415fa2907382c365c3e44c418f4648ca57c3de1ce369b49c42441d5f25239a890dd04289e8c3b9ca33e30ff2b539363e7260e615e898b8f91bbb605979d34667ed4c80a1bfd8f8dc76a573b2569e51f00b19e69e39abe5fd787d861ac14d627f57d20871dda5fe10e3c56adbfb25bda0a69bee5aa04d0423018b90b468acda6ca1523a1bbaa6c06636e71e27db8db7aa56f69293060dba91c9c4ac95eaf226a009350b2201a400a3a7a2a6c4c704287c99ec5fa5d045faec88caa09460e57c75f2a121956623d56248f1c24efc316576c0e3c05d130aac502bf7a62be532787c430dab8cce968747d7f9365a81b35dc17daf11903cd243bb675af54052f7acacb4deb629272105c0b531bca34b999ba1fabcd9d0b923d99a17f9bad1404c2112dec55d7d792eaf7c95642f2f27790583833abae33db4862b8b3d2391c2396b64d55e4a0546440f320f2c4fddda60af8991de40940a4db650f182c4aacfe35e2daacf316a5e7b219c01f1ad2509bfa0220da52a556ac69e6023f194c6cdfe7442445c26bd4a7804b515fd9cc86d6ff592535971e338503b7b1c9aa96141e103b7981c8f325645b5adf57031cb135eca5f13480712a3604c94cb7205efb59c3cd0161c064c36be3327a9531bf1391f49be1041af9306826feedc8edfde4b1aeeb8a889434016e5490386175417033d0ef5c9b14ff434652cf0e962a5675381fa1b9e43a7198c94ff02699f209ed4267c17936bb76d6fb89fc388edc1bf679ca1f9411867053c29241a8ad223f19cbd1e48545f90b069f7ad359e8345a2f1a3c1dbaad14bbb56822cf71084331332d2804507cb853c36e331a43b85077e460e26e0e9347ec416ddb37a454dd443f118ada5f188dc14c4130773e01f50c258a438bdf2402f03192480c24333f45a0ff42cf6a33a720f55f3711060765716aba3d7d2eee3fb31cc312cb220905d000fa3e11ec18eaac8de3c333e1b7b9af30885ce12212bc9d4c89171206a265e0105633cd36c0466b6893ae144a34a1774ae138beb004a5d5a39d6f8a6c5eab6bb6c02b545af3b1c495dc18712d822bd4f1939dd082ac4e351a83518c4a390377c6b7c0e93f7ede9876f777177cd0a338184409c7eb8c5011d91352ad8b55b2cbde0cd1372ed01657a0fd8795012310e0934153961560fdc6f56e14f753ec4edd7564f753f7acc71789d9a4d844215d4960adf8f3513cde4bc5d4cb3f6e5e8285317d1b011adb30527f7e077db63f01f1480122b7c6b4f065543739facd80f3e784b5e37bbf8ad336cc7af400c0f76c5b6936b68f244fd4fb8535525704ca", @typed={0x8, 0x50, 0x0, 0x0, @uid}, @generic="35dc19bee02e909340fd8352fc8a0a4b2b8a7cbb74b81349b56f195220efd1bff89b5813f82c1b12e8deff742401274e493b5df34723d95ba754215317f4bf89c7fba5d522e6d728f037f7c9309fdc09dd388f05021d786b1f4d9d446a97fed08984c14a00e2a1035929f2acad8fb7c90cdfebcb0685807a00113f767952977c8df75bbfc20517c6f58ec0f7766581146330af312a60400d483e238e7d43c3159405b038321d5fe0d8c9ca72362a4a8cc86e712a0db2b4464fd003ce4a7a78fefb9caf12a04c841412c0b02bd97e", @typed={0xc, 0x76, 0x0, 0x0, @u64}, @generic="46889eef4966090428a089913a070bdda2986ab850960f5442e9a3f9e3c16ae2ff39ed342ecc77c09393c358103b314ba17bd2c4b73b844709af958eb669a1be65eaa592c2944c92658fd101c7058bbb19217b49fae507d9956be18cc7694b32fb409c6e72762b58e7f5bac8d9e8bec0ce74bbec2319af83e0d06465bf5aa2c2a06a028331533fa94aa8550457bb82916b4b35b26e74264d25d99801ca90f071dc291ee98a7d9d21e40958a8e2514e71869af4df66bb43224a5714b134b25c805f7ac45ed4885c92f4097bd57d452f16ca9357", @generic="9a166f438f958f5afd7a1e8cc899fd5c5981165985d033ca8029f8ed819ca8c1d33bba125c11b1fb08fa87b56519c65e7f31df5087fa14ca4af0eacf6242c88e87664e884e81", @typed={0x4, 0x57}]}, @generic="b8f4b1e50b78b2dc95e510d7f022b1f6b20bbe85bb782f8d64780a75f474f431659a93828cb9eecec68791eb5560b69e57cea1feaf0c1cace09462627d43b25337c59056c57f0ab62a96e197c8ec5062b4b86f76163a8d2bfcefe27bcf5ad5ea20719d84732f7a09a0f05c6bb3aeac7d3314b1e39828747423d35fbed8144b", @nested={0x11ba, 0x3, 0x0, 0x1, [@generic="4eb7743548af8b2cd62febe3fe54354c403ab57af8cb9911fb19f3f490c593ff97c84511b8ceed814a9cf32acd394f6f805b6182fb998cd9d874d5ab1993e67c2bf28c8541bee2105c9f3839bcce758cc1e32568", @generic="a43d55dbc2f4f5e58daa4cfc6850caa72c0d3ac5b2b1da51bdf3af99f69f6fb73c39c609700bd96f036e0d9ee91f489178a4dcbf8a946ff67b8e0d97b019b6c5bd9da188969b324e371633493afd9321ae009c87b4597860008f9dc9f7f82057a764b053f1f5bfa6c355cd447c7ca087669208175813cd0e3bd213e36a6822266cf3f4bd1fe922b9b358833934457a7ce206ea16d8bf4c0b67f6e826cccf27c72ef9b8bc2d935500eb3dabf0d354e8a643e935367d879b36aa3d0c7842a9039baf4586b2ccb363baf4a7e3fc55e4fa4ecb643bc23d9ce5c9ebba1959b15cee805cf671e91904653b1aff71cd3eac198316577595b9b5713cc8ce7a641320359d49cca0c18390d17faa3f1d6385e3fff2d22c9ae7d0cb70cb63d2d963c7fca8239772a75134f5406fe117f029b8826708b598924720c990a9a2cdee3796d6a1e5393a7818799cf080a77796071e667fd08b1b1cd268e7222c6201612433095fd6e93d8802d53da7f9e58dd288f15f64564f665a432d645c7ea1c1f26878fb3494394c9d81c935a9b31f12c23595611a2ee4f2af6cedad4e9bc3294cf82d66aa140f6592a305a785d49d534b48dd6b26f5682da9c5d9da73ea634dbaeea3278bad3799afb54133b232174205f9c8a45ebc0b255cc040f7b0529c6f763dd140046ceb50d86a3c473cd626566ec8062f9002323f8e995e8d27389bd8d78518767c8c8ef4ec08772786c58a8042afacc2ab617479b883c0d8c51dc0e4f4975b517d10edeb1f8e77955e6f632b18eb1b95ea2a6d3366d11e6e45b0f03c797324510e40e0296e3e61b3af0dd5955a747855b9b141d873b2d547127d428a9dff42b264230de0f6dec75dccafd6affec974feb18ce324023ab3af8e65ec9526c9276117a18f166fca4e07d45fecae60dc88c18dad39160b2815392b24412ca9724e4b26d8cb867a46071ffb85b2f77287f5c0875815abec47fd7d0786633b1c4340fec2ce5a19809bbb9880373f3192366b43aff13f3fb008c90f42ed042a267061ebcbcbb0ffe37baa63b063ab20a9ab824bbce773d567b02a8953a4cd0e7d3b972df6bffcebfcbb2db48e127546c9abd9001cc075c42b698f135e310396f88559b05e5ba7fb2c84372492bac5a4e04a7b569f497529ad5d2b5d5e492a7c84c9480a164620df1d7fd583a95fb06109b71f3ed4259756bf27f3d2f078db4ff96d94adf2027ee19af742a6c7bcbc5fee22e341a53650a7c8c7aa37292f82b012c5c61d2148ff8a753730f41f6f7cddbfdf4b8f69cc3a215d8f93dfb0762cdbe6f6b229a6c6e8b22f84c505bad39cd834c8d9cd1bb2f3e858e32d2a4b5d86141ca690559770969daec285a576ed1336c30ea2a5551234b55cae00171721f932990a329fd8e83eddc07a3d72c261ffc660bbd27c1ab0bd5f6cd029f8ff748cf818d6112c60cc4c06796c58af5df1f718575ba6be235feca5b0d595a09ef1602f346dd264ad535925796c9d41467674098fc129b86d6a8003bb6c7be7772f293be1b18a80c28b9a4d94eaa5673484a099458af9d90d4886ae787c0dfdbc443888e7212d9cca621a845e364f7a987af91efea630400f677b36655acf08c488a0b1f64a73615293226f36405c08a78c5a9b9c2e5ab0478f7c665c93a575a510acf650e4305ad04af5a85fbe4343ec850b87505e4c6cdbe89f5b6404ccd782fc5e39d8767b3df12993eac72041f9da220c85de91a441e17a9498d86272140a63823affeb6fba46e428a47fabb5d47604d0590e21ccbf4d11fe4905d5b36897048da939af06f854e63637a574ef247db26cfe7f0d9799857678394d76e95f35c12c135b975a698d7e786c416b6e16d8de22f266a0b08156ed930a2d437bdf2f4aa09a79f0adf5831d6a647f66d02c4a224fd2e764fd4767366101febe74f80b01931ed5dcb8ef980934836aa5309b10328b0233c0224a5c402645eeee4aadac9b11f2a358578f9bb762a7ba9c7f61c28a2c80fc72a013abc7bcd0cd619ebb52d209df65e53870f7676e9ae532174fd55572b6ad7022058068a1b5d0539133bcc8d505f4e40c3e6e59ca3a52a6ab94943f5b4c5cbcb8207441d05bb271576a295cd21f4aa4aec68ae1040ad009569184874141194b7ad88780068633138a664aa3dfb650c14b728635c32ececbdb6d3c33ddc171137d22aa48ce8f1ad39e3a8204c688a410632e0a1b1326fcd31c604c49f7ef21fe3daf7bc133d51b41838637d111bcfd993f886a94ca54846ab53e402e1101564b6dc7a5407cd634a85ecfa1d61b67a9f8915d13b43cdb6d566dd2e9031aea797c9bdc4f85afe459ff46cf8d7061c06f0625cf9eb665a0b28b30902420a4a0b4cd10c4f91cbb1e143683f690ecc50e3286f2639f451451bb72c9d23ff36c4e6a5ebe46b97e15e716f32fd4940ede59d7db0cec689aec00ec1fce2aaeb5e6d4ab25251ba5e98f2f9522ae701d35f05296d01e0bb497b0069b0e7afff683f76f4da555f5550747619d767ffba2317d92254aa54b237d296644775677ec562b30149d2d265b269127329ba35d6a9b6db638ed506e4b3d3395af5bcd795c8e89a419495144a99fb4ec886ee726c4ce84f7db90b98394a365b381d115fa8a082b1fdec9598d9a69ded02938d34d43ced84bb05c44c1addb78224b23ccdc810dd59b75419217d38cee895156b5a39316167682d3e5285ac8f1f050c7151fadb062c86020887bbd31c092e42e6b5fdbc4bb1e9161c294e163803a84e462cd18dfbfad732fce5a990046120f306bd5d4d311412b234d574fed017f8d478f400620111219fa25682c8fe0daee36cd7ac5bfa88a2c02b5c1d308914acb148371fa4ab5ecc537e4c9d370687e683ac9ccd200635c5486164d5dc4a22d93b5c6555114e72b02475026b3c432f9bad6ab1340c25c1f1420db9c7f2561e4cede2f379dc5e8ca72f10ec5af1c98e50707c6f6d52faed449c80fdc26ada984f6df006cae05109d42556940039a2999c60c38609e6abe7ce1293ce0c25e97ac9b04a510812190495e2e7fee097c6a93f6ea5e4ee047967aabd8709c33e7b2ea5d6eb601ed8b063874bf8361ea8e9d0d31d34e4df1be6d5f61a0a9f210878545fd9a6cab8eedc6116afe2968d45e3ab5e3e3b303a4344768a6048de20fd5dbb4697d0254d8eebd8abdc6ff9ddcffd25a7fd3161cb068e081183ecac41e923092661fc7f19a6a5f5c573dc7aede8e26a5804f0a145dc058e873b89a830fe7c123f0310c09c03e4ecdbb13cccfcb73abb920c3895a632f6ebf070f34b8c1a0c41e19880059c9269608453a3c81860f54f6067d4e4d6c8d187f9a91fcc25c602334f38106bc7acd9efb799ebe65e36d0f46fa75dba29d2b9735e8e8a18dbd2c016e111d8325b7c99ad3190e4f97065386c9473f620fabeed7c937af9cca2c3d121aeec363badd6aecb0c3fd1d193be7d43b5945947ad07182e1c92e4217054f411fdf47ced8551cde4b29ba2d445bee58af7dd0e7b07a6638776eaec0d6434d8186d8b0bf35117acfbcaa381b616efd5f2d0b1e21966bef64405ea3ef5a65cef0232295f2c4cd133140a1a0ba87f6df2514c0d17fa2b65588f1bd1ad1a8125fc9ab8ae31c23f41c6dcb184112348456fad1545b06e1dcd17f79f0086a1cbdccf33800af03907a754188b92d776147a17bb355e702c61871b1c30afafc1089175a200a89ef4897227addb67e5acf33c4de8b6ebd4ed8bcde2af3828feb1b29869aa2fcc0cb2cb784579a7d380e5451ef26bb45bc30c3e713e9aff4f5abcfbc683755a87776ffd593b84aba45754ce7c4221921b4ba39ea8c3e3578d3d943c7e46ccb1b59b14280e10fc436336e46b22fe9072b17a76c431499bf74659aefa2f29af4b422e068d10bb097a5ed9dca53aee0777036ffa07da7f47a951ad54f4921e8bc9bc2200e217127d9ffe204d9e803db21f770e3e4833a7392e04b93ca0f7b2422ae2d7d0e907d67f2f0e782a6074d14ac8e3de7c1573b8513d0a6242209600a634e56b0decf9a5c3c40f0a6471b9027730c17ccb4f85af65ac783f196f37733e1d31cd89d3078cd0800d2a9da9eb0bdda6f149d4c08f00bed9651026ab7f4e8cfbc7bc60e160babe5064e5fb68fd53fbb66861b2f5c26435ea9b2f0cff5160e3f434615f9ea7d1b2eea317731df115e3dd2f6c4e38dee1253dbb707d1ac0af9169a287134068987b8d33739bdb0d62b6641f6fc4e6e1717f7add8c02c73b39dfa25af3c5e35dde8b3cec4fca14329bce13316328b57a9d4e74742b8c90765c9ce3bd4f1dd0b6957b877b23410361e5d4201303df17fa452f00742f909292a22bb69c549390062859c4d0d8feeb9672ba1f395def775c8f4d5a1b0bdc6f388d3ec5c4d73f83b27f82f4cec07921f698d16826fed1ccd34dabadf304a0b150bb44a08ffdc99c8299b98fb810ae775198cf4b252bf8ff3b96a8b22d27abb39675b47be8c38916976bc232fa88586c1b2c63c2bc35da3df96859cee716b1d83820d3f6b6a1696a49eaefc8c2013387070ca6326450c2e6b9b402629e6410048393169c7c13f5b0507ccc8d236873a968b9668d4e9012e12317c0a47bf5263434b7928270c22b4d3c6b1942fbb2d121c996ee3b7557324721e8ddca97994b8097b7e6459aa16081f10f38f2dbc8e9f8e2a7eea83f50ddb69499ed08c51f6fbf5a2e9789cb373bdd28f6989237689ab3813324ed210318c4d9a22fa01e8fd32e0535cdfc3d4feaf0325609ac23e7b1174d3ff44235beef0a030a28d4a213b51b4082629d8a27e0f8df50eda9ce409330ff12dabbaece360d43bbc7ce48e4c1963993b3a2230614f0c5aac5a72a57882094d13e985a54e8fcdee898dc953ca8fe6cc161593dca22c3d3bd3c58d94b887adabf51957371f0ff19af976807db707b0a4529d7fffe33da639a441f8d2c0dfb10614a17e650e484c10f5621ad4a03f2f7e5b53e49bf7173abe178359a675e1388206dfae433b7fda17255b47208b22282ad9b129cc4f5ea18e4c770d20aa73c968b9515a1d8da4f63163cf47348e3baa87411912f52a1464f1027207c50ea7d221092a6e9802e2d5e9861661e4a2fc5ed60e57fd0f6f676a364ef1bffe8a415c9c3590f6f6605659d70da8dc7b0782763da23b191438f95af8e8193f7f32726f114a275a1593feb3dfe6161c96ed335d31ac96710325e4c259d80a89737c05818e3b2fcf0028d618012f4e0b306b6c0add3a7037f89e89b7c51ed579d1e6eaf974e2998480f8706118f6b2f5d8a0ce9262f5fe1933d1e7398c33f4f88a652d203c9904f03f8ed6f610c4c713738efa470c4dd22eb6f777be0834240ba05b61f2f5bb8716413ed7aebf5b05f5c4c3f96446c2714ac5d9df1d8913b17b5a59fc92f38dfff735fabafae2b4765d4f21f3adfbd181139a7993abc2fa3605ce6f24c740f0150313243c46e1fb49315a2852f24b4a3137914cd5a9877eb6d28ef6be96ccb9c5ad7033e185f712f76b54b693bcda018e3a0dfe7f664c663a646a1a96adf528263027f0a243f9c9746b367b28145989e6dbced2658d1c680a8ca6422646907f7fa7a390737fe554daf287a65d59de6eff03ceb02bfc789bf28c8641df3f0a215dcc26e93fb9595269f7b5229af31f9eba3c038f85656ff29397ff0bafc0c00dafebfc94a523f508178344a4c8c75c77bb35518e9b30a36b376c8cf597475bf6d2787c46c4654895fd78d52f412d090a4e63b86e7c138185e89aad4b71a45a6019a969d4ca7a16ff942f33610aa0e4", @generic="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", @typed={0x64, 0x6d, 0x0, 0x0, @binary="824639e9814d8db06ab1b9653820d71875df4794cb06de99a1ced8c52fb4650800945eaaa915efd2da1e57635919b4a0a0a7966b75bd4d522eb000805e1f30594312776f76188cb7c8b82448cd6f3909757ccef73ff6255b5db7ab00217dde16"}, @generic]}, @typed={0x5, 0x20, 0x0, 0x0, @str='\x00'}, @generic="ca0558e4ee396db61994eec2f990f2bcc541688f1085ddfb1da872f4e28b56694485e2882ab6ad4608766262a7633d0017dec963513cec352522c7a2358f5fce5512b56cab7af961ecfe2243845f3c54d6f21a315da405c5018e156b88241f38517efdaab7380b96df9854b556bf56dced15c4f2fab44755cade935ee28e3f879dcb7bccea3c9fe1494375e120740360c48e3cc35c27debdf51fd2db29e10d1df0d2c5166e60d1d6190d484ca2ffea64d63e05e4a7360a9ead0d62836be55ba340fd07652545fa07b014de9218"]}, 0x269c}, {&(0x7f0000003540)={0xd8, 0x39, 0x100, 0x70bd26, 0x25dfdbff, "", [@generic="8b7cba9099e2b40c7ba093df9ae37f4467c3a1c9c48cc32e99f39f281192a1620903d7a9ec99ab91bc98696261dcdd5730100cfc0957c97124e993557218b377884d48a5bc8124d09eb73aa8a9d15159a6b19b5a702ca4ff774a85a393984441580da8cfe0de7b152d3e2d2d1368af6ee3345733732bf6f13a758b2d40b0bf120762d51a50d1529d74f98e62ca6fd53feb84a6f28e4e99ae94a147dac597c750ae36cca9f661fc5456381f7003f34f8e87eab4296904b07cfa82c640ff9459a9bd17e3e29c05e5"]}, 0xd8}], 0x5, &(0x7f00000036c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r6, r7]}}], 0x20, 0x4000}, 0x44015) 22:41:12 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:12 executing program 7: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf4) fsmount(r0, 0x0, 0xf3) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100080018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000480)='./file0\x00', 0x0) 22:41:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7ff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xe9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5e, 0x4}, {0xaa, 0xf6a8}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x6, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x2, 0x2}}]}}, 0x36) 22:41:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, &(0x7f0000000000)=""/74, 0x18) getdents(r1, &(0x7f0000000080)=""/24, 0x18) getdents64(r1, &(0x7f0000000140)=""/124, 0x7c) dup2(r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5301, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000001c0)) write(r2, &(0x7f0000000080)="01", 0x292e9) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40305839, 0x0) [ 216.627283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4231 comm=syz-executor.3 [ 216.648369] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 216.939027] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:41:13 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) unshare(0x48040080) 22:41:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) 22:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:41:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) 22:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 217.477462] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 217.556299] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 218.358494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4242 comm=syz-executor.3 [ 220.544244] Bluetooth: hci4: command 0x0406 tx timeout 22:41:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000000)={0x2c, 0x32, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x35, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) 22:41:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 22:41:26 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) unshare(0x48040080) 22:41:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) 22:41:26 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:41:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x42840, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000040)}, 0x28000, 0x6, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0x8, r0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r3) ioctl$TIOCL_PASTESEL(r4, 0x5427, 0x0) close(r3) openat(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x0, 0x6, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x59ea015a6ff69280}, 0x0, 0xeb7, 0x10000, 0x2, 0xc547, 0xff, 0x7fff, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x10) sendfile(r2, r1, 0x0, 0x4001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="1800"]) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_PASTESEL(r6, 0x5427, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x828d1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) flistxattr(r2, &(0x7f0000000040)=""/32, 0x20) dup2(0xffffffffffffffff, r2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000009) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000009) [ 230.580757] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.582594] loop2: detected capacity change from 0 to 40 [ 230.593508] audit: type=1400 audit(1690238487.007:15): avc: denied { watch_reads } for pid=4267 comm="syz-executor.7" path="/dev/bsg" dev="devtmpfs" ino=113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 [ 230.602826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:41:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) 22:41:27 executing program 7: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x41, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:27 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) [ 230.706085] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:41:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) 22:41:27 executing program 3: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2141135a248505a6}, 0x0, 0x0, 0x9, 0x0, 0x6b28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x17, 0x6d, 0x0, 0x0, 0x2, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x80000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) dup(0xffffffffffffffff) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0xff, 0x885}, 0x81) pidfd_open(0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x50, r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'veth1_to_team\x00', {}, 0xfff}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x800448d4, 0x0) renameat2(r3, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1) 22:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:41:27 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:41:27 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 231.573724] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.577431] loop2: detected capacity change from 0 to 40 22:41:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:41:40 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0xc000, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3, 0x18, 0x0) utime(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x7, 0x6}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51b, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r0, r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x2}, 0x18226, 0xfffffffffffffffa, 0x7, 0x5, 0x2, 0x20, 0x101, 0x0, 0x7fffbfff, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r1, 0x2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x800448d4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xff, @empty, 0x3}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000004c0)="fb61e5581898700329a06fa43b05c108d02d97627f5e342cfd8f80941318005d3cf0ba3ed6145a3cba6f430954221c60256ab96c7c5502a8b042534ca1140af19c9f06dda37b2cde849f198a45d42ddf48335d7653743382f5f41413df0b10c778e0497a328dc843b5c1eb6453b0b8ad92616a13826d4a2d5466e0a418784665fcb346885e343f665404779e1c39e7465a3f6a40c9da3df1deee293e7669354494318c4028d2d48e248335900b013bd0f78e9def0802de95c410882318ea4ff57bd351627cfdaee45691c591aeb823b6566eb45e996ba750d31340207e980913cc6b54e5e04f00b64ef9b4bd9e93", 0xee}, {&(0x7f00000005c0)="1910dc06a510fa6f24140c13eb83781cdcd450386f14cdd6d3166a842e43b1f37dccca5b10e86926352b1e90", 0x2c}, {&(0x7f0000000600)="98b9ca36ab715b8ca52d8cd56e3f071d5f20f0160aadfaac85ad4104b22226166e336b", 0x23}, {&(0x7f0000000640)="c0d2bdaa6591afca2371730c5dbc2db19b540ccab03c2a4d41151bcc85d8fb510ebbeddd37cd6e8af918517a7933e0b488516940525eefecbb92a79716daa0c7cfebfc35e6be57e375503e", 0x4b}, {&(0x7f00000006c0)="bdbe7d742b8ecca131935b529202c290bafc31f38cc23a4b3c733e6562ee2aee7b7294758b1af1a6b9f1412a3fa4eae80b6121b87fd526a39a74173644ac3181fb7b2225b6f517b8194dc9706b85bed540b889a676277324c6cd7fe967a04b72d72ded295744fed53856bc5bdd34042a3c839472f6516dc462ce8e5186fce4c96e38118d394d3badb5ca77bd99df10dba7ff374c4dd19e8018e2a9967ca0fe27c27825b38eedbd96e098cb17c9f6f86e079adb39d0d3743c8ba7e4ba2ef74ac3cd3e33e7f0f5b3ab4c95b81ed3586476559db4c5f57c6feb42eb561143", 0xdd}, {&(0x7f00000007c0)="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", 0x1000}], 0x6, &(0x7f0000001e00)=ANY=[@ANYBLOB="d00100000000000029000000040000003a36000000000000c204000000ffc20400000e5b078b2e24d2e49b56c49937a3051aab9816f11853c974dabf9882af787e6270fb741214368b054302c2d1b67bd4b444006d0a4f5935c40bfe33eea7fbb3cfd1740ed3126c9a8284d39f1d852da63525205b289ed909dcf8f936487b7b8059c8bacdd40b150a141255099f49b03b61797e1014ff34d88d32feb81722d016f46df2ed1d5b5bdb87898f27c6dcec0001f7b3ea722a7c788a00641a853535dcc79412a26ee48dbf9fe6f13fb8c317dc0b02c34f71023a7a433ec105190ab481b80fa3f7e9e0fb3fe4c40828167c2607265e1b42e14d6f7a3cc942928ecf0f18e73a0f9baded8c888e9121123fa41d1856a4a5f5934d9f0cbd0944c1e85ee095409a2a28059536941e72909173c72f011d8b0be9d6b9da0e84fda6bf92facbbbf1cb409147e98f3ad3e4ad64941aaa69e615d0c4ea076ab59f89331314cf32d9f9ad0c03e641d712f72fed5ca7eea4b681ee6f5a4216006066454c66d433410b943c5c9eea2de2daba8b410f1030cfa95164eef65dba995ce0d9726d571f4115294df6a58e69e0fb0fc91000000000000000000000000000000000c910fe8800000000000000000000000001010000"], 