000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) 11:28:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 304.303873] loop7: detected capacity change from 0 to 1300 [ 304.366798] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (1025) 11:28:36 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0xff, 0x0, &(0x7f0000000540), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x290003, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 11:28:36 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000480)="7849d5ab28306f401bf3c683d17903a6ae331df9905d2010bd44d5d4e1196cafb6568638783d84cf302413255adc48ac447aeb0bd485ce77ec5320a3b8f98f0478faa662573e45d214780b51a0e168f6fd144102e51822821aa4605bf79096e95e5832530e932cb5255f79719dee45be5e85e3fc1dfe95cf7d040189a4dccbbc09c80031bd43f27edb0f43743b1c366f7d3c429ac21ac84ba79ae0a0d4a4c0") ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x18, 0x13, 0x35, &(0x7f0000000080)}) 11:28:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 304.486573] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (1025) 11:28:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:28:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2530cf9dd2bce6e067b1d917196f15883429d2c575cd3b907809653d934cda6fbed0123421dddac7f87b6083b4117ccfc57a1c690ae7001e5468f08553db6d8add3ab141816e57c197349928fbe62675cdac1cc0a7f7733218f08bf73007a922c97f5fb02858226e9be996d725ff3bfbbb3a6c0e1f0660548488b8c2181c6f96b2fa70793a48be47300af2108f8cd57a3b0d04a0d11bcf5c109b3cd79163cd9161537bd27baf9208b881d0fbf8cf9e1916cf91632bf38b419d34412ba256e1fef054b145ab9aa6ef715f37da041d3818e7af6d4c7e3332e77d46c26f4a62362f16f97c5502f74d8c23aa", @ANYRES16=r2, @ANYBLOB="010000000000000000001b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 11:28:36 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES16, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYRESHEX=r0], 0xffffffd0) 11:28:36 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:28:36 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000640)={0x1073e3400, &(0x7f00000000c0), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x10, 0x0, 0x2, 0x0, 0x0, 0x401}) 11:28:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:28:36 executing program 7: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80101) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 11:28:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 304.861012] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (1025) [ 310.179050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.181650] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.183776] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 310.185578] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 310.187369] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 310.188965] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 310.190555] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 310.192165] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 310.193763] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 310.195371] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 310.197241] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 310.198831] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 310.212769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.213398] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.219106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.219702] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.223768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.224353] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.230983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.231591] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.237057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.237657] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.241676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.242237] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.247005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.247605] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.252855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.253456] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.262584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.263152] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 0 [ 