0x1d0}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000019c0)="5666c71a374385a081a3e50733cc5f24a8349712b3e0749ef8ee9ba13a9d26d437327b885aa7b4c4c1582c3ae77a0855ce8056cdb0bde8e7af553e24d0a75455f6025919ab3ac13279d1b8cddc73758042d83094d919b876beb94e02c43f50a91de1efb43e211b3d782ebef9d014a4d1306586e4ba2c27347fb72355d50973092a14828fa03269b74bc973735e1aa2c78619168c72f1c38f2a4f15584b7b6f9e302d6d13b0a61ed3cb43e90cddc3a578486b4b", 0xb3}, {&(0x7f0000001a80)="79bcad793c795184244de3bb558f88cd70d9a54cf8f632db2d056a0d45274ce9a8932a6cedd8789c7fdc4cb2002750917891bde0e584c809bd35b85825a4ea2b4f76a4eca8c498c91ede6df4fc579c9df5d6e5fd53278b04ec67680a013b58347d812bc070cba3e244a4b59b26550063d9760459c7036d24ebada7dfe8a3c42f18355d4eca2a62254a601764eb134f6d58ff849ef8d62b3a4f1501bd5294105e25345cf64943ce418efbb678b5f829ecbb265b4b78ede8b67e086c35bdfbb602708d40b2a902379219bddce4e73ff45d2311157af60819dd31898550", 0xdc}, {&(0x7f0000001b80)="bb754b04bb44b03ca1ad30969531fdc7828d707cb6d8a3e96c8eaf434d45c4b8559bb1216a50a71621858ed728008ccaa2057f52e30d5aebe215971512bc721a94b74692805b7df3d89bc0ff36c937f38c7bef7db9a7c0bd260013f6f61ce73d205663992896850dfc1dd105ea321e51f62e35b77bff9ff48525c6cd12aa7e450bf838ece55dba6cd86ac09ba9169578b5d289af0d9b2a57e4f154d5844478b9ef5937309db6a7dde09243cce8f511f1bad4a69e3d49da81c733a163059dbb3b6d2d42db7fea1b3c57eda67bc9d78ad896ffa7d742fe7d102e6536304e8b68d89e8bb415f6ecb38b0f8ab63be7", 0xed}], 0x3, &(0x7f0000001cc0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x16, 0xa, 0x0, 0x9, 0x0, [@private2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0xc0}}], 0x2, 0x20000880) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x9001, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_user}, {@nodevmap}, {@access_uid}, {@msize={'msize', 0x3d, 0x100000001}}, {@version_u}, {@cache_loose}, {@nodevmap}, {@fscache}], [{@uid_lt}, {@context={'context', 0x3d, 'staff_u'}}]}}) unlink(&(0x7f0000000040)='./file0\x00') 22:41:40 executing program 7: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x41, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:40 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 22:41:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 22:41:40 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 22:41:40 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 244.596115] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.600178] loop2: detected capacity change from 0 to 40 [ 244.621002] audit: type=1326 audit(1690238501.035:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4328 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7cd405b19 code=0x0 22:41:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 244.674491] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:41:41 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) 22:41:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 244.751591] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:41:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:41:41 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "e6ff98588756e68f"}, 0xc) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:41:41 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5301, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 244.962602] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 244.971553] audit: type=1326 audit(1690238501.383:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4355 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:41:41 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:41:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 245.028944] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.038243] loop2: detected capacity change from 0 to 40 [ 245.051752] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 245.795695] audit: type=1326 audit(1690238502.209:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4355 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:41:55 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0xc000, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3, 0x18, 0x0) utime(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x7, 0x6}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51b, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r0, r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x2}, 0x18226, 0xfffffffffffffffa, 0x7, 0x5, 0x2, 0x20, 0x101, 0x0, 0x7fffbfff, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r1, 0x2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x800448d4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xff, @empty, 0x3}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000004c0)="fb61e5581898700329a06fa43b05c108d02d97627f5e342cfd8f80941318005d3cf0ba3ed6145a3cba6f430954221c60256ab96c7c5502a8b042534ca1140af19c9f06dda37b2cde849f198a45d42ddf48335d7653743382f5f41413df0b10c778e0497a328dc843b5c1eb6453b0b8ad92616a13826d4a2d5466e0a418784665fcb346885e343f665404779e1c39e7465a3f6a40c9da3df1deee293e7669354494318c4028d2d48e248335900b013bd0f78e9def0802de95c410882318ea4ff57bd351627cfdaee45691c591aeb823b6566eb45e996ba750d31340207e980913cc6b54e5e04f00b64ef9b4bd9e93", 0xee}, {&(0x7f00000005c0)="1910dc06a510fa6f24140c13eb83781cdcd450386f14cdd6d3166a842e43b1f37dccca5b10e86926352b1e90", 0x2c}, {&(0x7f0000000600)="98b9ca36ab715b8ca52d8cd56e3f071d5f20f0160aadfaac85ad4104b22226166e336b", 0x23}, {&(0x7f0000000640)="c0d2bdaa6591afca2371730c5dbc2db19b540ccab03c2a4d41151bcc85d8fb510ebbeddd37cd6e8af918517a7933e0b488516940525eefecbb92a79716daa0c7cfebfc35e6be57e375503e", 0x4b}, {&(0x7f00000006c0)="bdbe7d742b8ecca131935b529202c290bafc31f38cc23a4b3c733e6562ee2aee7b7294758b1af1a6b9f1412a3fa4eae80b6121b87fd526a39a74173644ac3181fb7b2225b6f517b8194dc9706b85bed540b889a676277324c6cd7fe967a04b72d72ded295744fed53856bc5bdd34042a3c839472f6516dc462ce8e5186fce4c96e38118d394d3badb5ca77bd99df10dba7ff374c4dd19e8018e2a9967ca0fe27c27825b38eedbd96e098cb17c9f6f86e079adb39d0d3743c8ba7e4ba2ef74ac3cd3e33e7f0f5b3ab4c95b81ed3586476559db4c5f57c6feb42eb561143", 0xdd}, {&(0x7f00000007c0)="372f7d0c4b6d714ae56ee735090bb950483af042c1ad49a6810c4de1fd60039230a36f7f2d4f8287d361d512ef440e2d58e99d0213441811765f73a385f0781604ed7f26e8a1d519574d3ab746ab695c7b43b54937767e4557719ed38baab86d56558f761e5f7a3f1ce0d914ea8b3590b63ae1762a2e9433f1009424b0d6c687b07daa68959f66e98efc12141bf3e17344acbc11ad8dd50ad77326b3ea7b230d2d1b1958837e7585afb1c40a24d85e61c71c1d671effdfe966d881cd2b4e3ea9464e500b608ef21c1821f57502d186df77c22f74ac42aa5b295a75f831d9d3ff1317944b5de4e088270f1f009602488232e10c09ba076037da9046ac9c9f23c0863e06dbfb219a000e4a0feecb0ee8da7692bc2239d742e089ec8c4656f922c3fe43e676f002b2fcc8a822bb146819aaddf0752c2a92e03152f6d3481e4c013bdef43eaacdc381425fb8748e700bc8746713a96c031f6e43a450658c31c0de491003951f8a89d56d311304466aa285593425408bac051dd123913118447468f24f34ae0c05f6cfc5c64d53262673668084e171372bcfeba35ccd62740345e15ce6d921472b9f338efb189d6658d5642f6f4fd3982ea9220ff9c6e808b7565959dce942d45d36b7f8373049ec53ea237e62d0f4c632d3b2b8ea980b5d164e435e0d64ec86b9ab18e3b1e6b6532c35041083a8898a9dcba94257b661a6fd7bccb6bb446e4657f5b41502514ee08bad7acac0bd8a54ad99a1b2e2b8e18b8fc935aa539c464b10f66d22795504553d4f68295ed97cb649653e3ea4ac6250b35f2be7e911d76622dd3e2dc70b15a6a182c256d993b934263cafc32eb5cab8409f0fffa4e51ff4d9756954b28c856e97eb102684014656ccd42f57797ff401a76e34b5fca4a56edb2f8df033f8a3215c52a2c1dcec36c2511d0846253af1d9169f8a6b6d030859d800e842f09784a8206da25d9f9b2359bdaae58a009aec29111142ba84fec5f1f7a8e83ef0d3dad293ece61094bd606c02f169a9f9cb54fac31972d3fc0d39896698bc41b5fcac2751f8c2870ac9759a138eb5ef56d899a0ce4f43312b9c000d09125059f41bc1867f5cdc93d3d9ac8d4637df1bee831e7a2ec957c11811c9ebe29fb6b9d4d82ee45c16a8ad6d8210f38eba52977dee4d352f104e7c40f225da9b2aee664dc3adf953fbe15ec8f51b926d831518be0eb7b246c4434894df6eb455c13dbe0e3da395c6297a8692600758cb1c56f3413ed3dc68b9af0e696a7737597ed1f8ff9c3b096ac11812a571d0d001bc60dfe70740c26d5e8d81b51a960386d26067fe9ac861e4df13f17e166f0b7847448d925623b668feb6b36034baade29318169d04e156cb976a77e0c58972f6147a0bd022eb1f47fcdf354443ca6563d2b730f64cf27b6d2999f6b56d446458513b190e1770af6c3354a8612c10a139471db108f43ff275337eb280fe342fb62c224a20dc2478dcd8b5b97d15ad0ac4fe2f164b386f72645148b9920dd7fbbe9558a151e0364532a074b5115908c99fa69d037d3441796b3321d124ca7dc2a5456c451daf6aab741fb29da3373b7287219817690cee425fc08f04061f341b4ef6732076f0c9335ffcd4cd22d8ac174f393fcf484694102bd0e30de8e621c19c98bd75a561ecef6896a801247dd7f3ae40ea28eafcade24530b466146f4fbd4035968e1cc8520901f4dfb7d69e0a4881e29cf71918c5bba179253ab5a78b878212ea9296920688c5004c671b863465a18405ae0474434871e9bebb227a061b836b19dc6ae725091af79507f9bdc61c6541942cb193c0901d0f90f4448485ce4b1ed11d4cf41d5103b8ee03b046f02bd89f6b121dfaaeb864c3e94a77dd82b0fb2ea729e2a032338cd62544c6cb963e937ad60d9dfe07873df5287f7f86f31c585495f4dc17d410c9af654c6d25d786d4f59e6161de35e90751b385764fc581a9673d879a88861c0cb782a715cf0a16ba05af48f8a5d5264907a9424f32cc3ad2a1d1bcbd957cc321794c23000dc0bdeb8bff0b39535a40ea4af470f73f0f4576c358a836a1aff3a6887949468224a47e7df4a5ccc05d19337b7a7118def6d665d7d5dd35edf42d7551888fa52cdee406530be92ed19c7049dd13f2d8ec5735220263ecb54536b0a6ff6a74d6b87d8ceee3d2177633490ae92de9141d68c93f64aace2782d549298fd3c3f129ff31676263356f222d4ae9e86e2fcec93ab9e74052aa3b34081af5b544f82d8e4143e583b35e9d75d41ba05d26ccdbb20b30ef90cf94e5250eae74bb929d89ab90282d6375069ee91c0a4a434862e64aa2548eb3f740be3d855611c2bd0a309b2359897fd97d88bf0afbea6e557114b5edcbc8ab12a601292eea08c6bebdba9b58fc6be070a54ff1ff0fe7f7434b70ed7ecf650258d11cbaa3fecf5f9de797a832b297670fdbc2b425e40eb4368c7f687a9e739af29d6b9695f3bc1508489d4ac5f54610a4a61d23c9fe20fd585f7075c6ee7b7dc3c8b04b1bc00406f1df3770b0e005750c2a4ee963277be15a657fe32576bdc28572efe0c93c4afec8e5c0b228b14a2100a1e83f4790eba2b50e7899b586b37a4cf5cb0228b60fe934d54b55fda05a6b4501afb077518bdf73ff1ba7945dc6509c90c9859bde3698f22dc5987828953024fb4579e59fcb844c86e10d305f734c35935392066d0e03314b122d3bcd2c2d1e095db9ec3dbbd4ab07810e1dd455b727025f28f13e87c1949938e04b2b5e43822044ff30b628fdef3d3c418e7454c076648267c60fd8975c8fb895c505a45ba1b932fbef8c052012225de76db45bfea496764b3a42f1c637dda24f729058794a3b95106bbc3dc4bf4a98d016ffc8e7e16164b39f8d1f994a7c5f7e3683d9067cce0104a65bab4efb62d6767ff556c9ceb461f09857ce045aa3ac0108caf43bb62b3eb03ee270c67939fe9ea9ff1622f6ddd7d53475063d2a45b3a577998d078535239d9e99ffedfc27ae37ac33c25cce32b6f4e728f78a4ae7d6d425204ca923b407fdcea5c76481074b2e62b88c3fff4b7d1ac30e2f9f473eafe03f98c1d782a4b580dcef557c3200154de6220e7fd8593e66d3e2f2ffcdd895c35202570816c4783444919bad8d6f4b43103bbb2ed7684552ada572ba9a78e9cc69bcd7cac6144d9e71115321f943da5bea53b89b9b5ff7b752014fc22a43be8140f634357c2c55814725b046374b928f1a3b3c6b1f4c64c4fb7382fb827ae5f1cc82df388d305264c2878462e5bb69dd4e9b8531d79989a50275ba4836930a0928175c65a4916886d5a70c0491da0c27a07b64e6d821c1d4a4fbf8780f1683c394ef0fbbc91401a1d354735f9c9bbb7a93f31751cf36813f5da3a0f1cd33975f17b2a9cf871d1b191b630a52f0c9cbfb4ae3e3d11c1394d13918a48f4942b974dfacd98de0e88bc5abaeb1e4adbfd76467f2130dcc4ea7de37ecd98a517e5512ee408d5480870ab6b75fc266ffe87f29201853f499e04a13127a2a8ddb5308c46ba56be0291ce12bf27929be417c851a2bdd080c5d19a6540b7f14846d0c7015281780d6a5f919e3f50dd6facaac52db5696ad5b37dc5547bfcee645e06f2bdeba797ebf8c644b957b23707139bfbc74652142569d0f9818749b1fe1f29e502fe2f3f627eb0a9478320895cd6b947a77bd841601fb1bdca3c8c66d43e2332a7eb8f9f4af216e322c90e1bfb8c2a7e69ac25dd7f01c2dc7a12ef3eebddbfc19f1fd6dfa931fd13a279a08f19c53a3aa17546e7b7783e90db470ea6765f59dcbd3c53e1e9afd5bc3d3b3aade1dc848e16273f6cfd06bb8bec03bb1ecdb2a61644ffef4fa9843f0eb457736dad5b200b50246b19d5c86377bf1dfafe90c4dd5bca54a6cc277a9a0dd18b9dadeac9526826a7cf8e46b2ba736a43a211870fcf15cc5b3edb48ab1139a834461fc4784825a563737965830e35fedc6e80da4d25f6fa4deae9fc41faf109ad85a7c73b42cb33b1976a75527d2b6f93aeede0bea228c26303dec096aebad0929c7bc1824ccf93b829b8e9287e2c2e67a81cbc0112915bb6ef1b9922d519c23c8790da58e74c345baf46514fb86332da013dd4232a898b31da29564216f928a29b256d37844da688c839fd22ca9773c9c5551282f5dacd22fb1d32009ec6fe25b7ceef93f02c46b4e2a25f6bbbe2f67ceac22ed334c0b765282b198e46c599215ae108876e5dcf8421645c9cec42f48e81828a7094a5fcdb4ef802479a2509754e901dad518d107882e3ede8a3e7117315d6928ee4e9a62175685c553b76de253eb06c530d455c3b8c6fa81d958f2d1701dec4ec5da954896c58b17e03a9a174c884e0c8d528990bd32a238a46ac3231503e857c7bcf11ee18556d17209fea87263ad1f876f3cb803394a4a23113fb9893e4b292495e221520271348ba0c6b7f4507b956d64056c511c4cf16e83985bf2aebeee14ba537dbe38b4f178471baf5110851701ef1dfed45ff83274b987062648944971c973bc5b83aa8adcc022a9453223bcbca9d5695645b2cf3be59038a9c9c0d02d6a817c6443da4764eeebc0498d65e5951ae7ced32a73cec6ac0e8785046ceb8490d6d9653da9659b09ecc951dab47b4bb362b43b3067030d8756c181bc4ef777a0ec9645a6c83b394e1125c1107b3271d0b10e58e626f07d1278a8933fc63027952354b8b25e3e71c49e69084af39e4e7bdcdbf93421124e5c2b79c636949ce24af7d4fc7fa94cd981827dfef4af7d7e49276e17c6f18278a9ad38ca8bd3aa10e335f0a5b8c4fb5dbe94841a8585cfac7eeb1959e95ba118eb8d8c9f02f54ef5dc09e41af0e06ca17f1e71b66f22731bc8f66df4668edbc42f41559d301c6f398d154e3bc169631d21c3b1cde260b8156a05f657ea15316c9ea79c2a10f334e6d265435b10d8e021d80958b2b76e4f45f0af3b71c957d5cd971b8cd327d0988e2ecd0471688e953d58373739dcd7e5305ef8635d040fd60e1245881fa202e3d9f88591650f5070f07d6ab23e70b58ef93b0c3ac16b9c84fa69b6dfd2e4fdae7f7d4604910a7e0b5dd6a48d56a4c83d15038d666afe7b2d03a10d878230f2fce8ad4991ca79599bb59ef48062c7106ab5b35180023b5e348a4b98b3db671c9ecc19ac3ec49c8c4439e58b0123d051047e66a7edb6a0399d54508f05a207d34aaa41c782dee5003cdcb202da14ee0f82a07f6cc616bd2984d664a333749ec7ea300de6d8f24a3700e5c2d7b4b94a4fa3df76451987860b8c745ddb4cef180c854df88c57f9c91ea1d232569ceda5a56099eb3eb65fa7014764b934fc0770a6830a996e6e7325bbcf1de9466d9d583ed187ab2ca2646a9b024fc55e5d80cd2549aea41b53e7088eec9730bb8bbb425ebf8dae62dcd718df8c5680b6147bfe40e2f87ab7717d9bb20172e62a006d37c993c8664b192e05d944b86b5e2991c2904dceecddf2a314631736ef6b5e6236ac3daf4a6185c1317d67220c60753cb0be870ba14a9626cb7798839b705ac3569a8d6e7d270424eb8c0956b18d1f40ea007899a1bb609f15deab62f3ba984f96a521c6861cc0b600f74e98082bc910a88af1cc98536946c009020658e2a127231c4534577bfe9ee3ccb0aa92faa23f8cf460871466ead24c81694a09e2f6d274e8b8043912e640556b378c60bef69ee2f39b3da2cf58a74013a2c7822bea6b29e4c24b000662d402017fff5e3ee49db9c8785e9df96863cecdb82413772c3fe0863bb4b39b733efd3afb8b3ecde59bae774591f2f2", 0x1000}], 0x6, &(0x7f0000001e00)=ANY=[@ANYBLOB="d00100000000000029000000040000003a36000000000000c204000000ffc20400000e5b078b2e24d2e49b56c49937a3051aab9816f11853c974dabf9882af787e6270fb741214368b054302c2d1b67bd4b444006d0a4f5935c40bfe33eea7fbb3cfd1740ed3126c9a8284d39f1d852da63525205b289ed909dcf8f936487b7b8059c8bacdd40b150a141255099f49b03b61797e1014ff34d88d32feb81722d016f46df2ed1d5b5bdb87898f27c6dcec0001f7b3ea722a7c788a00641a853535dcc79412a26ee48dbf9fe6f13fb8c317dc0b02c34f71023a7a433ec105190ab481b80fa3f7e9e0fb3fe4c40828167c2607265e1b42e14d6f7a3cc942928ecf0f18e73a0f9baded8c888e9121123fa41d1856a4a5f5934d9f0cbd0944c1e85ee095409a2a28059536941e72909173c72f011d8b0be9d6b9da0e84fda6bf92facbbbf1cb409147e98f3ad3e4ad64941aaa69e615d0c4ea076ab59f89331314cf32d9f9ad0c03e641d712f72fed5ca7eea4b681ee6f5a4216006066454c66d433410b943c5c9eea2de2daba8b410f1030cfa95164eef65dba995ce0d9726d571f4115294df6a58e69e0fb0fc91000000000000000000000000000000000c910fe8800000000000000000000000001010000"], 0x1d0}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000019c0)="5666c71a374385a081a3e50733cc5f24a8349712b3e0749ef8ee9ba13a9d26d437327b885aa7b4c4c1582c3ae77a0855ce8056cdb0bde8e7af553e24d0a75455f6025919ab3ac13279d1b8cddc73758042d83094d919b876beb94e02c43f50a91de1efb43e211b3d782ebef9d014a4d1306586e4ba2c27347fb72355d50973092a14828fa03269b74bc973735e1aa2c78619168c72f1c38f2a4f15584b7b6f9e302d6d13b0a61ed3cb43e90cddc3a578486b4b", 0xb3}, {&(0x7f0000001a80)="79bcad793c795184244de3bb558f88cd70d9a54cf8f632db2d056a0d45274ce9a8932a6cedd8789c7fdc4cb2002750917891bde0e584c809bd35b85825a4ea2b4f76a4eca8c498c91ede6df4fc579c9df5d6e5fd53278b04ec67680a013b58347d812bc070cba3e244a4b59b26550063d9760459c7036d24ebada7dfe8a3c42f18355d4eca2a62254a601764eb134f6d58ff849ef8d62b3a4f1501bd5294105e25345cf64943ce418efbb678b5f829ecbb265b4b78ede8b67e086c35bdfbb602708d40b2a902379219bddce4e73ff45d2311157af60819dd31898550", 0xdc}, {&(0x7f0000001b80)="bb754b04bb44b03ca1ad30969531fdc7828d707cb6d8a3e96c8eaf434d45c4b8559bb1216a50a71621858ed728008ccaa2057f52e30d5aebe215971512bc721a94b74692805b7df3d89bc0ff36c937f38c7bef7db9a7c0bd260013f6f61ce73d205663992896850dfc1dd105ea321e51f62e35b77bff9ff48525c6cd12aa7e450bf838ece55dba6cd86ac09ba9169578b5d289af0d9b2a57e4f154d5844478b9ef5937309db6a7dde09243cce8f511f1bad4a69e3d49da81c733a163059dbb3b6d2d42db7fea1b3c57eda67bc9d78ad896ffa7d742fe7d102e6536304e8b68d89e8bb415f6ecb38b0f8ab63be7", 0xed}], 0x3, &(0x7f0000001cc0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x16, 0xa, 0x0, 0x9, 0x0, [@private2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0xc0}}], 0x2, 0x20000880) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x9001, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_user}, {@nodevmap}, {@access_uid}, {@msize={'msize', 0x3d, 0x100000001}}, {@version_u}, {@cache_loose}, {@nodevmap}, {@fscache}], [{@uid_lt}, {@context={'context', 0x3d, 'staff_u'}}]}}) unlink(&(0x7f0000000040)='./file0\x00') 22:41:55 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:41:55 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5301, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:41:55 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x80) stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x7, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000240)="3b9909d09139cc09da3f40aa84a2a8e043d636db92ec0bf8c0314f91d96cb8c46843d15658290f196d1ac9652a0f67b1e9a4532bbb159feecb0b241a84af8c6c1286b822b1bd599c5356ca55a292537d26ec2b4084bf75f47821e6725ccc04f29e3a5acad52a78a2dfc3d48ffc54223bb43b0a34db7f4ecf785a", 0x7a, 0x589}, {&(0x7f00000002c0)="5498647db3ff50263652b8716f20accdcf16c2b4997dd9f741c795b7c916775580d2b73b0cb0b8f9616d46f7d78c7a84c316e580f66cc61e63387a0d9e2366cb439a548cbee33349aa66a7dfa4ac5d36d5e506f6958f89d2f34886379aabcadff040a986684aedb6bb1fd16349e2bab5dca6539b5b", 0x75, 0xffffffffffffff80}, {&(0x7f0000000340)="7c6fe22677c587cfa4fdd91141bbc5593853302986d88d6ff0ab584c7e310ae9e36d968e207d7da41c0d3928296d3e96013b88e1404adb653ffe875c41b575445e6c7c4800c03c9fbcf5e9916f1ca5cf4f5721ffe9c0e04f28b75b2fd3e99dd7b54dd42c8a32bb9ddcedfd4a8bade2749d3cde91961acf8b7216165769c0f0049878957b54c2", 0x86, 0x10000}, {&(0x7f0000000400)="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", 0xfa, 0x275c}, {&(0x7f0000000500)="4660e7a2c91ee473a618d51d81a43f2911f5ebb785738533e5c67d32f5a4a15f7ed70d3a00c160086f7db08069c598ab512faa740cf2527b4a83b5f57d383520ab68907ccd4cb839d2d0c1925804b1612d8558a299b228b63ecb7722fe300c7af7d03a9fe96345816ceb5e45b450cd9f544cc9baedc0c0ae926f89e5c68e7a548cf40413", 0x84, 0x80000000}], 0x10000, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00'/16, @ANYRESHEX=r1, @ANYBLOB="2c73697a653d391d2c687567653d77697468696e5f73697a652c687567653d6e657665722c73697a653d38672c6d706f6c3d696e7465726c656176653d72656c61746976653a302f362c7365636c6162656c2c00"]) stat(&(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 22:41:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:41:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) 22:41:55 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:55 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) [ 258.651006] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.655873] loop2: detected capacity change from 0 to 40 [ 258.661128] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 258.687802] audit: type=1326 audit(1690238515.094:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4376 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 258.720132] loop4: detected capacity change from 0 to 264192 22:41:55 executing program 5: 22:41:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 258.796941] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 258.802592] kworker/u4:10: attempt to access beyond end of device [ 258.802592] loop2: rw=1, sector=124, nr_sectors = 4 limit=40 [ 258.804535] buffer_io_error: 22 callbacks suppressed [ 258.804550] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:41:55 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:41:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) 22:41:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:41:55 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 258.903739] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:41:55 executing program 5: 22:41:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x6, 0xbc, 0x1f, 0x0, 0x8001, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x8, 0xfffffffd, 0x7, 0x800000000000, 0xd6, 0x3, 0x0, 0x400, 0x0, 0x8001}, r0, 0x8, 0xffffffffffffffff, 0x0) [ 258.923366] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:41:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x40800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa0200, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x6ad5, &(0x7f0000000180)={0x0, 0x9690, 0x10, 0x2, 0x333, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0xfffffffd) sendfile(r0, r0, &(0x7f0000000340)=0x100000001, 0x39028a35) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r4, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) 22:41:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) [ 259.025887] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:42:07 executing program 5: 22:42:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:07 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:07 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:42:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x40800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa0200, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x6ad5, &(0x7f0000000180)={0x0, 0x9690, 0x10, 0x2, 0x333, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0xfffffffd) sendfile(r0, r0, &(0x7f0000000340)=0x100000001, 0x39028a35) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r4, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) 22:42:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:42:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x6, 0xbc, 0x1f, 0x0, 0x8001, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x8, 0xfffffffd, 0x7, 0x800000000000, 0xd6, 0x3, 0x0, 0x400, 0x0, 0x8001}, r0, 0x8, 0xffffffffffffffff, 0x0) 22:42:07 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5301, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 271.256070] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 271.260937] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.276824] loop2: detected capacity change from 0 to 40 22:42:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:07 executing program 5: syz_emit_vhci(0x0, 0x0) [ 271.372376] audit: type=1326 audit(1690238527.786:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4433 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 271.654966] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 271.724453] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:42:08 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 271.819142] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:42:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:21 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5301, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:42:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x40800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa0200, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x6ad5, &(0x7f0000000180)={0x0, 0x9690, 0x10, 0x2, 0x333, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0xfffffffd) sendfile(r0, r0, &(0x7f0000000340)=0x100000001, 0x39028a35) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r4, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) 22:42:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x6, 0xbc, 0x1f, 0x0, 0x8001, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x8, 0xfffffffd, 0x7, 0x800000000000, 0xd6, 0x3, 0x0, 0x400, 0x0, 0x8001}, r0, 0x8, 0xffffffffffffffff, 0x0) 22:42:21 executing program 5: syz_emit_vhci(0x0, 0x0) 22:42:21 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:42:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:42:21 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x0, 0x0, 0x5, 0x94d}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 284.930056] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.943622] loop2: detected capacity change from 0 to 40 22:42:21 executing program 5: syz_emit_vhci(0x0, 0x0) [ 284.975830] audit: type=1326 audit(1690238541.389:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4472 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 284.981968] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 285.089642] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.095559] loop3: detected capacity change from 0 to 40 [ 285.141707] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 285.191848] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 285.309914] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:42:21 executing program 6: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:42:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:21 executing program 6: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8d}, "c4413af69709a272ab9009d0654f3ff67d8d0f297480db4280c2f6735f04fdad74a853784f6f31537dd7994c215347bbbda2b848b26a59941787c7fac7a900b6ad5bd5ed743a3852c7387133af49e2100a955a9fdfb1233202b86636dc1cabcaa53450d0c8c95e98d15abbb954d4f79dd55cc41aa2e92276146a1889b50891df8d06fb2b8f93e2b9ef47611663"}, 0x91) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:21 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:42:35 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:42:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x6, 0xbc, 0x1f, 0x0, 0x8001, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x8, 0xfffffffd, 0x7, 0x800000000000, 0xd6, 0x3, 0x0, 0x400, 0x0, 0x8001}, r0, 0x8, 0xffffffffffffffff, 0x0) 22:42:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:42:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) 22:42:35 executing program 6: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:42:35 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 299.300842] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 299.305808] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.308477] loop2: detected capacity change from 0 to 40 [ 299.316276] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 299.317755] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.326301] loop3: detected capacity change from 0 to 40 22:42:35 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 299.346332] audit: type=1326 audit(1690238555.759:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4523 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 299.389043] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:42:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:42:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) [ 299.449137] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:42:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:42:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) [ 299.458420] Bluetooth: hci2: SCO packet for unknown connection handle 0 22:42:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:42:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) [ 299.571194] Bluetooth: hci2: SCO packet for unknown connection handle 0 22:42:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) [ 299.626045] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 299.682914] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.685424] loop2: detected capacity change from 0 to 40 [ 299.818395] kworker/u4:2: attempt to access beyond end of device [ 299.818395] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 299.820455] Buffer I/O error on dev loop3, logical block 31, lost async page write 22:42:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:51 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:42:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:42:51 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:42:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:42:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) 22:42:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x2) 22:42:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 315.308924] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 315.324537] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.338940] loop2: detected capacity change from 0 to 40 22:42:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 315.375523] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.376999] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 315.418124] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 315.420752] audit: type=1326 audit(1690238571.808:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4560 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 315.425793] loop3: detected capacity change from 0 to 40 22:42:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:51 executing program 5: [ 315.535726] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:42:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:42:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "b1acf594f673f147b33627f6d017dfc09d568c5e31e91238319d4ed058cce799bd4f17004bfe5f3b87ecec7b98fd6e20856ef01f5bc62e87152ace7c2d363c1edea66431fb8ae05d"}, 0x4c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:42:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:42:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) ftruncate(0xffffffffffffffff, 0x2) 22:42:52 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:42:52 executing program 5: [ 315.691736] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.699267] loop3: detected capacity change from 0 to 40 [ 315.971221] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 315.982771] loop2: detected capacity change from 0 to 40 [ 316.866390] kworker/u4:3: attempt to access beyond end of device [ 316.866390] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 316.868384] Buffer I/O error on dev loop3, logical block 31, lost async page write 22:43:08 executing program 5: 22:43:08 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:43:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:08 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:43:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:43:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) ftruncate(0xffffffffffffffff, 0x2) 22:43:08 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 332.059054] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 332.096865] audit: type=1326 audit(1690238588.510:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4608 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 332.106787] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.116581] loop2: detected capacity change from 0 to 40 [ 332.160796] loop3: detected capacity change from 0 to 40 22:43:08 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 332.307126] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:08 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:08 executing program 5: syz_emit_vhci(0x0, 0x0) 22:43:08 executing program 5: syz_emit_vhci(0x0, 0x0) 22:43:09 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 332.667738] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:09 executing program 5: syz_emit_vhci(0x0, 0x0) 22:43:10 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 333.918598] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 334.016568] kworker/u4:3: attempt to access beyond end of device [ 334.016568] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 334.018705] Buffer I/O error on dev loop3, logical block 31, lost async page write 22:43:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) 22:43:27 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:43:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:43:27 executing program 1: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7, 0x401}}, './file2\x00'}) ftruncate(0xffffffffffffffff, 0x2) 22:43:27 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:43:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 350.932939] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.937687] loop2: detected capacity change from 0 to 40 [ 350.962615] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 350.986000] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.998410] audit: type=1326 audit(1690238607.412:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4653 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 351.006069] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 351.012148] loop3: detected capacity change from 0 to 40 22:43:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:27 executing program 1: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) [ 351.236492] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:27 executing program 1: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 351.343212] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:27 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe0}, "c5245cc69713c1b647be3fe13340b101b948f858e648cb29b6bbccb57148fe76fe7355e89864cbb1de9b7ac527fbd1d5ec61e635ff3ea8b786701b55fd401d97516e6aa4cdaf5d3c9f472e8ec7ce0049cb15365bbbfecaecf355a7efeda69a910543659dee3ff7afd564cb36e4fe5b07ae59d1ba35ae3f635ecadb57c3740dd1833e4749ec5ce934576e0deee56adbae63ed8ea77fb4a1c9980a30360c63931f1ceccdedec1c4faf4d75fd4cd12c9902a4ec5e159ec1b7f041f2ce49af8fc992e650b388d42b2e2ba554312d16bf4ebb94d70fa5a68d8eb71de1ec1a26390db8"}, 0xe4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 351.412328] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 351.413527] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 351.423931] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.429002] kworker/u4:0: attempt to access beyond end of device [ 351.429002] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 351.430103] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 351.434555] loop2: detected capacity change from 0 to 40 22:43:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) [ 351.626081] loop3: detected capacity change from 0 to 40 [ 352.172614] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 22:43:40 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:43:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x17}, "40a9367a79234d97cd2bd92cfc3170d33de110c916055b"}, 0x1b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:43:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:43:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:40 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:40 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) close(r3) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:43:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 364.470420] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.475119] loop3: detected capacity change from 0 to 40 [ 364.484384] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 364.487774] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.506093] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 364.509851] loop2: detected capacity change from 0 to 40 [ 364.524234] audit: type=1326 audit(1690238620.936:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4703 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:43:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:43:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 364.610943] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 364.612942] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:43:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 364.696706] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.707401] loop3: detected capacity change from 0 to 40 [ 364.721011] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 364.721562] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 364.749618] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:43:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 364.763164] loop2: detected capacity change from 0 to 40 22:43:55 executing program 5: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:43:55 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:43:55 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:43:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:43:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:43:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:43:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 378.953252] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 378.954142] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 378.959232] audit: type=1326 audit(1690238635.373:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4733 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:43:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 378.988114] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.989479] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.007141] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 379.008305] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:55 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 379.101792] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:43:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:43:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 379.206247] loop2: detected capacity change from 0 to 40 [ 379.331669] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 379.334059] loop3: detected capacity change from 0 to 40 22:43:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:43:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:44:08 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:44:08 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:44:08 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:44:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:44:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 391.768510] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.769761] audit: type=1326 audit(1690238648.168:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4778 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 391.773036] loop3: detected capacity change from 0 to 40 [ 391.785429] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 391.788817] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 391.804202] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 391.814355] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 391.817307] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.834724] loop2: detected capacity change from 0 to 40 22:44:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:44:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:44:08 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 392.128706] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 392.128996] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:44:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 392.134756] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 392.143088] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:44:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) [ 392.187050] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 22:44:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 392.245913] loop3: detected capacity change from 0 to 40 [ 392.369084] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 392.370204] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 392.405703] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 392.424047] loop2: detected capacity change from 0 to 40 22:44:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 22:44:20 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:44:20 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) r5 = dup2(r4, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x88) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:44:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:44:20 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) syz_io_uring_complete(0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:44:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 404.229793] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.231235] loop3: detected capacity change from 0 to 40 [ 404.264773] audit: type=1326 audit(1690238660.678:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4819 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 404.273541] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.276262] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 404.278905] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 404.281171] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 404.281270] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 404.290287] loop2: detected capacity change from 0 to 40 22:44:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 22:44:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 22:44:20 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) [ 404.420025] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 404.420908] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:44:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:44:20 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 404.461612] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 404.478058] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 404.479207] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 404.528716] loop3: detected capacity change from 0 to 40 [ 404.621842] loop2: detected capacity change from 0 to 40 [ 407.725469] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 407.726367] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:44:37 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:44:37 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x48040080) 22:44:37 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) dup2(r4, r3) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:44:37 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 22:44:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:44:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r3, 0x2) [ 