310.267200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.271258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.277371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.286449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.293038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.297218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.301651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.306538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.310748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.315376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.319708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.325457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.329786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.333871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.338541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.342768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.347581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.355838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.359809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.363847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.372659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.376830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.388122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.392686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.401607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.405652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.415574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.419090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.426018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.430325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.439236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.443317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.451597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.456141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.459665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.464427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.469726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.473803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.478558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.482755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.493920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.497977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.506835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.510642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.517393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.521233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.525205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.534088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.538031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.546916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.551051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.560016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.564172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.573202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.577378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.581396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.590155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.595687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.599243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.605006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.609367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.619770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.623716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.631737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.635299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.639353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.648124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.652161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.656263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.665252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.672156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.676357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.680952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.689563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.694659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.700315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.705196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.709278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.714154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.718596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.723376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.727598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.731262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.736465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.740764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.746983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.750729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.756244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.760858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.764977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.769647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.773196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.778987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.782975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.787876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.792120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.797987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.803609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.807638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.811705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.816943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.821114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.826025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.830117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.835515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.841480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.845642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.850891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.855490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.859809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.864500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.869397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.873802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.878154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.882413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.887098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.891495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.895772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.902103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 310.904443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:28:50 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:28:50 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xea001, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@fuse_with_parent={0x18, 0x82, {{0x8, 0xe48, 0x81}, {0x101, 0xa11, 0x6}}}, &(0x7f00000000c0), 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) [ 319.371691] loop3: detected capacity change from 0 to 7 [ 319.373418] FAT-fs (loop3): Unrecognized mount option "@;ü§s“ú-‚+[¥~Í" or missing value 11:28:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73663a186000088001000440000004f801", 0x17}, {0x0, 0x0, 0x7fe}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) statfs(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a080, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x5b00, 0x24) r2 = syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000480)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0x2, 0x0, 0x80000002, 0x5}, 0xf3) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) statfs(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)=""/141) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x11a0}, 0x0, {0x0, r9}}, 0x7fff) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1ea40, 0x0) fchmodat(r10, &(0x7f0000000180)='./file0\x00', 0x28) 11:28:50 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x20000000) 11:28:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:28:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x5e, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1, @ANYBLOB="2c63616368653d667363616368652c00655d14084a60bdfb835b7e0bda10acd54a"]) 11:28:50 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000640)={0x1073e3400, &(0x7f00000000c0), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x10, 0x0, 0x2, 0x0, 0x0, 0x401}) 11:28:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2530cf9dd2bce6e067b1d917196f15883429d2c575cd3b907809653d934cda6fbed0123421dddac7f87b6083b4117ccfc57a1c690ae7001e5468f08553db6d8add3ab141816e57c197349928fbe62675cdac1cc0a7f7733218f08bf73007a922c97f5fb02858226e9be996d725ff3bfbbb3a6c0e1f0660548488b8c2181c6f96b2fa70793a48be47300af2108f8cd57a3b0d04a0d11bcf5c109b3cd79163cd9161537bd27baf9208b881d0fbf8cf9e1916cf91632bf38b419d34412ba256e1fef054b145ab9aa6ef715f37da041d3818e7af6d4c7e3332e77d46c26f4a62362f16f97c5502f74d8c23aa", @ANYRES16=r2, @ANYBLOB="010000000000000000001b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 11:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:28:51 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000680)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x27, 