421.474871] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.480139] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.484289] loop2: detected capacity change from 0 to 40 [ 421.487265] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 421.492115] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 421.492246] loop3: detected capacity change from 0 to 40 [ 421.496242] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 421.515748] audit: type=1326 audit(1690238677.915:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4862 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:44:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) [ 421.842536] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 421.850969] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 421.855281] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 421.862853] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.885349] loop3: detected capacity change from 0 to 40 22:44:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x48040080) 22:44:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:44:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 422.218562] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 422.219611] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 422.305701] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 422.305864] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:44:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 422.442095] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 422.593964] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 422.699057] loop2: detected capacity change from 0 to 40 [ 422.703383] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 422.830734] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:44:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x48040080) 22:44:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xb7, 0x2}, {0x7f}}, @l2cap_info_rsp={{0xb, 0x7f, 0x4}, {0x7, 0x8}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:44:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:44:51 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) dup2(r4, r3) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:44:51 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 435.260668] audit: type=1326 audit(1690238691.669:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4907 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 435.263095] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 435.263468] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 435.275296] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 435.275411] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 435.286146] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.288010] loop2: detected capacity change from 0 to 40 22:44:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 435.302960] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.316564] loop3: detected capacity change from 0 to 40 22:44:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 435.341148] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 435.352777] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:44:51 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5301, 0x0) dup2(r4, r3) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 435.380707] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 435.420814] audit: type=1326 audit(1690238691.832:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4929 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7cd405b19 code=0x0 22:44:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:44:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 435.462723] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 435.472893] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 435.474144] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 435.503291] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.504120] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.505524] loop2: detected capacity change from 0 to 40 [ 435.512085] loop3: detected capacity change from 0 to 40 22:44:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x48040080) 22:44:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 435.584696] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 435.584824] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:44:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:52 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:44:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) [ 435.585921] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 435.768298] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 435.769448] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 435.851245] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 435.852330] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 436.063468] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.069343] loop2: detected capacity change from 0 to 40 [ 436.086884] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.091438] loop3: detected capacity change from 0 to 40 22:45:07 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:45:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:45:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x48040080) 22:45:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x48040080) 22:45:07 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5301, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r4, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:45:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 450.746027] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 450.747406] loop3: detected capacity change from 0 to 40 [ 450.792055] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 450.792421] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 450.804473] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 450.805918] audit: type=1326 audit(1690238707.220:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4972 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 450.809024] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.811135] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:45:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) syz_io_uring_complete(0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:45:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) [ 450.909736] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 450.925453] loop3: detected capacity change from 0 to 40 [ 450.933129] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 450.971799] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 450.976041] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 450.983536] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 22:45:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x48040080) 22:45:21 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:21 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:45:21 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:45:21 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:45:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:45:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) unshare(0x48040080) [ 464.683873] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.690000] loop3: detected capacity change from 0 to 40 [ 464.707509] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.709488] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 464.716044] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 464.727713] audit: type=1326 audit(1690238721.141:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5007 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 22:45:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) unshare(0x48040080) 22:45:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r3, 0x2) [ 464.847531] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 466.996247] loop2: detected capacity change from 0 to 40 22:45:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:23 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 467.072467] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.079293] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 467.092398] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 467.102184] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:45:23 executing program 5: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:23 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 467.160314] loop3: detected capacity change from 0 to 40 [ 467.221905] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 467.239794] loop2: detected capacity change from 0 to 40 [ 467.259418] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 22:45:43 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:45:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r3, 0x2) 22:45:43 executing program 5: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) unshare(0x48040080) 22:45:43 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:45:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 487.066296] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 487.071285] audit: type=1326 audit(1690238743.485:35): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5041 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 487.085723] loop2: detected capacity change from 0 to 40 [ 487.099708] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 487.099728] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 487.106218] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.108735] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 487.120905] loop3: detected capacity change from 0 to 40 22:45:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r3, 0x2) 22:45:43 executing program 5: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7f}}}, 0x14) 22:45:43 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 487.215050] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 487.224322] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 487.245695] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 487.248110] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:45:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) [ 487.279857] loop2: detected capacity change from 0 to 40 22:45:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7f}}}, 0x14) 22:45:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x0) 22:45:43 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 487.335767] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 487.365144] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.367229] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 487.371710] loop3: detected capacity change from 0 to 40 [ 487.408587] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:45:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r3, 0x2) 22:45:56 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:45:56 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7f}}}, 0x14) 22:45:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x0) 22:45:56 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 500.100107] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:45:56 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0x0, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 500.131308] loop2: detected capacity change from 0 to 40 [ 500.136328] audit: type=1326 audit(1690238756.546:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5080 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 500.140949] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 500.158093] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.158570] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 500.159877] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 500.164196] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 500.167429] loop3: detected capacity change from 0 to 40 22:45:56 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:45:56 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f}}}, 0x14) 22:45:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x0) [ 500.260005] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 500.268541] loop2: detected capacity change from 0 to 40 [ 500.290246] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 500.305064] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:45:56 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:45:56 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 500.359079] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 500.621745] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.071607] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 22:46:10 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:10 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 513.933308] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 513.933970] Bluetooth: hci5: Ignoring connect complete event for invalid link type 22:46:10 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:46:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:46:10 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 513.961526] loop2: detected capacity change from 0 to 40 [ 513.971387] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.989702] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 514.017249] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 22:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:46:10 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) 22:46:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) [ 514.056543] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 514.059016] audit: type=1326 audit(1690238770.450:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5129 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 514.060230] loop3: detected capacity change from 0 to 40 22:46:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 514.091565] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.115842] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 514.121118] loop2: detected capacity change from 0 to 40 22:46:10 executing program 3: socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 514.192806] loop3: detected capacity change from 0 to 40 22:46:22 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:46:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:46:22 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:22 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:22 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 526.186731] audit: type=1326 audit(1690238782.600:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5158 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602eb2fb19 code=0x0 [ 526.214525] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 526.220840] loop2: detected capacity change from 0 to 40 22:46:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) 22:46:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:22 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 526.490914] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. 22:46:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 526.611449] loop3: detected capacity change from 0 to 40 22:46:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 526.717762] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:46:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) 22:46:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 526.803001] loop3: detected capacity change from 0 to 40 22:46:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:46:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:34 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:34 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xc0, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0', @generic="c81293bf162f100d477509950cafc5cd339b1eadc3e65bbc9eeb5169f63f10ee1e7bd31ef441b90185b3c5a115e2d39320aa5a425b47a8b5cff9b5d76264c2b1334c53bd75cc020708b9e79c8400e011a95c31dc012163319edd222e49cbd8ac2da575402c890ea9dfc850d03c5ebe979a3f5f5a29ccae0b6482eb6f5d66aafa880ad7eaa9b140c23a083cb94e1eaa9b4e572c138d06145a04af14cc2ca41e5f4eb88d220b5187a911e800013a7ef6"]}, 0xc0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0xa, 0x78, 0x100000, {r3}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) 22:46:34 executing program 4: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) 22:46:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:34 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 537.676817] loop3: detected capacity change from 0 to 40 [ 537.689020] syz-executor.2: attempt to access beyond end of device [ 537.689020] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 537.691763] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.693479] FAT-fs (loop2): unable to read boot sector [ 537.720289] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.6'. [ 537.735858] loop6: detected capacity change from 0 to 40 22:46:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 537.772110] loop3: detected capacity change from 0 to 40 [ 537.784650] syz-executor.2: attempt to access beyond end of device [ 537.784650] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 22:46:34 executing program 1: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 537.800247] FAT-fs (loop2): unable to read boot sector 22:46:34 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) 22:46:34 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x6, 0xbc, 0x1f, 0x0, 0x8001, 0x200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x8, 0xfffffffd, 0x7, 0x800000000000, 0xd6, 0x3, 0x0, 0x400, 0x0, 0x8001}, r0, 0x8, 0xffffffffffffffff, 0x0) 22:46:34 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:34 executing program 1: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 538.220085] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 538.239775] syz-executor.2: attempt to access beyond end of device [ 538.239775] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 538.240850] FAT-fs (loop2): unable to read boot sector [ 538.283029] kworker/u4:2: attempt to access beyond end of device [ 538.283029] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 538.284102] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 538.312861] loop3: detected capacity change from 0 to 40 22:46:46 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:46 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:46:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:46 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:46 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:46 executing program 6: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 549.948985] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 549.953317] syz-executor.2: attempt to access beyond end of device [ 549.953317] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 549.956968] FAT-fs (loop2): unable to read boot sector [ 549.971178] loop3: detected capacity change from 0 to 40 22:46:46 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 550.038483] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:46:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 1) 22:46:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:46 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 550.108857] FAULT_INJECTION: forcing a failure. [ 550.108857] name failslab, interval 1, probability 0, space 0, times 1 [ 550.109646] CPU: 0 PID: 5279 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 550.110188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 550.110727] Call Trace: [ 550.110907] [ 550.111066] dump_stack_lvl+0xc1/0xf0 [ 550.111352] should_fail_ex+0x4b4/0x5b0 [ 550.111632] ? create_new_namespaces+0x30/0xb30 [ 550.111969] should_failslab+0x9/0x20 [ 550.112233] kmem_cache_alloc+0x61/0x390 [ 550.112515] ? vfs_write+0x155/0xda0 [ 550.112778] ? cap_capable+0x1be/0x220 [ 550.113064] create_new_namespaces+0x30/0xb30 [ 550.113376] ? security_capable+0x99/0xc0 [ 550.113676] unshare_nsproxy_namespaces+0xc1/0x200 [ 550.114033] ksys_unshare+0x44d/0x8e0 [ 550.114295] ? __pfx_ksys_unshare+0x10/0x10 [ 550.114587] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 550.115002] ? fput+0x2f/0x1a0 [ 550.115241] __x64_sys_unshare+0x31/0x40 [ 550.115528] do_syscall_64+0x3f/0x90 [ 550.115804] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 550.116180] RIP: 0033:0x7f18092c3b19 [ 550.116441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.117622] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.118179] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 550.118701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 550.119223] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 550.119738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.120239] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 550.120740] [ 550.138571] loop3: detected capacity change from 0 to 40 [ 550.172683] syz-executor.2: attempt to access beyond end of device [ 550.172683] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 22:46:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x16}, {0xe2ec, 0x0, 0x8, 0xdff, [0x3, 0x0, 0x400, 0x7f, 0x7ff, 0x8001, 0xd1]}}}}, 0x23) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 550.188654] FAT-fs (loop2): unable to read boot sector 22:46:46 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) [ 550.245841] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 550.246384] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 550.247616] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 550.259027] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:46:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (fail_nth: 1) 22:46:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 2) 22:46:58 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0405110000c01700000000000081ce000040000000000000"], 0x14) 22:46:58 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x2, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:58 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 562.194146] loop3: detected capacity change from 0 to 40 [ 562.228830] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 562.229377] Bluetooth: hci6: unexpected event 0x05 length: 17 > 4 [ 562.232768] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 562.233801] Bluetooth: hci6: unexpected event 0x05 length: 17 > 4 [ 562.237718] syz-executor.2: attempt to access beyond end of device [ 562.237718] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 562.240177] FAT-fs (loop2): unable to read boot sector 22:46:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:58 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x4, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 22:46:58 executing program 6: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x7f, 0xc9, 0x8a, 0x568a}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x2c99885661421715, 0x1, 0x1, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x1, 0x1f}}, @l2cap_conf_rsp={{0x5, 0x9, 0x2a}, {0x8, 0x400, 0xf41, [@l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8080}, @l2cap_conf_efs={0x6, 0x10, {0x7f, 0x1, 0x2, 0x838, 0x675, 0x70e}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}]}}, @l2cap_conn_rsp={{0x3, 0xfe, 0x8}, {0x2dbf, 0xfff, 0x1, 0x8}}]}}, 0x4b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c1100000000f0e63095000100000000000002"], 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7b}, "2cf552993fce5b7b7c8a1fa08f00a617d708e1dfc4269ffe13c07de0f522a4571a358b96ecaa133b7e95ca5259547c346f32b5646d79f226bba6abc00718ca31546c57dadc920f75f8a4b4562339bd91d8208165c5648f0c168385a396007af5ce6f1ff1bdc5b9a3651ebf165742d70bd7e57a06362916ca13edd8"}, 0x7f) 22:46:58 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:46:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:46:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 562.364892] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 562.372615] Bluetooth: hci6: ACL packet for unknown connection handle 1813 [ 562.373814] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 562.377152] Bluetooth: hci6: ACL packet for unknown connection handle 1813 [ 562.378258] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 562.388869] loop2: detected capacity change from 0 to 40 [ 562.403773] FAT-fs (loop2): bogus number of reserved sectors [ 562.404190] FAT-fs (loop2): Can't find a valid FAT filesystem 22:46:58 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x9, 0x2, 0x7f}}}, 0x14) 22:46:58 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03000000039aca2df8df55cc5b46774954c49ebebe8fd2d2ff2972ff31d425a4289c336173608ae498aac06b11845e2e2d1dbd627b60d5db7c3e4ad7bcb63c1aa1e8bcc75f6afaf37f432b47d5ec459fecfcfce400080000feabed68871d0e6ffec2183290a4882aa0ea9bd6047260b9664610f6cb92d0d8023b7836f472bec374d4ac88dda11f7ff02e08cab3bf9cb1aedf2d5c7848da58de4a0adc"], 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x2, 0xfff9}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) [ 562.462594] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 562.506931] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 562.542156] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 562.544450] Bluetooth: Unexpected continuation frame (len 12) [ 562.545336] Bluetooth: Unexpected continuation frame (len 4) [ 562.546526] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 562.546738] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 562.548588] Bluetooth: Unexpected continuation frame (len 12) [ 562.549395] Bluetooth: Unexpected continuation frame (len 4) 22:47:12 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:12 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x2}, 0x1f}}}, 0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1}, 'V'}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xff14, 0x9, 0x7, 0x37}}, @l2cap_disconn_rsp={{0x7, 0x42, 0x4}, {0xffff, 0xe2b}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c9001be805afdda7562774bc12a65239315bbb31e962df370600000069ca2918697fb4dfb868f664407c51813466b79838053d4834875cc2663f680592c3e35339b59c574a78369d4acd372d569ef08925295b4bbb9a9f2dc096ccfa455dac87494510a35e5b17f946044bf125405ca323"], 0x1f) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x1002}, {0x3, "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"}}}, 0x1005) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:47:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 3) 22:47:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 22:47:12 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7f}}}, 0x14) 22:47:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 575.705544] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 575.710563] loop2: detected capacity change from 0 to 40 [ 575.711227] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 575.716131] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 575.718878] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 575.723115] FAT-fs (loop2): bogus number of reserved sectors [ 575.723919] FAT-fs (loop2): Can't find a valid FAT filesystem [ 575.726922] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 575.733480] FAULT_INJECTION: forcing a failure. [ 575.733480] name failslab, interval 1, probability 0, space 0, times 0 [ 575.735042] CPU: 0 PID: 5356 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 575.736046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.737028] Call Trace: [ 575.737350] [ 575.737639] dump_stack_lvl+0xc1/0xf0 [ 575.738128] should_fail_ex+0x4b4/0x5b0 [ 575.738654] should_failslab+0x9/0x20 [ 575.739161] __kmem_cache_alloc_node+0x66/0x310 [ 575.739766] ? copy_ipcs+0x1aa/0x640 [ 575.740251] kmalloc_trace+0x26/0xc0 [ 575.740728] copy_ipcs+0x1aa/0x640 [ 575.741177] ? copy_utsname+0xad/0x4a0 [ 575.741673] create_new_namespaces+0x210/0xb30 [ 575.742262] unshare_nsproxy_namespaces+0xc1/0x200 [ 575.742913] ksys_unshare+0x44d/0x8e0 [ 575.743410] ? __pfx_ksys_unshare+0x10/0x10 [ 575.743959] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 575.744684] ? fput+0x2f/0x1a0 [ 575.745125] __x64_sys_unshare+0x31/0x40 [ 575.745622] do_syscall_64+0x3f/0x90 [ 575.746097] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 575.746776] RIP: 0033:0x7f18092c3b19 [ 575.747255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.749414] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 575.750357] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 575.751238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 575.752074] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.752915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.753814] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 575.754766] 22:47:12 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @any, 0x3, 0x0, 0x9}}}, 0x14) 22:47:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x3) 22:47:12 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f}}}, 0x14) [ 575.883749] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:47:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 4) 22:47:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 575.915260] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 575.930001] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 575.931984] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 575.941914] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 575.954101] loop2: detected capacity change from 0 to 40 [ 575.958606] FAT-fs (loop2): bogus number of reserved sectors [ 575.959009] FAT-fs (loop2): Can't find a valid FAT filesystem [ 576.024196] syz-executor.3: attempt to access beyond end of device [ 576.024196] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 576.028895] FAT-fs (loop3): unable to read boot sector 22:47:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040bffffffff"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:47:23 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, 0xffffffffffffffff, 0x29287000) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4) 22:47:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 5) 22:47:23 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 587.026252] syz-executor.3: attempt to access beyond end of device [ 587.026252] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 587.032728] FAT-fs (loop3): unable to read boot sector [ 587.041610] loop2: detected capacity change from 0 to 40 [ 587.053761] FAT-fs (loop2): bogus number of reserved sectors [ 587.054186] FAT-fs (loop2): Can't find a valid FAT filesystem [ 587.057571] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 587.064535] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 587.068529] FAULT_INJECTION: forcing a failure. [ 587.068529] name failslab, interval 1, probability 0, space 0, times 0 [ 587.069933] CPU: 1 PID: 5397 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 587.070496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 587.071066] Call Trace: [ 587.071247] [ 587.071411] dump_stack_lvl+0xc1/0xf0 [ 587.071693] should_fail_ex+0x4b4/0x5b0 [ 587.071982] should_failslab+0x9/0x20 [ 587.072257] __kmem_cache_alloc_node+0x66/0x310 [ 587.072595] ? alloc_fs_context+0x58/0x9e0 [ 587.072904] kmalloc_trace+0x26/0xc0 [ 587.073171] alloc_fs_context+0x58/0x9e0 [ 587.073459] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 587.073812] ? copy_ipcs+0x1aa/0x640 [ 587.074091] mq_init_ns+0x172/0x640 [ 587.074352] copy_ipcs+0x3a4/0x640 [ 587.074604] ? copy_utsname+0xad/0x4a0 [ 587.074893] create_new_namespaces+0x210/0xb30 [ 587.075225] unshare_nsproxy_namespaces+0xc1/0x200 [ 587.075579] ksys_unshare+0x44d/0x8e0 [ 587.075841] ? __pfx_ksys_unshare+0x10/0x10 [ 587.076141] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 587.076536] ? fput+0x2f/0x1a0 [ 587.076780] ? ksys_write+0x19e/0x250 [ 587.077048] __x64_sys_unshare+0x31/0x40 [ 587.077338] do_syscall_64+0x3f/0x90 [ 587.077593] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 587.077982] RIP: 0033:0x7f18092c3b19 [ 587.078229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 587.079463] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.079957] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 587.080451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 587.080932] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.081409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.081894] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 587.082385] 22:47:23 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 587.108980] Bluetooth: hci6: unexpected event 0x0b length: 6 < 11 [ 587.110185] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:47:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8) [ 587.113571] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 587.115047] Bluetooth: hci6: unexpected event 0x0b length: 6 < 11 [ 587.117083] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:47:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 587.205826] syz-executor.3: attempt to access beyond end of device [ 587.205826] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 587.212252] FAT-fs (loop3): unable to read boot sector 22:47:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 6) 22:47:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x18) 22:47:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0xbe}, {0x3f, "09b14f4f520d318ae09764a62f1f5d84fcd5b9d7d920a139f16f0caaf844d9c773e4a8668004e1ca5fc8aedaef01eeaae77dea4af46408cdbc6f2207550885cc5af7468eb69f035ff791d60925d6dfbd21a577c6c26e9fad1e228c8b0c27f2ea55083803a01cdc54a6e330e1494df57cd9e979ffa978d74d7f8bceb437cb17f2063c9b101ec04d40a1726ea039a0792ffbc12d1bba6ca2bf65a049132a9ce1227b64c2391c709c5ca5fc973f41ef1f0f924e7a13a4f4945257ae3522"}}}, 0xc1) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 587.241542] loop2: detected capacity change from 0 to 40 [ 587.248174] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 587.252195] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 587.255465] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 587.255587] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 587.262139] FAT-fs (loop2): bogus number of reserved sectors [ 587.262783] FAT-fs (loop2): Can't find a valid FAT filesystem 22:47:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xb6) 22:47:23 executing program 5: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041c0501c800000065e1dc1c8578a08319ac739652bf594a946c51d08444ac8a41fef8b0fb2948e7dee34c5ad62b3136d2bc096981cc5f90187d8c109f111177fce4f90ee3c24f319edc362aa172c9ab86027c9762e94dabfab01d4e7b9ef5ddf243df70100d65bfe7e6ebd0edd1a53d04db4b873a007b7f9e"], 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:47:35 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:35 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, 0xffffffffffffffff, 0x29287000) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x2}, 0x1f}}}, 0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1}, 'V'}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xff14, 0x9, 0x7, 0x37}}, @l2cap_disconn_rsp={{0x7, 0x42, 0x4}, {0xffff, 0xe2b}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c9001be805afdda7562774bc12a65239315bbb31e962df370600000069ca2918697fb4dfb868f664407c51813466b79838053d4834875cc2663f680592c3e35339b59c574a78369d4acd372d569ef08925295b4bbb9a9f2dc096ccfa455dac87494510a35e5b17f946044bf125405ca323"], 0x1f) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x1002}, {0x3, "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"}}}, 0x1005) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:47:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 7) 22:47:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xf0) [ 599.215487] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 599.219827] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 599.225788] loop2: detected capacity change from 0 to 40 [ 599.229904] FAT-fs (loop2): bogus number of reserved sectors [ 599.230150] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 599.230288] FAT-fs (loop2): Can't find a valid FAT filesystem [ 599.231423] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 599.237155] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 599.240795] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 599.248076] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 599.253791] syz-executor.3: attempt to access beyond end of device [ 599.253791] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 599.261821] FAULT_INJECTION: forcing a failure. [ 599.261821] name failslab, interval 1, probability 0, space 0, times 0 [ 599.262599] CPU: 0 PID: 5454 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 599.263131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.263667] Call Trace: [ 599.263845] [ 599.264003] dump_stack_lvl+0xc1/0xf0 [ 599.264269] should_fail_ex+0x4b4/0x5b0 [ 599.264548] should_failslab+0x9/0x20 [ 599.264810] __kmem_cache_alloc_node+0x66/0x310 [ 599.265146] ? mqueue_init_fs_context+0x4b/0x4a0 [ 599.265466] ? lockdep_init_map_type+0x21e/0x7e0 [ 599.265798] kmalloc_trace+0x26/0xc0 [ 599.266054] mqueue_init_fs_context+0x4b/0x4a0 [ 599.266361] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 599.266726] alloc_fs_context+0x571/0x9e0 [ 599.267016] mq_init_ns+0x172/0x640 [ 599.267270] copy_ipcs+0x3a4/0x640 [ 599.267515] ? copy_utsname+0xad/0x4a0 [ 599.267792] create_new_namespaces+0x210/0xb30 [ 599.268118] unshare_nsproxy_namespaces+0xc1/0x200 [ 599.268457] ksys_unshare+0x44d/0x8e0 [ 599.268717] ? __pfx_ksys_unshare+0x10/0x10 [ 599.268999] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 599.269399] ? fput+0x2f/0x1a0 [ 599.269645] __x64_sys_unshare+0x31/0x40 [ 599.269921] do_syscall_64+0x3f/0x90 [ 599.270180] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 599.270535] RIP: 0033:0x7f18092c3b19 [ 599.270812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.272068] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 599.272604] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 599.273104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 599.273600] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 599.274100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.274605] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 599.275114] 22:47:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x2}, 0x1f}}}, 0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1}, 'V'}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xff14, 0x9, 0x7, 0x37}}, @l2cap_disconn_rsp={{0x7, 0x42, 0x4}, {0xffff, 0xe2b}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c9001be805afdda7562774bc12a65239315bbb31e962df370600000069ca2918697fb4dfb868f664407c51813466b79838053d4834875cc2663f680592c3e35339b59c574a78369d4acd372d569ef08925295b4bbb9a9f2dc096ccfa455dac87494510a35e5b17f946044bf125405ca323"], 0x1f) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x1002}, {0x3, "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"}}}, 0x1005) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 599.285586] FAT-fs (loop3): unable to read boot sector 22:47:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x12e) 22:47:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c110000000000000000000300000000000000"], 0x14) [ 599.342722] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 599.343007] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 599.346064] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:47:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:35 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 599.359833] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 599.381302] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 599.383593] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 599.384173] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 599.411981] loop2: detected capacity change from 0 to 40 22:47:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x300) 22:47:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 599.431257] FAT-fs (loop2): bogus number of reserved sectors [ 599.431641] FAT-fs (loop2): Can't find a valid FAT filesystem 22:47:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 8) [ 599.465971] syz-executor.3: attempt to access beyond end of device [ 599.465971] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 599.485311] FAT-fs (loop3): unable to read boot sector 22:47:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="b900d9e9"], 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 599.580002] syz-executor.5: attempt to access beyond end of device [ 599.580002] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 599.593129] FAT-fs (loop5): unable to read boot sector 22:47:36 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x1800) [ 599.714515] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 599.718882] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:47:53 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, 0xffffffffffffffff, 0x29287000) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:53 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:47:53 executing program 5: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x7f, 0xc9, 0x8a, 0x568a}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x2c99885661421715, 0x1, 0x1, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x1, 0x1f}}, @l2cap_conf_rsp={{0x5, 0x9, 0x2a}, {0x8, 0x400, 0xf41, [@l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8080}, @l2cap_conf_efs={0x6, 0x10, {0x7f, 0x1, 0x2, 0x838, 0x675, 0x70e}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}]}}, @l2cap_conn_rsp={{0x3, 0xfe, 0x8}, {0x2dbf, 0xfff, 0x1, 0x8}}]}}, 0x4b) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c1100000000f0e63095000100000000000002"], 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7b}, "2cf552993fce5b7b7c8a1fa08f00a617d708e1dfc4269ffe13c07de0f522a4571a358b96ecaa133b7e95ca5259547c346f32b5646d79f226bba6abc00718ca31546c57dadc920f75f8a4b4562339bd91d8208165c5648f0c168385a396007af5ce6f1ff1bdc5b9a3651ebf165742d70bd7e57a06362916ca13edd8"}, 0x7f) 22:47:53 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x99}, @l2cap_cid_signaling={{0x95}, [@l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x4}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x7, 0x800, 0x7}}, @l2cap_info_req={{0xa, 0x7c, 0x2}, {0x9}}, @l2cap_info_rsp={{0xb, 0x2, 0x77}, {0x5, 0x40, "06aaab9f0902cd1ab9ed0296a3dad5415926100d5e90a1db61ea5d34fd199f5e76f1421ca6f5e387b2ad89f5dec1d9d8fb238dc16e8ce576a3cceae2c92b616f1567b962adf2f95f1e410a30a698ea18583526fcdaae31df002076e9ede1bcccdae7242a5ee669783e09f76054a85fe911dcc2"}}]}}, 0x9e) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:47:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 9) 22:47:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:47:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2e01) [ 617.533187] loop2: detected capacity change from 0 to 40 [ 617.544086] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 617.547196] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 617.549143] FAT-fs (loop2): bogus number of reserved sectors [ 617.549376] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 617.550067] FAT-fs (loop2): Can't find a valid FAT filesystem [ 617.551886] Bluetooth: hci2: ACL packet for unknown connection handle 1813 [ 617.552918] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 617.555149] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 617.582246] FAULT_INJECTION: forcing a failure. [ 617.582246] name failslab, interval 1, probability 0, space 0, times 0 [ 617.583872] CPU: 1 PID: 5510 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 617.584895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 617.585933] Call Trace: 22:47:54 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xb600) [ 617.586276] [ 617.586735] dump_stack_lvl+0xc1/0xf0 [ 617.587267] should_fail_ex+0x4b4/0x5b0 [ 617.587813] should_failslab+0x9/0x20 [ 617.588325] __kmem_cache_alloc_node+0x66/0x310 [ 617.588946] ? alloc_super+0x52/0xae0 [ 617.589471] ? __pfx_lock_release+0x10/0x10 [ 617.590052] kmalloc_trace+0x26/0xc0 [ 617.590550] alloc_super+0x52/0xae0 [ 617.591070] sget_fc+0x142/0x7e0 [ 617.591524] ? __pfx_set_anon_super_fc+0x10/0x10 [ 617.592162] ? __pfx_mqueue_fill_super+0x10/0x10 [ 617.592784] vfs_get_super+0x2d/0x280 [ 617.593293] mqueue_get_tree+0xf6/0x140 [ 617.593823] vfs_get_tree+0x92/0x360 [ 617.594333] fc_mount+0x17/0xd0 [ 617.594813] mq_init_ns+0x442/0x640 [ 617.595325] copy_ipcs+0x3a4/0x640 [ 617.595804] ? copy_utsname+0xad/0x4a0 [ 617.596329] create_new_namespaces+0x210/0xb30 [ 617.596957] unshare_nsproxy_namespaces+0xc1/0x200 [ 617.597617] ksys_unshare+0x44d/0x8e0 [ 617.598122] ? __pfx_ksys_unshare+0x10/0x10 [ 617.598691] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 617.599479] ? fput+0x2f/0x1a0 [ 617.599929] ? ksys_write+0x19e/0x250 [ 617.600454] __x64_sys_unshare+0x31/0x40 [ 617.600986] do_syscall_64+0x3f/0x90 [ 617.601486] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 617.602175] RIP: 0033:0x7f18092c3b19 [ 617.602669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 617.604931] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 617.605896] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 617.606817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 617.607720] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 617.608647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.609579] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 617.610542] [ 617.616902] syz-executor.3: attempt to access beyond end of device [ 617.616902] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 617.640669] FAT-fs (loop3): unable to read boot sector 22:48:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 10) 22:48:07 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:07 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:48:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xf000) 22:48:07 executing program 5: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:07 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000080)=[@acquire_done, @exit_looper, @enter_looper, @acquire_done={0x40106309, 0x1}], 0x24, 0x0, &(0x7f00000000c0)="2fe15c7fa95518e04f4ca687a13a61bacddb7ef5372eceacd0434ecf8b96d477499b20a4"}) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_info_req={{0xa, 0xa4, 0x2}, {0xad}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x9, 0xfffd}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0xc9, 0x5}}, @l2cap_conf_req={{0x4, 0x20, 0x8}, {0x23, 0x1ff, [@l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x9, 0x6}}]}}, 0x34) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04e93af4bd907a5d564145510e53171ec0e3553cbefffffffffeff"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 630.960979] loop3: detected capacity change from 0 to 40 [ 630.971435] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 630.971808] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 630.972329] FAT-fs (loop3): bogus number of reserved sectors [ 630.972712] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 630.973695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 630.987892] loop2: detected capacity change from 0 to 40 [ 631.012430] FAT-fs (loop2): bogus number of reserved sectors [ 631.013332] FAT-fs (loop2): Can't find a valid FAT filesystem [ 631.109770] loop3: detected capacity change from 0 to 40 [ 631.110693] FAULT_INJECTION: forcing a failure. [ 631.110693] name failslab, interval 1, probability 0, space 0, times 0 [ 631.112319] CPU: 1 PID: 5544 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 631.112888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 631.113488] Call Trace: [ 631.113684] [ 631.113855] dump_stack_lvl+0xc1/0xf0 [ 631.114157] should_fail_ex+0x4b4/0x5b0 [ 631.114467] ? security_sb_alloc+0x10f/0x250 [ 631.114806] should_failslab+0x9/0x20 [ 631.115122] __kmem_cache_alloc_node+0x66/0x310 [ 631.115482] ? security_sb_alloc+0x10f/0x250 [ 631.115830] ? security_sb_alloc+0x10f/0x250 [ 631.116165] __kmalloc+0x4d/0x160 [ 631.116428] security_sb_alloc+0x10f/0x250 [ 631.116755] alloc_super+0x236/0xae0 [ 631.117044] sget_fc+0x142/0x7e0 [ 631.117311] ? __pfx_set_anon_super_fc+0x10/0x10 [ 631.117678] ? __pfx_mqueue_fill_super+0x10/0x10 [ 631.118043] vfs_get_super+0x2d/0x280 [ 631.118339] mqueue_get_tree+0xf6/0x140 [ 631.118647] vfs_get_tree+0x92/0x360 [ 631.118945] fc_mount+0x17/0xd0 [ 631.119220] mq_init_ns+0x442/0x640 [ 631.119511] copy_ipcs+0x3a4/0x640 [ 631.119789] ? copy_utsname+0xad/0x4a0 [ 631.120087] create_new_namespaces+0x210/0xb30 [ 631.120457] unshare_nsproxy_namespaces+0xc1/0x200 [ 631.120836] ksys_unshare+0x44d/0x8e0 [ 631.121124] ? __pfx_ksys_unshare+0x10/0x10 [ 631.121442] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 631.121882] ? fput+0x2f/0x1a0 [ 631.122135] ? ksys_write+0x19e/0x250 [ 631.122436] __x64_sys_unshare+0x31/0x40 [ 631.122743] do_syscall_64+0x3f/0x90 [ 631.123040] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 631.123434] RIP: 0033:0x7f18092c3b19 [ 631.123712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 631.125017] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 631.125575] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 631.126100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 631.126624] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.127161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.127684] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 631.128213] [ 631.142812] FAT-fs (loop3): bogus number of reserved sectors [ 631.143315] FAT-fs (loop3): Can't find a valid FAT filesystem 22:48:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="22596644c8000000"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}}}, 0xa) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xcd}, "2dcdbba98be3d317a56773c0f3348ecf59cb290fa2dd31befcfd035144e2d6ca7b7fc7e9d1c5eb72305d4ef606885c9d10ca6d996f5eed9689dbb7152473bd8bee47a8e73a8124599e71657c193bae84270781b8574858bf83b4594b50dd87d980733f76ea7d4b4f464ab00d35415b5722248dc174aca565fff8bbb468e48f79542bc5e672de79445655075d40bf3993038e4cf0a5502b02a4bb93cb6874acd4be41ba626560616fc555a7eda4b3594188459b3f2aca1b845cbe2da6761389a2896bfc2d993b6075390846de50"}, 0xd1) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 11) 22:48:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 631.151262] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 631.151432] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 631.152551] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 631.152682] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x10040) 22:48:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041c05c8000000f5fd737816062c2b39a9ff9d"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x2, 0x10}, {0x200, 0x1000, 0x2, 0x0, [0x4, 0xa046, 0x6, 0x9]}}}}, 0x1d) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 631.221269] loop2: detected capacity change from 0 to 40 [ 631.223033] FAT-fs (loop2): bogus number of reserved sectors [ 631.223467] FAT-fs (loop2): Can't find a valid FAT filesystem 22:48:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) 22:48:07 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", &(0x7f0000000140)="97e2f1ac97e42482f8d2a9663d6fa524c1efe990ac66e24c172eb06ad5ef667aee65a21023b5ee4110de", 0x2a, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 631.325836] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 631.326298] Bluetooth: Unexpected continuation frame (len 10) [ 631.327347] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 631.327931] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 631.329738] Bluetooth: Unexpected continuation frame (len 10) [ 631.330771] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:07 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, 0x0) 22:48:23 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:23 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, 0x0) 22:48:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="041706ff01000000ff"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xf0ffff) 22:48:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 12) 22:48:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conn_rsp={{0x3, 0x6c, 0x8}, {0xdf, 0x2, 0x8, 0xca12}}, @l2cap_create_chan_rsp={{0xd, 0xe3, 0x8}, {0x8, 0x81, 0x5, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x200}}]}}, 0x27) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 647.035918] loop2: detected capacity change from 0 to 40 [ 647.043095] FAT-fs (loop2): bogus number of reserved sectors [ 647.043723] FAT-fs (loop2): Can't find a valid FAT filesystem [ 647.057745] loop3: detected capacity change from 0 to 40 [ 647.063806] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 647.069248] FAT-fs (loop3): bogus number of reserved sectors [ 647.070329] FAT-fs (loop3): Can't find a valid FAT filesystem [ 647.071992] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 647.080688] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 647.082681] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 647.083488] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 647.095177] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:23 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, 0x0) 22:48:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x1000000) 22:48:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0xfffffffc}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x25}, "e3581cc9f15401b5461655debee836103569e591e1b073b1760fae3eeee92b07bf822ef0e2"}, 0x29) 22:48:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 13) [ 647.172868] loop2: detected capacity change from 0 to 40 [ 647.206350] FAT-fs (loop2): bogus number of reserved sectors [ 647.206796] FAT-fs (loop2): Can't find a valid FAT filesystem 22:48:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2000000) 22:48:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xfffffffffffffca7}}, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041706d0ffffffffff86ef234f944c284c8934eef78c9a0264cb8b2d316929207d0081c13bfaeb6f98dbb6a55cbe9c2ed69e3b5fbc1357fe6607be07397617347880032d6b785a17df5dcc82c162ab820f0ae3c7ff54293e082f"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:23 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x90}, "b0151c25d5ab54b38481871c752d5d8809267bff2b7808d3374a007913bfe457ca2fdc2c7690bee5e91394968ab376adbe0cf83bb4611c793dc0775d1195468d29fea402dc75fae9993380126d5df5565e6850bf172928e334ca451555484570a86079bfa3846f11787138262cd162a7bb90ab5b5a6c6563049aabc0060add9be859f717e4bb67668fcd808b170bb424"}, 0x94) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @none, "d39fd40b3aac2f312ddf4551820065f64b7b79d984c64f3c163741d59d77e52ef6c2e15d2d321c6c139b56f546bd9e43a27116e4c407a774130253e5ebd85c0c7a667734965724ed4342f135d908cd7979cbf6ebad2c6637415db93c49bbc9502649f0f3b847f56bdf10901f8356808a5c6f53cabaa512ca2d8da0e2355a446ab9f1b28252c7da2f29376de8cfa35dcc7b8178a4aaf7b2c1dfc2fa2a4353dc34e9376a44da8b221b6bffef44a2419f9f6841a071ad6e35fcceef6022d0fd18a48f3597960e384a873b8a0bd6b78246dd5b46cbf09fed6b3f5886ad8dc69249b348141aca270f097e2a926d0128da7ebd6ac36f68e9e69ded"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x76}, "b9a8b7cde1abfbb8c5f0a6290af99d8a6ab7260f8716b6e0e1d63d1f8f099c7874c1da69c899e3a943ea2ba180568098de712ae54563e96c9bc1f394c50ac053367a9476cdd2268f46e32881fc1bf93027ff7448082b6b47a59124a1be382ad192fc6377437c5dee227cc06b6221f4e03b231f615333"}, 0x7a) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041706ffffffffffff541e66b1bd02b055c9e1679630c6988222878b73ec5d1fbf2b3e36fbdb9b83b65c769642e628d5511b50103cdc11b5a8109fcc65abbee5cbcee24b4714136572182e9c21e4d4c5a6868d4c9c4946e83918032629d7fab95a5f1fd978fb0046ce9e01dcfc71ff52b332680f316a4f7104001522d4383527f953d13fa6666be0c1b663e0ed09b7d4ea0401b3a5d3350b92d45a6e037fc8e8"], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x17}, {0x20, "72d5acd4eaf310a4dc5cbf6743a95a4131b3cb0930"}}}, 0x1a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "bcc12d3de66e198e66b000a63c42ab421b3b6e9896b3a6a529ac17588d28ec5d8f6b041d0fa5838e9f4c8814857e0f05cdfc5631345b109ff66baefccc5400d326a5d0df0a98ba9d6ee9dc889e9cc5de3478bd702c5b90597f72bde0e27fe6d78847f2034e3fa719ae708384c408fbec35b80f11f496346383a50867060602d7ef0c9534bb454cd1aeee4433400bdcd3c756dbc03e60e355919a640a2f5eeee9774595295c7a1603498d1565d1f9b2401fbce2f7cd241871"}, 0xbc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x50, 0x10}, {0x56, 0x7f, 0x1ff, 0x1000, [0x8, 0x4, 0x401, 0x0]}}}}, 0x1d) [ 647.299335] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 647.303125] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 647.305240] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 647.310245] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x3000000) 22:48:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9}, "202793da854107a6943f658b2807e3398375ec90049681e03311d531c6ead1949fbe2e65d9a2091bb09cb4b82a5ad337d206955ecf3635a8662e029acb1b008698736fce72"}, 0x7) 22:48:35 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:35 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0000000004"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 14) 22:48:35 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x1, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 658.908126] loop3: detected capacity change from 0 to 40 [ 658.910481] loop2: detected capacity change from 0 to 40 [ 658.919337] FAT-fs (loop3): bogus number of reserved sectors [ 658.919820] FAT-fs (loop3): Can't find a valid FAT filesystem [ 658.926698] FAT-fs (loop2): invalid media value (0x00) [ 658.927472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.933948] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 658.934894] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 658.938160] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 658.942983] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:48:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000) 22:48:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0xfffffffffffffc00, 0x6f4, 0x0, 0x1, 0x80000000, 0x0, 0x8, 0x0, 0x9, 0xfff, 0x1, 0x100000001, 0x7, 0xca}, 0x8, [0x0]}) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x6c2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 15) [ 659.021532] loop3: detected capacity change from 0 to 40 [ 659.037597] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 659.038786] FAT-fs (loop3): bogus number of reserved sectors [ 659.039219] FAT-fs (loop3): Can't find a valid FAT filesystem 22:48:35 executing program 6: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xca}, "554d5fd10ad1f02d7da2d42de89db8b9cce77d1e10c344f5e5ddbad870043d71fdf27ae6d443ea9e4db086cfda8e9d973b304562016d28ef230e64e073f67a277cc3383d86977451840a5780c1c841adc15e858d9ce8d8540a72e7c15b663677ef73405480ee247b0d97bf22c5552ed0f76b0eec1d4502045ee6bc66045113cd241dd7452105ae27101b4b603b7287c71656ccdf8cf2626b17d64218d383bbba33b03664f13d353fcf9fdac4314dc28ad4927d903e755b3e74b03e604a4af5f19efc3f4fe085e778554b"}, 0xce) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 659.088767] loop3: detected capacity change from 0 to 40 [ 659.093533] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:48:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x18000000) 22:48:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 659.152947] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 659.155024] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 659.156011] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 659.158717] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 659.212950] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 659.213730] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 659.248413] FAT-fs (loop3): bogus number of reserved sectors [ 659.249002] FAT-fs (loop3): Can't find a valid FAT filesystem [ 659.257193] loop2: detected capacity change from 0 to 40 [ 659.265167] FAT-fs (loop2): invalid media value (0x00) [ 659.265588] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.363789] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 659.366888] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 659.371188] loop3: detected capacity change from 0 to 40 [ 659.376528] FAT-fs (loop3): bogus number of reserved sectors [ 659.377039] FAT-fs (loop3): Can't find a valid FAT filesystem 22:48:35 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3, 0x0, 0x2}}}, 0x14) 22:48:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2e010000) 22:48:48 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:48:48 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 16) 22:48:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:48:48 executing program 5: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xcb}, "d462c839d7452a380e854fb3db7e6134711ca7e8c4b69ad544bd962f043bd45508841dba15a198b4525d309de43bf085dbe526a61220d4f327c2a54ea47b5b49f9236c8fb5ed4210ba0e1f6f97d2498d9f313c1b92bc13ffa4de3f0be92b2cc8d3f92a7969ee836ae64faaa116ef31cf9b923bb6137150b4cc400009fc9b51fc892a003d9c182383d4b03ee573c15f905854d1d226c288dabb4d345d225a2d637eab47e1f200857c62bbb0d7f6fe5c84c217323726b1ad81a9021f41ada17ab9ca9775450aabb44d4d73f8"}, 0xcf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x31}, "0e51de5beb26320628a315be0d590c41f877b493f4af51b2570294bc8689c6478f1e87ee221729196308bc07d0827135ac"}, 0x35) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 22:48:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "92fe387ff4f8dc1340b1232a592c316a", 0x7f}}}, 0x1a) [ 671.675898] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 671.676856] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.678122] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 671.679026] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.691508] loop2: detected capacity change from 0 to 40 22:48:48 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "26b3cd7c28f65a76"}}}, 0x11) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 671.698145] loop3: detected capacity change from 0 to 40 [ 671.701752] FAT-fs (loop3): bogus number of reserved sectors [ 671.702162] FAT-fs (loop3): Can't find a valid FAT filesystem [ 671.715314] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.716284] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:48:48 executing program 5: prctl$PR_GET_KEEPCAPS(0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c1100000000008a8178b940813546adb2bbad"], 0x14) [ 671.739032] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.740410] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.780317] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.782082] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:48:48 executing program 5: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c90042a29837f8a96780f95659ccfdf6262b247525cd971592517e4d88d266c167dcef32e9b31e647cef3ef5e18e7d48f7d3f072a018027b7b00be9507c5947dc195ba0edb70ad1d488792fac090"], 0x46) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:48:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 671.831365] loop3: detected capacity change from 0 to 40 [ 671.842008] FAT-fs (loop3): bogus number of reserved sectors [ 671.842423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 671.860688] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 671.910652] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 671.910772] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 671.911857] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 671.911951] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:48 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x81, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0x1f, 0x14}, {0xff, 0xfe01, 0xc8, 0xdf4e, [0xa86, 