0x1, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7}) syz_io_uring_setup(0x1c52, &(0x7f0000000540)={0x0, 0xaf19, 0x1, 0xff, 0x364, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='&\x00', &(0x7f0000000180)='/dev/bsg\x00', &(0x7f00000001c0)='/dev/bsg\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\',\x00', &(0x7f0000000380)='/dev/bsg\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='+\\\x00', &(0x7f0000000480)='\x00'], 0x400) syz_io_uring_setup(0x2075de, &(0x7f00000002c0)={0x0, 0x1b38d, 0x1a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000340)) 11:28:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ftruncate(r0, 0x80000001) setfsuid(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x92f6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="d71a906d6b6673ff0f000000020801000670008000f801", 0x17, 0x1000}], 0x820c21, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x0, 0x7fffffff}) [ 319.621991] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (1025) [ 319.627617] loop3: detected capacity change from 0 to 73 11:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 319.734752] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 7 (only 16 groups) [ 319.848912] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 7 (only 16 groups) 11:29:10 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x5e, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1, @ANYBLOB="2c63616368653d667363616368652c00655d14084a60bdfb835b7e0bda10acd54a"]) 11:29:10 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xea001, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@fuse_with_parent={0x18, 0x82, {{0x8, 0xe48, 0x81}, {0x101, 0xa11, 0x6}}}, &(0x7f00000000c0), 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 11:29:10 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000680)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x27, 0x1, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7}) syz_io_uring_setup(0x1c52, &(0x7f0000000540)={0x0, 0xaf19, 0x1, 0xff, 0x364, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='&\x00', &(0x7f0000000180)='/dev/bsg\x00', &(0x7f00000001c0)='/dev/bsg\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\',\x00', &(0x7f0000000380)='/dev/bsg\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='+\\\x00', &(0x7f0000000480)='\x00'], 0x400) syz_io_uring_setup(0x2075de, &(0x7f00000002c0)={0x0, 0x1b38d, 0x1a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000340)) 11:29:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f00000025c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="5aec6dd0dc55719ddb16d8e36746b32bfcb092a665e2ab09dfe7019ddc110bc273719bb6e54f7c81f19a11f5cde0dd4702737857fbdfedbbd9715109c72111405d585d5f3a2e058af241c2a02594a844ee2a038041f0570d6d8f1bcb9219d624d0ca87e9eec720c937a986a8f95a952c6e27841a7f2229e749289e037d8917e74635fa8d9f1bd36d80aebd31ef38152df81e82d081c54cce33ae414c4daccdef70d50fda18bb53", 0xa7, 0xff}, {&(0x7f0000001280)="68373c2ded09a4f03f26cc4b0e047f139ff7cd828fce0abb4099390cacbb8df3a24729c000cd11178cd36e5dc6e3529179880587f76f8eb70d12d75e623eb6e38c2ceffab5d6176a1fcbe25cca0886cef7c3926bbd94b152f61cacd3d6928dcc219dd88219babb2d7e5ba0ec59b16b469ad5053fa56fe06cbe1aac5ae8d0e39c71dbc02cfe155f5e332ef99c2ab424290989200c70a31a375de6756fefc55ab69276be7a7b10858df01a5a26ed86217b930b8583b6c70748f31355196e82fbf93c40626a50a1425d5d0ed8a7c7d682204e39181da50aeb2ddd27b05b5f55563663749cd4ecd34d", 0xe7, 0x81}, {&(0x7f0000001380)="8146e417f94e317bfd0461a72109e8472bbfe26a3356dfffdf572988564725e19e975667278133ab3449d0c626a9e2b6a03939270b775047265dd6e924a99dfba86592cce086182798ff643b3b58146bba452a2a469d124ce8583a9f82ac8d07cdf0e120ab99ae83a0bb35aa57f66914d99fed380562bf181aae335d2dcbdc3adc8a7d393d006cc32b2bdb5ba8d1e626fd4d75f4296a56f4bc7405620e1cc7931c20058918bccacc04f650d92d5b6073ee8ea054ccd9c4bdd5b8aea89dac6cb4a3ff469bcfecad61a4c8fec26da1b11d2b26b2ea6562d1e72ff5b1322a7a446e6bd8f648b9cc2333f76f03a688a41d8593c79113fc93c5c59e2f30777d7096b38ec1d4d703f15d40cec977c57fb8c80e0285c72508515b9e0b18d0f3c0f82db811b2a8d031532017a8650023e2eb74940823b2d68a50687dd4d24d4d4f3e9028ec9bc7d942dfe5d0f5e38fc62239d796192a3614922c544bd6da4bb1e808488541c91f43e59a3112f7ce931f339b93f53f0a1ece2a4f89edaa6c0644afd70a090ba7227c070f1dffb154bbdf19babe7f81054a7d064e17f8969a89a13efb625fae02d56c64b821640794d267a0c40053bf0b1bbb5f3027ea97e7521be2b42a573681f95de87e2bbbda828c853b2b788d527c825f558a1a2cbc44b55873d9e84cf33165575a46ce8f02dc4f99020e17b6492b04f55d192b5662f10b2e5aacce260eb4d302b617cb22ab149f1f3dd72729294c3b4fe7897e4d5a29f0644ba1345c1a87087dec10994fb160313e76bbf16af9741cf97273b17d26800dc7f9650bc2ce214057e1767d46a4842eaca3a674f49d8970b3ac906ceda795ce9f4a411159