0x400, 0xa3, 0x0, 0x5, 0x401]}}}}, 0x21) 22:48:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40000100) [ 671.964474] FAT-fs (loop2): invalid media value (0x00) [ 671.964936] FAT-fs (loop2): Can't find a valid FAT filesystem [ 671.991487] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 671.992488] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 672.027125] Bluetooth: hci6: SCO packet for unknown connection handle 0 22:48:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1f, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x8a, 0x2}, {0x3}}]}}, 0xf) 22:48:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x5f652f2f15f00a37) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 672.028358] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 672.108086] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 672.110922] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:48:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04894000"], 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) [ 672.748363] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.749460] Buffer I/O error on dev loop3, logical block 1, async page read [ 672.762945] systemd-udevd: attempt to access beyond end of device [ 672.762945] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 672.764490] Buffer I/O error on dev loop3, logical block 2, async page read [ 672.767090] systemd-udevd: attempt to access beyond end of device [ 672.767090] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 672.768301] Buffer I/O error on dev loop3, logical block 3, async page read [ 672.772252] systemd-udevd: attempt to access beyond end of device [ 672.772252] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 672.773467] Buffer I/O error on dev loop3, logical block 4, async page read [ 672.776128] systemd-udevd: attempt to access beyond end of device [ 672.776128] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 672.777331] Buffer I/O error on dev loop3, logical block 5, async page read [ 672.782720] systemd-udevd: attempt to access beyond end of device [ 672.782720] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 672.784152] Buffer I/O error on dev loop3, logical block 6, async page read [ 672.899755] systemd-udevd: attempt to access beyond end of device [ 672.899755] loop3: rw=0, sector=7, nr_sectors = 1 limit=0 [ 672.901659] Buffer I/O error on dev loop3, logical block 7, async page read 22:49:02 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 22:49:02 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:49:02 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:02 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xb6000000) 22:49:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 17) 22:49:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 685.851244] loop3: detected capacity change from 0 to 40 [ 685.856881] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 685.858008] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 685.859264] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 685.860773] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 685.861977] FAT-fs (loop3): bogus number of reserved sectors [ 685.862366] FAT-fs (loop3): Can't find a valid FAT filesystem [ 685.867123] loop2: detected capacity change from 0 to 40 [ 685.892685] FAT-fs (loop2): invalid media value (0x00) [ 685.893480] FAT-fs (loop2): Can't find a valid FAT filesystem 22:49:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 685.915756] loop3: detected capacity change from 0 to 40 [ 685.919863] FAT-fs (loop3): bogus number of reserved sectors [ 685.920353] FAT-fs (loop3): Can't find a valid FAT filesystem 22:49:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdc}, "f0af511429ab6afb38f15c040c681451b88b191c0773fb838430bd8ba1e6c1763c688ff92bd4376962c8a007166535594dc7414d6b7c00d70f38e1f18dcd93c51f77cd6ea35fe7ee33d5007a904d2cecff44d4992bb7a6bdf1db5e3073966f3c6703ff8a98a30b0ccaad6c7fd219537dd7b62b813bce0f4fb6e2ab388bd98d600e83e9277828e7d8b03762bec5e611bbff131ba2e8bff8da38a94c5d6cfa7b68b9e38a798c61399bf1947411784f6e77216f89bcb0ae76c53839dc958a053734e87e21f313f700e21ca418dffcef786c4cebb8b21b9d86f791766377"}, 0xe0) syz_emit_vhci(&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x87}, "1005d7b77abb3e119e7228184040268837429f69b90663dca11efbdae21ee97ac6ad6421769c355f59cebf0b5ec624617a3d3d299cc4729ad74c6d28d14ae36eef70f52a3809309b2499c1f77e8937c9051ae81b4c3c45e7927e7cf3c2eebc6c8015294416700e75d45442f5fdae177369cb9def499999c3bf3f1ba359133510cccd87af7d45fa"}, 0x8b) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@none, 0x6, 0x8, "ae8ba0", 0x81, 0x7, "c468dbeaf680f86caa9b222a36f08771392e438f73332bbe4aeec4a8cfd137c9ae8e585bfd10729e088e10607e91bd4b50e5660dd0f50bae12b900be3e60a8639915e38c140c2d0dc637a4f0848e56488f7d9738b3a80a843b453dc163129ddd6a08771fbaea600018d37324b1c50e07f5dd5d4b9ca20e30d93e09a9feb3faae859db6f7914d04e622812f80eab2f18903ef62337720368b6f8b16797855082f04ebc81ef3e745f95b8dbef46f55122db6db901f246fe96c1bbaf81a223299a98d1a4ef1a8f8a9df8edbdee5a9a34eea9c93b02f614a0f58643c1f8112ced83a9dfab9567caf8412a9820b944d42ac37"}, {@any, 0x31, 0x20, "05de35", 0x80, 0xfe, "4cdf21b9029d46bfbcec2d6e11a802345d788f80680331804225c39326851a0e6d844127e2ad7e6365a2738f6b63c44f32aac03fa448d6783fdae2b9bb99aae1b114c48a7308f30f59fc7343f4c5a7d13d69e42042ac53329aa230e6bb1fee0fd84fcac5d7dff36554fd472c768c9b22255937bb5d3fdcaa1c0e1d6ac0675e2f2d7e5c9f30bd833618fcfa1e0058c449040912b58b5dca09293bffdb56f77966b297b1bbc3bdee0a1e081a94ced258bc8dd4c06d372798d87ce58d2f2af356610a92fa6638831943c1af3b3aed1de232987752d60dcf5c816e299fd856b002539073e04a8bdc98323f30d95b04b00e71"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x40, "f50100", 0x1, 0x1, "82ab307554e6a5e093bddf7a2983d526d17a83e90c3ec09cca19b9ea0e7926feee5c4d6a76a1723ef703bcb84037eb510f98a990190ac07e247594d8310d30340e2a1e454984e47c230837457095a36a3071fc016cd9f99449774a0ce9c168cd66f053e3e6ba937c5bf2a8f31b65e6ce173f9ae97cb78104d54beb4439ac6966676274bba75243ad7ef0fdfcad1397f0d09a8c6d3bd8dc455e6e98219cf8b1d4973112bbe3162189ac30a45830e2f047763041d72fdf3cb5c8a94ef35796e088b9b39a2d74a1c53edc8016a9b9adde4599e6d6fac432cfdc4179214777b8daa5199a8ca295430612df402e964f183385"}, {@any, 0xff, 0x9a, 'iL~', 0x6, 0x4, "1fa22c42442d2143db4c145c2aae967fa8dd0fd12bb875a71f345cbde8260a413453dadc7ee568954dfde2f24beb8989fe5034e9d1c48581b27cc174faea0fcd7acde60b73b7958d7f5765afd4f1fda69cb1b421c4ffff7eaf57e5ce4d10a4164cc955f5577526f641aa2452b45b0a2ea58f7e75cb36721aaeb7fd0008c41f715a77bb712fea4608554f2d67e1cd55434402352e9d2194fc346d47e8ec62d091c7fc850f030f8dae24cf56fe8feb403023204c50f49a9fa414f8d6cd4ff7c79e0cf0cc972892a11e02258420bc6e393c10a20f12f99f88c656a82cb9f8337b989423b894bc2a12d96b9bce0356bd505a"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x80, ' \x00', 0x2f, 0x5, "462edd873d743a7217db1c40aa87bc25b691148b8453002e82690e677a7d39dc5614c94eeaa9212e0da12b7244d37c9f6d7067a3f142ce9179aa433bf11998294a5fd28e33a917ce21209ac05f849bc9986842f348740e92739a34cc97cab31efafd63658a9fad19c64f20977f8bb5979043902e0d39f82d9c79bd05f5136769108d949efc843886b54003a10797b6dd747e7930a9552f36811ae06bca968ce8a0cdc3716375ba586fbe0ac907759e75efff3c1079b95d2e0180ac73e96b401f0e00223234545f09d79c0f4bebd6e4e635efcac9b1aa0713c9a6df9cabddb4be0a0ff3fee64704c68b5f43c71e20d219"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x88, 0x4}, {0x0, 0x9}}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x0, 0x1f, "a545c7", 0xe58}, {@none, 0x3, 0x8, 0x4, "7b106c", 0x6}, {@any, 0x4, 0x3, 0x0, "78bdd4", 0x5}, {@any, 0x4, 0x80, 0x9, "fd9049", 0xfff}, {@any, 0xd3, 0x5, 0x1f, '\t}u', 0x5}, {@none, 0x0, 0x6, 0x9, "6cc192", 0x400}, {@any, 0xfb, 0x0, 0x0, "92959c", 0x9}]}}}, 0x66) 22:49:02 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xf6ffffff) [ 685.954845] Bluetooth: hci6: SCO packet for unknown connection handle 0 22:49:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:02 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041706fffffffffffff7194ee5d5a7ac978bed981b82771772913b6f028b0961647f21aab0b97898368f42189436651f0d0fb554fdafa7de62cd33253d5c4740cbde31f29f6bebbf0d9ccd8d712a73bcee2407e30deba3d2f367a7565dfc77182557ff5b8340238d51aa6e47e7b77a74a6c77e1b5d876b0541001c7cf2dcc566a8325eee131b91f4c4d04eac46e3a8246c76353ef456fdbf1a0ee6dae9fb36297b7d29ee946bb71facda7a58613715b61c6507868f54bccfc5687fc975edaac47061263b6a7654ef5fb7e4a9b2591441ea2d99cf1cbed2584982d794"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x7, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x8, 0xc8, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="e028ac6828d268c8f60c251445323e31082db8a9"], 0x7) [ 685.966571] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 686.004549] loop3: detected capacity change from 0 to 40 [ 686.012562] FAT-fs (loop3): bogus number of reserved sectors [ 686.012983] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.020610] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 686.024783] Bluetooth: hci2: Ignoring connect complete event for invalid link type 22:49:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:21 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xfffffe4d) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:21 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:49:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xfeffffff) 22:49:21 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x2, 0xc8, 0x40, 0x1, 0x39, 0x5}}}, 0xc) 22:49:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 18) [ 704.741416] loop3: detected capacity change from 0 to 40 [ 704.749955] FAT-fs (loop3): invalid media value (0x00) [ 704.750321] FAT-fs (loop3): Can't find a valid FAT filesystem [ 704.767337] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 704.769715] loop2: detected capacity change from 0 to 40 [ 704.772918] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 704.773331] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 704.779023] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 704.784012] FAT-fs (loop2): invalid media value (0x00) [ 704.785755] FAT-fs (loop2): Can't find a valid FAT filesystem 22:49:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 704.844214] loop3: detected capacity change from 0 to 40 [ 704.850198] FAT-fs (loop3): invalid media value (0x00) [ 704.850583] FAT-fs (loop3): Can't find a valid FAT filesystem 22:49:21 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x55}, "f60600aa60c45a5161d26c0d63f4c44341767491735d346a615c5d6f0c8984d34be0856170af9e2a4d6f183027d25a5b42d52a53e6272fdca2c50a3c64b85bd3573cebb35108346d00a2cabc5ca21005cc036c6471"}, 0x59) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xfffff000) 22:49:21 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x4000010, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_DEBUG_MODE={{0x8}, 0x6}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) 22:49:21 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 19) 22:49:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 704.948786] loop2: detected capacity change from 0 to 40 [ 704.960155] FAT-fs (loop2): invalid media value (0x00) [ 704.960529] FAT-fs (loop2): Can't find a valid FAT filesystem [ 704.962126] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 704.964889] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 704.966683] loop3: detected capacity change from 0 to 40 [ 704.971729] FAT-fs (loop3): invalid media value (0x00) [ 704.972117] FAT-fs (loop3): Can't find a valid FAT filesystem 22:49:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 705.040831] FAULT_INJECTION: forcing a failure. [ 705.040831] name failslab, interval 1, probability 0, space 0, times 0 [ 705.042327] CPU: 0 PID: 5805 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 705.043312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 705.044323] Call Trace: [ 705.044667] [ 705.044961] dump_stack_lvl+0xc1/0xf0 [ 705.045451] should_fail_ex+0x4b4/0x5b0 [ 705.045985] ? __list_lru_init+0xcb/0x610 [ 705.046014] loop2: detected capacity change from 0 to 40 [ 705.046501] should_failslab+0x9/0x20 [ 705.047334] __kmem_cache_alloc_node+0x66/0x310 [ 705.047951] ? __list_lru_init+0xcb/0x610 [ 705.048484] ? __list_lru_init+0xcb/0x610 [ 705.049018] __kmalloc+0x4d/0x160 [ 705.049485] __list_lru_init+0xcb/0x610 [ 705.050028] alloc_super+0x8d9/0xae0 [ 705.050556] sget_fc+0x142/0x7e0 [ 705.051006] ? __pfx_set_anon_super_fc+0x10/0x10 [ 705.051648] ? __pfx_mqueue_fill_super+0x10/0x10 [ 705.052282] vfs_get_super+0x2d/0x280 [ 705.052779] mqueue_get_tree+0xf6/0x140 [ 705.053283] vfs_get_tree+0x92/0x360 [ 705.053779] fc_mount+0x17/0xd0 [ 705.054210] mq_init_ns+0x442/0x640 [ 705.054700] copy_ipcs+0x3a4/0x640 [ 705.055169] ? copy_utsname+0xad/0x4a0 [ 705.055724] create_new_namespaces+0x210/0xb30 [ 705.056350] unshare_nsproxy_namespaces+0xc1/0x200 [ 705.056998] ksys_unshare+0x44d/0x8e0 [ 705.057497] ? __pfx_ksys_unshare+0x10/0x10 [ 705.058056] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 705.058835] ? fput+0x2f/0x1a0 [ 705.059297] __x64_sys_unshare+0x31/0x40 [ 705.059815] do_syscall_64+0x3f/0x90 [ 705.060311] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 705.060995] RIP: 0033:0x7f18092c3b19 [ 705.061466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 705.063639] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 705.064599] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 705.065446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 705.066327] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 705.067199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.068077] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 705.068964] [ 705.088809] FAT-fs (loop2): bogus number of FAT sectors [ 705.089179] FAT-fs (loop2): Can't find a valid FAT filesystem [ 705.160382] loop3: detected capacity change from 0 to 40 [ 705.167678] FAT-fs (loop3): invalid media value (0x00) [ 705.168063] FAT-fs (loop3): Can't find a valid FAT filesystem 22:49:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xfffffff6) 22:49:21 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042c1100000000000000000003000000000000008abf59ecb7a6a78e400eb249a95301df57ae135c"], 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0x0, 0xfb3}}}}, 0x11) 22:49:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, '\f8\r', 0x2}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:21 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) [ 705.217421] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 705.220208] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 705.223700] loop2: detected capacity change from 0 to 40 [ 705.224854] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 705.225003] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 705.231202] FAT-fs (loop2): bogus number of FAT sectors [ 705.231583] FAT-fs (loop2): Can't find a valid FAT filesystem 22:49:21 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 705.264428] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 705.269862] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 707.263699] Bluetooth: hci6: command 0x0409 tx timeout [ 709.311766] Bluetooth: hci6: command 0x0409 tx timeout 22:49:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 20) 22:49:34 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:49:34 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:34 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="041706cb1e2bb20477b1fcaa2f54483a484dffffe6fffff7"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:49:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:34 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="450b1f4e3782"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "1bee3b"}}}, 0xd) 22:49:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xfffffffe) [ 717.978779] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 717.980155] loop3: detected capacity change from 0 to 40 [ 717.982472] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 717.989943] FAT-fs (loop3): invalid media value (0x00) [ 717.990321] FAT-fs (loop3): Can't find a valid FAT filesystem [ 717.994483] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 718.007310] loop2: detected capacity change from 0 to 40 [ 718.015426] FAT-fs (loop2): bogus number of FAT sectors [ 718.016205] FAT-fs (loop2): Can't find a valid FAT filesystem [ 718.022926] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 718.028666] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 718.032869] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 720.007033] Bluetooth: hci2: command 0x0409 tx timeout [ 722.048795] Bluetooth: hci2: command 0x0409 tx timeout 22:49:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x1000000000000) 22:49:48 executing program 5: syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00'], 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x8, 0x1fb, 0x0, 0x7}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x7a}, @l2cap_cid_signaling={{0x76}, [@l2cap_conf_rsp={{0x5, 0x35, 0x3a}, {0x0, 0x7c0, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x1, 0x5, 0x8, 0x81}}, @l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_flushto={0x2, 0x2, 0x3e}, @l2cap_conf_flushto={0x2, 0x2, 0x180}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x81, 0x5, 0x4, 0xffff, 0x3}}, @l2cap_conf_mtu={0x1, 0x2, 0xb0c6}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x2}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x8}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x8001}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0xdc05}}, @l2cap_info_req={{0xa, 0x3, 0x2}, {0x1}}, @l2cap_conf_rsp={{0x5, 0x1, 0x6}, {0xeed, 0x2, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0xe3d}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0xfff8, 0x3}}]}}, 0x7f) 22:49:48 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:49:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 21) 22:49:48 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="50578ad7ec0a0800000017774eafae3203000100"], 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x4, 0x2}, {0x9}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "21836a2b40b9e27f17428119ab108e9700ee00777387d265bfba5ce7f6a166f3161cd6065e01092aded6267cf0ee00d07e112501011ae007248bac0b560aee7ad13faf56eeed39a02b32818ed1ac1c6fe0196707b36f5ccc2658435de01ebdf2116dd9bf61db69187071ec0c46ef91c42ad1881c719e1f9a3d76b9850918d997fbc60d1249cf848db2453ecf0f32c895a7c17526359219bf290e2d3fb85867"}, 0xa3) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:48 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000000000000) [ 732.010532] loop2: detected capacity change from 0 to 40 [ 732.022738] FAULT_INJECTION: forcing a failure. [ 732.022738] name failslab, interval 1, probability 0, space 0, times 0 [ 732.023503] CPU: 1 PID: 5864 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 732.024057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 732.024608] Call Trace: [ 732.024789] [ 732.024949] dump_stack_lvl+0xc1/0xf0 [ 732.025228] should_fail_ex+0x4b4/0x5b0 [ 732.025511] ? __list_lru_init+0xcb/0x610 [ 732.025797] should_failslab+0x9/0x20 [ 732.026064] __kmem_cache_alloc_node+0x66/0x310 [ 732.026387] ? __list_lru_init+0xcb/0x610 [ 732.026680] ? __list_lru_init+0xcb/0x610 [ 732.026966] __kmalloc+0x4d/0x160 [ 732.027215] __list_lru_init+0xcb/0x610 [ 732.027500] alloc_super+0x903/0xae0 [ 732.027771] sget_fc+0x142/0x7e0 [ 732.028011] ? __pfx_set_anon_super_fc+0x10/0x10 [ 732.028357] ? __pfx_mqueue_fill_super+0x10/0x10 [ 732.028679] vfs_get_super+0x2d/0x280 [ 732.028958] mqueue_get_tree+0xf6/0x140 [ 732.029236] vfs_get_tree+0x92/0x360 [ 732.029501] fc_mount+0x17/0xd0 [ 732.029743] mq_init_ns+0x442/0x640 [ 732.030008] copy_ipcs+0x3a4/0x640 [ 732.030257] ? copy_utsname+0xad/0x4a0 [ 732.030531] create_new_namespaces+0x210/0xb30 [ 732.030859] unshare_nsproxy_namespaces+0xc1/0x200 [ 732.031204] ksys_unshare+0x44d/0x8e0 [ 732.031474] ? __pfx_ksys_unshare+0x10/0x10 [ 732.031767] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 732.032163] ? fput+0x2f/0x1a0 [ 732.032402] ? ksys_write+0x19e/0x250 [ 732.032676] __x64_sys_unshare+0x31/0x40 [ 732.032961] do_syscall_64+0x3f/0x90 [ 732.033232] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 732.033605] RIP: 0033:0x7f18092c3b19 [ 732.033868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 732.035060] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 732.035588] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 732.036079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 732.036624] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.037119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.037610] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 732.038135] [ 732.039763] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 732.042988] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 732.044371] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 732.046854] loop3: detected capacity change from 0 to 40 [ 732.057901] FAT-fs (loop3): invalid media value (0x00) [ 732.058283] FAT-fs (loop3): Can't find a valid FAT filesystem [ 732.072922] Bluetooth: hci6: Ignoring connect complete event for invalid link type 22:49:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xf0ffffffffffff) 22:49:48 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="ebfd0000"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "19428da91eee77341831d3085aa1a77947c9e5"}, 0x17) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:48 executing program 6: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="2000000000000000ff"], 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:49:48 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:49:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 22) 22:49:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:49:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 732.231394] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 732.236166] loop3: detected capacity change from 0 to 40 [ 732.237175] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 732.238178] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 732.240702] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 732.241441] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 732.245997] FAT-fs (loop3): bogus number of FAT sectors [ 732.246389] FAT-fs (loop3): Can't find a valid FAT filesystem 22:49:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100000000000000) [ 732.287152] loop2: detected capacity change from 0 to 40 22:49:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="368aca620110b3c3ff"], 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042c11000000710006000600000000000000329c8d75fdb1c7bc4dc877bbba46d38a9040aa5d08000000000400000000000000000041ada8253153d6fcd744831d33f092f526afc73e6df75a6be95dbaf063d3f1b82d6ac830b285a050c7f17e420ab878997fe7b2849e9c837baf4aad5762c4d374837dd48f468ec8acf28e53982e203f596c9b693e83937669ce2a67f21b96ad9c0a1670e98b011d4706a65bfc22deddd0d3b7766e7499fe4c26"], 0x14) [ 732.407292] Bluetooth: hci6: SCO packet for unknown connection handle 0 22:50:00 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7}, "ac135714ae9cd9"}, 0xb) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:50:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200000000000000) 22:50:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 23) 22:50:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x4d0a80, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) read(r0, &(0x7f0000007dc0)=""/48, 0x30) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0xbeb4, 0xf5dc}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x7f}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c1100c80b97fb000000000380000000000000"], 0x14) 22:50:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:50:00 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:50:00 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000010000000000000000000000000000004000000000000000000000004eb6c1a5000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc900000000000000800000000000000000000000000000000000000000000000000000000002e09fb000000ff07000001000000000000000000000000000000c6567865000000000700"/254]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r0, 0x29287000) r2 = dup(r0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:50:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 732.408444] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.442822] loop2: detected capacity change from 0 to 40 [ 744.481337] loop3: detected capacity change from 0 to 40 [ 744.482862] FAULT_INJECTION: forcing a failure. [ 744.482862] name failslab, interval 1, probability 0, space 0, times 0 [ 744.484323] CPU: 0 PID: 5917 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230724 #1 [ 744.485310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.486305] Call Trace: [ 744.486637] [ 744.486932] dump_stack_lvl+0xc1/0xf0 [ 744.487436] should_fail_ex+0x4b4/0x5b0 [ 744.487955] should_failslab+0x9/0x20 [ 744.488474] kmem_cache_alloc_lru+0x7a/0x680 [ 744.489052] ? __pfx_lock_release+0x10/0x10 [ 744.489608] ? mqueue_alloc_inode+0x27/0x50 [ 744.490174] ? mqueue_alloc_inode+0x27/0x50 [ 744.490720] mqueue_alloc_inode+0x27/0x50 [ 744.491265] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 744.491887] alloc_inode+0x63/0x240 [ 744.492372] new_inode+0x25/0x1f0 [ 744.492855] mqueue_get_inode+0x31/0xdf0 [ 744.493393] ? sget_fc+0x15a/0x7e0 [ 744.493857] ? __pfx_mqueue_fill_super+0x10/0x10 [ 744.494472] mqueue_fill_super+0x113/0x210 [ 744.495022] ? __pfx_mqueue_fill_super+0x10/0x10 [ 744.495654] vfs_get_super+0xf0/0x280 [ 744.496162] mqueue_get_tree+0xf6/0x140 [ 744.496694] vfs_get_tree+0x92/0x360 [ 744.497217] fc_mount+0x17/0xd0 [ 744.497670] mq_init_ns+0x442/0x640 [ 744.498164] copy_ipcs+0x3a4/0x640 [ 744.498643] ? copy_utsname+0xad/0x4a0 [ 744.499184] create_new_namespaces+0x210/0xb30 [ 744.499819] unshare_nsproxy_namespaces+0xc1/0x200 [ 744.500490] ksys_unshare+0x44d/0x8e0 [ 744.500989] ? __pfx_ksys_unshare+0x10/0x10 [ 744.501560] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 744.502331] ? fput+0x2f/0x1a0 [ 744.502802] __x64_sys_unshare+0x31/0x40 [ 744.503335] do_syscall_64+0x3f/0x90 [ 744.503836] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 744.504534] RIP: 0033:0x7f18092c3b19 [ 744.505024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.507290] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 744.508278] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 744.509182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 744.510087] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.510994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.511890] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 744.512850] [ 744.524284] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 744.525436] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.525610] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 744.527556] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.527692] Bluetooth: hci2: link tx timeout [ 744.529477] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 744.530531] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 744.531606] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 289, name: kworker/u5:5 [ 744.532658] preempt_count: 0, expected: 0 [ 744.533162] RCU nest depth: 1, expected: 0 [ 744.533707] 3 locks held by kworker/u5:5/289: [ 744.534260] #0: ffff88801a1a6938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770 [ 744.535525] #1: ffff888016b07d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770 [ 744.536936] #2: ffffffff8560c3e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480 [ 744.542086] CPU: 0 PID: 289 Comm: kworker/u5:5 Not tainted 6.5.0-rc3-next-20230724 #1 [ 744.542316] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 744.543047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.543084] Workqueue: hci2 hci_tx_work [ 744.545031] FAT-fs (loop3): bogus number of FAT sectors [ 744.545325] Call Trace: [ 744.545334] [ 744.545865] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.546153] dump_stack_lvl+0xc1/0xf0 [ 744.547584] __might_resched+0x2f9/0x510 [ 744.548123] __mutex_lock+0x9e/0x1a30 [ 744.548635] ? irq_work_queue+0x2d/0x80 [ 744.549151] ? vprintk_emit+0x107/0x580 [ 744.549681] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 744.550273] ? __pfx___mutex_lock+0x10/0x10 [ 744.550824] ? vprintk+0x82/0x90 [ 744.551312] ? _printk+0xbf/0x100 [ 744.551813] ? __pfx__printk+0x10/0x10 [ 744.552364] ? __pfx_abort_conn_sync+0x10/0x10 [ 744.552992] hci_cmd_sync_submit+0x3b/0x2d0 [ 744.553587] ? __pfx_abort_conn_sync+0x10/0x10 [ 744.554188] hci_cmd_sync_queue+0x7b/0xb0 [ 744.554750] hci_disconnect+0x1c2/0x450 [ 744.555284] ? __pfx_hci_disconnect+0x10/0x10 [ 744.555903] ? __pfx_lock_release+0x10/0x10 [ 744.556512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 744.557193] __check_timeout+0x2cc/0x480 22:50:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 744.557743] hci_tx_work+0x7cb/0x1a70 [ 744.558375] ? do_raw_spin_lock+0x125/0x270 [ 744.558940] ? __pfx_hci_tx_work+0x10/0x10 [ 744.559492] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.560114] process_one_work+0xabf/0x1770 [ 744.560699] ? __pfx_lock_acquire+0x10/0x10 [ 744.561259] ? __pfx_process_one_work+0x10/0x10 [ 744.561875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.562495] worker_thread+0x64f/0x12a0 [ 744.563061] ? __pfx_worker_thread+0x10/0x10 [ 744.563674] kthread+0x33f/0x440 [ 744.564142] ? __pfx_kthread+0x10/0x10 [ 744.564667] ret_from_fork+0x2f/0x70 [ 744.565152] ? __pfx_kthread+0x10/0x10 [ 744.565657] ret_from_fork_asm+0x1b/0x30 [ 744.566214] [ 744.566970] [ 744.567212] ============================= [ 744.567726] [ BUG: Invalid wait context ] [ 744.568240] 6.5.0-rc3-next-20230724 #1 Tainted: G W [ 744.569027] ----------------------------- [ 744.569531] kworker/u5:5/289 is trying to lock: [ 744.570107] ffff88801f3fc9b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2d0 [ 744.571281] other info that might help us debug this: [ 744.571913] context-{4:4} [ 744.572265] 3 locks held by kworker/u5:5/289: [ 744.572850] #0: ffff88801a1a6938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770 [ 744.574085] #1: ffff888016b07d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770 [ 744.575432] #2: ffffffff8560c3e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480 22:50:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x300000000000000) [ 744.576580] stack backtrace: [ 744.577057] CPU: 0 PID: 289 Comm: kworker/u5:5 Tainted: G W 6.5.0-rc3-next-20230724 #1 [ 744.578145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.579123] Workqueue: hci2 hci_tx_work [ 744.579625] Call Trace: [ 744.579945] [ 744.580226] dump_stack_lvl+0x91/0xf0 [ 744.580721] __lock_acquire+0x1605/0x6340 [ 744.581238] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 744.581874] ? __pfx___lock_acquire+0x10/0x10 [ 744.582429] ? finish_task_switch.isra.0+0x203/0x830 [ 744.583053] ? __switch_to+0x5c6/0xeb0 [ 744.583535] ? __schedule+0x9b1/0x2b00 [ 744.584036] lock_acquire+0x19a/0x4c0 [ 744.584519] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 744.585075] ? __pfx_lock_acquire+0x10/0x10 [ 744.585608] ? dump_stack_lvl+0xda/0xf0 [ 744.586094] ? dump_stack_lvl+0xdc/0xf0 [ 744.586586] __mutex_lock+0x12a/0x1a30 [ 744.587061] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 744.587603] ? irq_work_queue+0x2d/0x80 [ 744.588080] ? vprintk_emit+0x107/0x580 [ 744.588600] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 744.589174] ? __pfx___mutex_lock+0x10/0x10 [ 744.589722] ? vprintk+0x82/0x90 [ 744.590169] ? _printk+0xbf/0x100 [ 744.590615] ? __pfx__printk+0x10/0x10 [ 744.591098] ? __pfx_abort_conn_sync+0x10/0x10 [ 744.591673] hci_cmd_sync_submit+0x3b/0x2d0 [ 744.592199] ? __pfx_abort_conn_sync+0x10/0x10 [ 744.592788] hci_cmd_sync_queue+0x7b/0xb0 [ 744.593297] hci_disconnect+0x1c2/0x450 [ 744.593802] ? __pfx_hci_disconnect+0x10/0x10 [ 744.594367] ? __pfx_lock_release+0x10/0x10 [ 744.594895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 744.595528] __check_timeout+0x2cc/0x480 [ 744.596038] hci_tx_work+0x7cb/0x1a70 [ 744.596533] ? do_raw_spin_lock+0x125/0x270 [ 744.597070] ? __pfx_hci_tx_work+0x10/0x10 [ 744.597603] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.598183] process_one_work+0xabf/0x1770 [ 744.598711] ? __pfx_lock_acquire+0x10/0x10 [ 744.599236] ? __pfx_process_one_work+0x10/0x10 [ 744.599819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.600415] worker_thread+0x64f/0x12a0 [ 744.600922] ? __pfx_worker_thread+0x10/0x10 [ 744.601473] kthread+0x33f/0x440 [ 744.601900] ? __pfx_kthread+0x10/0x10 [ 744.602382] ret_from_fork+0x2f/0x70 [ 744.602870] ? __pfx_kthread+0x10/0x10 [ 744.602882] loop2: detected capacity change from 0 to 40 [ 744.603972] ret_from_fork_asm+0x1b/0x30 [ 744.604488] [ 744.610173] Bluetooth: hci2: link tx timeout [ 744.610499] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa 22:50:01 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"f22d09ad34fdf27c9d0fbb79", 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, "9fe650bf", 0x80, "539de40b", 0x4, 0x0, 0x80, "20a057", "e9c0a7db49e3d7767e50ee2841039048377dca280e5baa947b2e5e4af32f787426a2b9a72f557eb3855bd63e101f"}, 0x1, 0x5, 0x4, &(0x7f00000001c0)}) 22:50:01 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xb) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "9a3d4c9a14aa6652"}}}, 0x11) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x52}, @l2cap_cid_signaling={{0x4e}, [@l2cap_disconn_req={{0x6, 0x41, 0x4}, {0x3, 0x643}}, @l2cap_conn_req={{0x2, 0x8, 0x4}, {0x81, 0xefd}}, @l2cap_conf_req={{0x4, 0x8, 0x17}, {0x9, 0x7f48, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0xb53}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4, 0x6, 0x1, 0x8, 0x1}}]}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x6, 0x200}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x3}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x1, 0x5, 0x4, 0x14}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x5cc, 0xff, 0x40}}]}}, 0x57) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:50:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c0500c800c9c4"], 0xff52) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x7, 0x6}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0x1, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x8efd, 0x40}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x7b9, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x4}}]}}, 0x2f) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x42}, @l2cap_cid_signaling={{0x3e}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x0, 0xfff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xbb, 0x2}, {0x8}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x9, 0x2, 0xffc1, 0xae}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xed, 0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0xb0e}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x0, 0x5}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x9, 0x81}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x3, 0x9}}]}}, 0x47) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x3}}}, 0x14) 22:50:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x48040080) (fail_nth: 24) [ 744.695544] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 744.701905] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.702358] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 744.703392] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 744.703929] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.704025] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 744.705272] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 744.715374] FAULT_INJECTION: forcing a failure. [ 744.715374] name failslab, interval 1, probability 0, space 0, times 0 [ 744.716203] CPU: 1 PID: 5942 Comm: syz-executor.1 Tainted: G W 6.5.0-rc3-next-20230724 #1 [ 744.716846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.717375] Call Trace: [ 744.717552] [ 744.717713] dump_stack_lvl+0xc1/0xf0 [ 744.717981] should_fail_ex+0x4b4/0x5b0 [ 744.718255] ? memcg_list_lru_alloc+0x24b/0xb30 [ 744.718573] should_failslab+0x9/0x20 [ 744.718838] __kmem_cache_alloc_node+0x66/0x310 [ 744.719159] ? memcg_list_lru_alloc+0x24b/0xb30 [ 744.719476] ? memcg_list_lru_alloc+0x24b/0xb30 [ 744.719791] __kmalloc+0x4d/0x160 [ 744.720030] memcg_list_lru_alloc+0x24b/0xb30 [ 744.720337] ? lock_release+0x4d8/0x680 [ 744.720625] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 744.720961] ? __pfx_lock_release+0x10/0x10 [ 744.721260] kmem_cache_alloc_lru+0x14e/0x680 [ 744.721568] ? mqueue_alloc_inode+0x27/0x50 [ 744.721858] ? mqueue_alloc_inode+0x27/0x50 [ 744.722146] mqueue_alloc_inode+0x27/0x50 [ 744.722427] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 744.722756] alloc_inode+0x63/0x240 [ 744.723009] new_inode+0x25/0x1f0 [ 744.723248] mqueue_get_inode+0x31/0xdf0 [ 744.723531] ? sget_fc+0x15a/0x7e0 [ 744.723780] ? __pfx_mqueue_fill_super+0x10/0x10 [ 744.724094] mqueue_fill_super+0x113/0x210 [ 744.724374] ? __pfx_mqueue_fill_super+0x10/0x10 [ 744.724696] vfs_get_super+0xf0/0x280 [ 744.724958] mqueue_get_tree+0xf6/0x140 [ 744.725226] vfs_get_tree+0x92/0x360 [ 744.725489] fc_mount+0x17/0xd0 [ 744.725725] mq_init_ns+0x442/0x640 [ 744.725976] copy_ipcs+0x3a4/0x640 [ 744.726222] ? copy_utsname+0xad/0x4a0 [ 744.726495] create_new_namespaces+0x210/0xb30 [ 744.726822] unshare_nsproxy_namespaces+0xc1/0x200 [ 744.727157] ksys_unshare+0x44d/0x8e0 [ 744.727414] ? __pfx_ksys_unshare+0x10/0x10 [ 744.727702] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 744.728098] ? fput+0x2f/0x1a0 [ 744.728326] ? ksys_write+0x19e/0x250 [ 744.728597] __x64_sys_unshare+0x31/0x40 [ 744.728871] do_syscall_64+0x3f/0x90 [ 744.729127] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 744.729477] RIP: 0033:0x7f18092c3b19 [ 744.729729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.730880] RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 744.731373] RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19 [ 744.731833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080 [ 744.732296] RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.732765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.733224] R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000 [ 744.733696] [ 744.774660] loop3: detected capacity change from 0 to 40 [ 744.776939] FAT-fs (loop3): bogus number of FAT sectors [ 744.777351] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.796897] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.797365] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 744.798855] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 744.850513] Bluetooth: hci6: ACL packet for unknown connection handle 0 22:50:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000000000) 22:50:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:50:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 22:50:01 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x39}, "5d377d9c54a0036dcb44dc8a4e09877029b21d2e3aacf27673fcc236b814b6989e128b9f91681391ab942322ded06001404b8d1e61995fef97"}, 0x3d) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x40, @none, "59a9283b104f9c36ef942fd06cc71b915d645dffd223841b6a99b4c6a5af8dcadf36c7f7cf72b1526846eb748a8b908bfeacf8e50ea9d7648b80d2a83f7f08ef2dbe9bdd480f76e1d137c159bfa41e1845a549fa6a879937c48415590906b18cd2162c7abacd2ce7244fca1c49fe7a6438ed3dfc30f401a3a34d8ec0d046100dfb9dc3df22c4a9e525a87e650deeeaa68187d30ebc8ba96381effd44c0d60526c311a1d04590956a913f32c1d957881bbc988a13a36ed03feb334503c5ffb7ce3137988c2d44fa298ad2479835f0b8b4067241f25a91eabcd245fda2957516f814de927e8ef8a9c78691a09c312fc1f210afc2f2c89a5468"}}}, 0x102) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0xa}, {0x3, 0x3f, 0x3f9, 0x1, 0x3ff}}}}, 0x17) [ 746.191977] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 746.193680] Buffer I/O error on dev loop3, logical block 1, async page read [ 746.201881] systemd-udevd: attempt to access beyond end of device [ 746.201881] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 746.203909] Buffer I/O error on dev loop3, logical block 2, async page read [ 746.239456] systemd-udevd: attempt to access beyond end of device [ 746.239456] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 746.240830] Buffer I/O error on dev loop3, logical block 3, async page read [ 746.241748] systemd-udevd: attempt to access beyond end of device [ 746.241748] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 746.242908] Buffer I/O error on dev loop3, logical block 4, async page read [ 746.243517] systemd-udevd: attempt to access beyond end of device [ 746.243517] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 746.244501] Buffer I/O error on dev loop3, logical block 5, async page read [ 746.245131] systemd-udevd: attempt to access beyond end of device [ 746.245131] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 746.246160] Buffer I/O error on dev loop3, logical block 6, async page read [ 746.246830] systemd-udevd: attempt to access beyond end of device [ 746.246830] loop3: rw=0, sector=7, nr_sectors = 1 limit=0 [ 746.247877] Buffer I/O error on dev loop3, logical block 7, async page read [ 746.623677] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 22:50:01 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82555a25 RDI=ffffffff87fa5de0 RBP=ffffffff87fa5da0 RSP=ffff888016b07438 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff87fa5da0 R14=0000000000000010 R15=ffffffff82555a10 RIP=ffffffff82555a7d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4be1c14718 CR3=0000000016ce0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000002400d1 RBX=0000000000000001 RCX=ffffffff812d4b2f RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff845b1d83 RBP=ffff88800c780c00 RSP=ffff88800fa07cf0 R8 =0000000000000001 R9 =fffffbfff0efe568 R10=ffffffff877f2b47 R11=0000000000000001 R12=ffff88800fa07d90 R13=ffffe8ffffd00000 R14=ffff88806cf38d00 R15=ffff88800ffa4300 RIP=ffffffff845b1d8b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1a1116a830 CR3=00000000146d6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4be47a67c000007f4be47a67c8 XMM02=00007f4be47a67e000007f4be47a67c0 XMM03=00007f4be47a67c800007f4be47a67c0 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000