dcfd422f62c3a7515037816dbad050734424345399c59910692157e967597c318d967245505dfbbd367b332ded918daa4245cf2df45857435d883ddf89b7b567e414d22b041f76b0f7fbd5c4fa53661da5d92d1c0a77040abc413455132eccce44a02cc6550db4c7a5cc92aa124bc803f723bafebfa796466a0ddfba5117655518cfb5bf60c14d4557989f5d295affe59a69268fc2b03a8b04083f5db6c9a133d74fb51db228e5304cb2cb3989bb20bcb5af099fdb7bd5a1db5abd3dcca98cca2970e70a3b95ea231659eb5d06fdbf5f82cc726edfbdf7c94462925cb9bb2a5d42f0bcd6c695a7a9ec2926956c16ea9f8a5f343deba63c1c76d4fcab1c395a02b5716073a509d03bb61e5a4d58135014dea3224a81be62b26a212b4265e8896126edf465a7badc427669443ad5dbed85543f6cfc95b8dbcf9084c8836b7eba79460a1e120cda294c26ec4f5f19614dcf911a286458596b4c8a43acbecd43d8a8e6c51c12b63b89fcd94f6167f0a7240bd8626f5616defb5f34ac1041811c54d4aa19a0c10edda7489a25edf9741096e75b634dbc0e78bae4dfe139dd588cbaaee870d68a47e4144120d670e022b61d613ff20b154dd9127d179fceadedb313563dae0df11d0737af2368e0f8684437de46abd03d9456c1a767cbb15f36ee4ab390e824ccb4ae4dfaa594fc946ad071748946e519eff2ec099af75881423a3df9535d61eb55b6c9e73016f439834363844ff1c047fc24562b64a682a6ef8c6f6a9ce7210f5a1a0d14139b60a2fe565282d643e767d9583702c283303d9fe09ebba695974d7313ff7f54bf306c29e0725803b6becaa279c7d0e1f58c99a12bba29ccd44a8a2800aabc840cb0668e1db71dcc1b18b6d7504cf21d3039c8c06dd8b1a14aa8bfb4129c32da67d9fed30fc797197a47941a652005d1d80577b02a777bfb2d8e51db8528b2dfb5a53430bfa95f87168ce0014ceed082542c840eef8561026bb9602301a1b74aaa4ae0f9b5b70a7af7adcc99b44da2bd03223110ce9a50aefc6b30ffe29c193f0728dab936d3e51cb777e67dee395102e4f2b25e0c0349c43e639741d52238bc6530e13d62f6f2a95cfd3c672a57a542ee53c0e30f0e8cf437fbfcdde7476d844f0488a4aeecf2370e5501cd52e35277a5f8195d29b495729219aefd8101232ce9199c548a7f281adbd383f4af2f7654506b4ca683e228c9632963d373b47eef3c42e5adf13f99cdef1ecb498ab315ddaf4f154f187fde0ac180c070b493c25b616a0ea4aef22df10e473e788fe22db6a3ea447c8e890da2378c536f43b147f220371ed8fdf909962392e7aa46d2b3f58b73737809679025a428431c8a48c820e4bc1c2b32fa5ec472c1cf3f1e60d5635bebccfc4e8a62231bb9bbaa41fde8c8aafc9741a7b5f5b3fbb87aa9b9c67bfa79e4816774e4bc55f341bfca9130592872c414697c6e423ccf53b17154523ad88b131e9550b934a1b64e1a449fda7b0e22e7bc051bed5538c57490529e8faf3836ae3b77ee617dda5bdb0aaf1b4c89e7733a62eacf9d3ddc58ac09a0e98a9c1b846a5bd69284d2857bc62839be97608c488aee900907321a8aaa26882a9e182471e232711d5bdb80eefe78e6579ec6b03d514e6ca29a5521f2285918a8b756468c9f0aee426999c2885cbb52780e36ece60f1424efe68cc360022ecd3613933c7ebad8499227c6dde0aebae7550257bfa6f20290302633ab3e5a0094697d65f859ad7d8904e49ca96d3276e1db503b3c3d59bedcc4e6a4dc6ab0d420ca46cec0cd21acc2b922b023424c9300d16ba631a0ae154010d36bd2e1d4430bb962b3ae55f6d303eede71aef53077b3120c9de4236c0cd34c5b342c4e83e7cf9141977e3053f78a9f6b9c51a3f67473eeb8ceb6611068714ad37e34514158f8e86d4e6ed925996fed18617b40f0eedec22247014c66a7becd852d2f82b82e529163da4ee0086efd9e96fc691687880ed097236729fa86e05e0f92ead6efcccacaaa156ca857af7720370de83ba026db1acce33f5f28f3956e6b8474950c506b81ee62875733b5980718b0efedc4d6a281b403d07f6367c9892cf4b5fbacf7459a6ae0070ebc411a0f0e31f42cfecbb4272cd8c66368512c7c31d5aaf0abaa05c30906de2782d64d65d188dc68be1f17d21138eff8ecfaa9bbc2b9d4b52af7dad2856131a513271ea7a1f910fb24f0ce548282976b712205fe4ca3e370c5709514e76ff9d0ef695b5eaf7f50e60a2d29cc7a09427ac8959f3f951f97091d9f2d3a6ab3489be278dc5507287276110cea284296c132ed8e16de305431cff1614231fdfad3146afcf8780126e37d9dfccd2d0c71fc369c0d89ebf4cec1dea7d9269d7fd0591664727542dbe9edc6e09fe717539188a60b417e145d13659444400f65b6e768aabbff861941f0003bbe460f02e27bab1145c3bf9f39323a9a134c004099d975b2b1d5842564ace3b474924fe3611b1e595c28e3b56530231d8616736c7d7265666e57949616f45e07acfe2314faf5edee3ba7c633f294e8de978b562b664eb7a9d0358dd0819f998270114cdd29440724a8a45745db4c376bfcb9594bb97adc44e8fb26e99bf51016e6a74be64f24ad538fcb2d41028bea00ba2af76f9b3bd664268a4ec2f0b862e39d1d7199e09c54f6b12388b0c1da0a46ba1dc64cdbf0ebb705f17df44fdf4a6247a5734ecfe11e3f213e4853ad2e7566656d8e0ec48aa2502d26adf5874571b8521ac8df6b36316a7ed5bd48c10f3b2f1fd8875565c16aae407b2f9775d9535582230331adb834cf5279cd0b467073b96a10d772dc315bb37f4362559ca349c223211c986401036f39923394b74f82d3803f5cf9f9cdc47508d4491bc34d6cc44361314050bdd18e5a03c5ff1a8b896a58177f1277814d20a4d3aedee3e281acb4390d0b2e37ce1a109abeb9c5379b467ab5acb7be3153c466c3b46677d0793536b0e0852480de4496147857be45e6bcc0ec6b55ec2e4c2f29dc31fec9def4a81fd1fd09a88a33c25ed046107bc46e8ddb78f0f6fa1241681dcfcb2aa9d1d62e36887148cf735b5dda0bf0ca97334f0fd2dcb95bbec8b10da87c9cf8d2fd147f938e3a091706056be6cd6542151e4f8f5780543392b4d113e25a2bc47133854c3c0a01c9eb26f4583d565a60eca7a945b7c454002c80cc9ecb4af2cf322aee11b6373de4e4d967f8c1092f56245e82f09b4abe9c68be1767e2aed50e7da51662726856b08a8274d0b787e8a72e29e2b10453c7e828b9678d8de01c06f01bc648b06719628d229393e46373e8111e7d95f9b57aa7e5a3ea7fef95bf2365a9eb10d8ca980dd3dc8ab0ed4a7919969aeeff4caa1d5ef889e64c9b2aaa8e4b1d4d92bae400654ad91c87d6ef0f2493b2bd8c3476fd64575f3403f8eba1c8b01547de9e27551a3a0237ea0c7515a677e03dd2e790d42bc3abb8445800f48bbfa84936b61ec309806b1b40d9d5bd9f84bcfdceaa8bfed544ee6a2bf5348f55fb7802ecadc81935cfe6ab82366b0bec9f7b793f6a0256ddbad7defa4aba4baa3f3609f0ea2b1323e14abfeddd149e9ffda890537e4446026f872a951e6ffeb79c9616d40b64292ad29a29963d9ff7961eb9d4353bfabdbc72f430b44ce61f5d81827f65d4078474a05c88b9065bec637663d4305988d9f693e9d613d647b9108b5ae0a0b7164edfa8e813231223297673e87c6b4f35c392da9752928436653c67035f32607deb6d1bca1741506029c519d587a5aa3af678e797fac15b85cef306155f71c542812c9b257a459eb7a566ff4b5bc2934adf144b8ec69dadc0db8c77f0157483c816f9aca2ef4e59d057b3d1a6640a222173af37cc9a441c0bd4877e78651da0a894a76077b1c9fc3c450b1a6905dd659ebe1347114ec8520195b4be75aab0c8dc4b25511634b8063a84e2de8e46dbcda386d1ec9358686a7a0c709c112724e2b84e5e0974f2106284b214d6eb256e546097bcdfa4ae0bf1686368caa306103f3dc4a9e2674d6d0ba6470b052ac7362a2908b1f56cfb5404f92a1f8e64758a68966cbecffae1981c069ddd6e0d4b7cea75b2b69dc050f5d2e731a71c894befd4a6e54e144e680a1a6cde946549b46385276513268257a5216d6619e0e01d380cc49c839a7a2ade24cf6de01184aa582740e966cf85a569da5dda0a10ea5b338c2c58b2f0d63fb3e826d9722765ef621fa0260e8393ef8a78045ea3d11e391fef2387bd89545471342c2f673a3b049a939d0cec06947baab49d04f5206148a405bbb9f9167ffb5b3e68a80c95fb4892419d070ed1095a8cb9fbc6448b28c5fcf990ac073c07d4313d2819912d9adfd2afe08e924c73a0e844f2daad8cd9d8d3366e9566a28a27e477fc5503e444e37013961b7f80c1619728565086420e1bb1613d4deafbb55ad869a29827c71fb8f4cfae99db45fa8f00071bbd3a7385e256e014a08551c6578d94ca7e4f60f0be87ea926257434403b4f039ca5f17e5ae896b0a9c066fae3c5d010ed0dd7db51176c0e6ba2f6c718d0126dedff93bf125616e7520924fe3a9b88d04d44df38d56ab684fbe32494269c3ea4e624176869750e00a0d41d89ad43feba2c9787958c3e359e59b6e558415aff6021f367c99adcadc15caa81280da19615a0303417b23dcefe4cf0587dc1ca81c19f41ffcab6fcb5a5796b4b1c057b45d11ae97eaef32e71e6c40e4d3d74cf13c11af980993b7807a4487ef09fe3d9c248afdf41792b73d72f481dd78f1537ae60db113788ef5ac4c5ebc6c95b57a67d1ac382e1588e9e855e80e397d541dc45275133439ee439aad1d0da24f370af184b92f942599f337b678d0802affd248f6f83248f36601fec4ae3c45be90b20e5a3844cf8ade1bd8b373bb92726a0341562b2d5f41f3", 0x1000, 0x6}, {&(0x7f0000002380)="4e09aa08c3bc4e06866e0fd7212cbd53a0d97ca0beabf0d73e7c2a514e9dd281b24c8330c9e3c88a2aea", 0x2a, 0x9}, {&(0x7f00000023c0)="40f6ac52bcaa589790cfa7f66836e980633a7e63e331ba27f1d40bc57c992eb8eab5773c6414ee9dafaf094796bfdb", 0x2f, 0xfff}, {&(0x7f0000002400)="0d8e6b81661947a04bd0b8bcb47fb6230f210ba62aca382749801d6c79ead30e2d4b1e86318e8385a8f23928801d566036bcf82bee975c734d91e28f19470fc0203649546d8d75f041336298f1c356da85e37902ef4b4152855aed6c0641ce19c0f37b3baf5a16f01f4fe35e67bc6dfe6d2aa54cdf720a51e44a454bfb168dd7d61494e02dbc062027da64abbe87dea6907d16015db747cd436ce4ef53f47efae70f28a708ea84b94e10c6c6fe30d4e9dc4f2478a67d84aa2d6d461e0e0ce195c667bdb4a5e01784663dbcfb29faad39b45527154c8ce2018d41047d2f395f690e51b56226d5a8778289185e", 0xec, 0x8001}, {&(0x7f0000002500)="cb7dd77077b94b8a58a1444917ffc779e002448a7b53313702a21d3ced9879c33fb41cdf377282342ed879076807a714804e4ed73f833da2f68381d90960e82f430f5d9e0a4c3d2cc298793c25a1c8307574791b69abd7af", 0x58, 0x8001}, {&(0x7f0000002580)="4ecda49f44112fdbb389c1a450b9e6c2238d43c26c9d0410d486993a3803", 0x1e, 0x9}], 0xc00, &(0x7f00000026c0)={[{@test_dummy_encryption}, {@oldalloc}], [{@obj_user}]}) mount$cgroup2(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0) [ 338.849259] loop4: detected capacity change from 0 to 128 [ 338.870553] EXT4-fs: Test dummy encryption mount option ignored [ 338.871927] EXT4-fs: Ignoring removed oldalloc option [ 338.882065] ext2: Unknown parameter 'obj_user' [ 338.882441] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 7 (only 16 groups) 11:29:10 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0xbc, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9bd6365c8074e5fe1984c327cd05d691fb345b7a5a594e86bfd1"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ce8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x30000811}, 0x40) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x90, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0xfe}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xcc, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5b5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100, @private2, 0xd6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff5b6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40801) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@noprefix}]}) 11:29:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ftruncate(r0, 0x80000001) setfsuid(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x92f6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="d71a906d6b6673ff0f000000020801000670008000f801", 0x17, 0x1000}], 0x820c21, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x0, 0x7fffffff}) 11:29:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 338.916381] loop4: detected capacity change from 0 to 128 [ 338.920960] loop3: detected capacity change from 0 to 73 11:29:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x5e, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1, @ANYBLOB="2c63616368653d667363616368652c00655d14084a60bdfb835b7e0bda10acd54a"]) [ 338.946864] EXT4-fs: Test dummy encryption mount option ignored [ 338.948211] EXT4-fs: Ignoring removed oldalloc option [ 338.961159] ext2: Unknown parameter 'obj_user' 11:29:10 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000680)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x27, 0x1, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7}) syz_io_uring_setup(0x1c52, &(0x7f0000000540)={0x0, 0xaf19, 0x1, 0xff, 0x364, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='&\x00', &(0x7f0000000180)='/dev/bsg\x00', &(0x7f00000001c0)='/dev/bsg\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\',\x00', &(0x7f0000000380)='/dev/bsg\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='+\\\x00', &(0x7f0000000480)='\x00'], 0x400) syz_io_uring_setup(0x2075de, &(0x7f00000002c0)={0x0, 0x1b38d, 0x1a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000340)) [ 339.044485] cgroup: noprefix used incorrectly 11:29:10 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:10 executing program 3: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f00000025c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="5aec6dd0dc55719ddb16d8e36746b32bfcb092a665e2ab09dfe7019ddc110bc273719bb6e54f7c81f19a11f5cde0dd4702737857fbdfedbbd9715109c72111405d585d5f3a2e058af241c2a02594a844ee2a038041f0570d6d8f1bcb9219d624d0ca87e9eec720c937a986a8f95a952c6e27841a7f2229e749289e037d8917e74635fa8d9f1bd36d80aebd31ef38152df81e82d081c54cce33ae414c4daccdef70d50fda18bb53", 0xa7, 0xff}, {&(0x7f0000001280)="68373c2ded09a4f03f26cc4b0e047f139ff7cd828fce0abb4099390cacbb8df3a24729c000cd11178cd36e5dc6e3529179880587f76f8eb70d12d75e623eb6e38c2ceffab5d6176a1fcbe25cca0886cef7c3926bbd94b152f61cacd3d6928dcc219dd88219babb2d7e5ba0ec59b16b469ad5053fa56fe06cbe1aac5ae8d0e39c71dbc02cfe155f5e332ef99c2ab424290989200c70a31a375de6756fefc55ab69276be7a7b10858df01a5a26ed86217b930b8583b6c70748f31355196e82fbf93c40626a50a1425d5d0ed8a7c7d682204e39181da50aeb2ddd27b05b5f55563663749cd4ecd34d", 0xe7, 0x81}, {&(0x7f0000001380)="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", 0x1000, 0x6}, {&(0x7f0000002380)="4e09aa08c3bc4e06866e0fd7212cbd53a0d97ca0beabf0d73e7c2a514e9dd281b24c8330c9e3c88a2aea", 0x2a, 0x9}, {&(0x7f00000023c0)="40f6ac52bcaa589790cfa7f66836e980633a7e63e331ba27f1d40bc57c992eb8eab5773c6414ee9dafaf094796bfdb", 0x2f, 0xfff}, {&(0x7f0000002400)="0d8e6b81661947a04bd0b8bcb47fb6230f210ba62aca382749801d6c79ead30e2d4b1e86318e8385a8f23928801d566036bcf82bee975c734d91e28f19470fc0203649546d8d75f041336298f1c356da85e37902ef4b4152855aed6c0641ce19c0f37b3baf5a16f01f4fe35e67bc6dfe6d2aa54cdf720a51e44a454bfb168dd7d61494e02dbc062027da64abbe87dea6907d16015db747cd436ce4ef53f47efae70f28a708ea84b94e10c6c6fe30d4e9dc4f2478a67d84aa2d6d461e0e0ce195c667bdb4a5e01784663dbcfb29faad39b45527154c8ce2018d41047d2f395f690e51b56226d5a8778289185e", 0xec, 0x8001}, {&(0x7f0000002500)="cb7dd77077b94b8a58a1444917ffc779e002448a7b53313702a21d3ced9879c33fb41cdf377282342ed879076807a714804e4ed73f833da2f68381d90960e82f430f5d9e0a4c3d2cc298793c25a1c8307574791b69abd7af", 0x58, 0x8001}, {&(0x7f0000002580)="4ecda49f44112fdbb389c1a450b9e6c2238d43c26c9d0410d486993a3803", 0x1e, 0x9}], 0xc00, &(0x7f00000026c0)={[{@test_dummy_encryption}, {@oldalloc}], [{@obj_user}]}) mount$cgroup2(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0) 11:29:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 339.196367] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 7 (only 16 groups) [ 339.236970] loop4: detected capacity change from 0 to 128 [ 339.244709] EXT4-fs: Test dummy encryption mount option ignored [ 339.246074] EXT4-fs: Ignoring removed oldalloc option [ 339.276382] ext2: Unknown parameter 'obj_user' 11:29:10 executing program 0: r0 = pkey_alloc(0x0, 0x1) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000018, r1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300001a, r1) pkey_free(r0) prlimit64(0x0, 0x1f, &(0x7f0000000000)={0x40000000200, 0x80000040}, 0x0) fork() 11:29:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x800, 0x6, 0x840, 0x3f, 0x6, 0x4d7c}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)) 11:29:26 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="201100001010a7f97d073e465968dd6ce2c87afe530100000000000000a900dff327fd08"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRES64=r4, @ANYRES64=r2, @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4044}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1a) r6 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x80000, 0x24) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(r5, r1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r7, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x20001, 0x1ea) 11:29:26 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:26 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) write$binfmt_aout(r0, &(0x7f0000001500), 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/208, 0xd0}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/88, 0x58}], 0x9, 0x43c798d8, 0x2) 11:29:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5453, 0x0) 11:29:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000061f000000000032"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xfffffffffffffcdf) fcntl$setown(r2, 0x8, r4) r5 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) recvmmsg$unix(r6, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x3, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/51, 0x33}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x2}}], 0x4, 0x1, &(0x7f0000000c80)={0x77359400}) fchown(r7, r8, r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@hash}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) 11:29:26 executing program 0: r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgrp(r0) pidfd_open(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@hci, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) getpgrp(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) clone3(&(0x7f00000004c0)={0x8000100, 0x0, &(0x7f0000000180), 0x0, {0x39}, &(0x7f0000000200)=""/47, 0x2f, 0x0, 0x0}, 0x58) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') statx(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 11:29:26 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 354.842661] loop2: detected capacity change from 0 to 40 11:29:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 354.942543] syz-executor.2 (6392) used greatest stack depth: 23584 bytes left 11:29:26 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="201100001010a7f97d073e465968dd6ce2c87afe530100000000000000a900dff327fd08"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRES64=r4, @ANYRES64=r2, @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4044}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1a) r6 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x80000, 0x24) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(r5, r1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r7, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x20001, 0x1ea) 11:29:26 executing program 0: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x6810, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252']) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x6000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) open(&(0x7f00000000c0)='./file1\x00', 0x88240, 0xb0) 11:29:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x800, 0x6, 0x840, 0x3f, 0x6, 0x4d7c}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)) 11:29:26 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) write$binfmt_aout(r0, &(0x7f0000001500), 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/208, 0xd0}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/88, 0x58}], 0x9, 0x43c798d8, 0x2) 11:29:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000061f000000000032"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xfffffffffffffcdf) fcntl$setown(r2, 0x8, r4) r5 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) recvmmsg$unix(r6, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x3, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/51, 0x33}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x2}}], 0x4, 0x1, &(0x7f0000000c80)={0x77359400}) fchown(r7, r8, r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@hash}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) [ 355.074788] loop2: detected capacity change from 0 to 40 11:29:26 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:26 executing program 0: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x6810, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252']) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x6000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) open(&(0x7f00000000c0)='./file1\x00', 0x88240, 0xb0) 11:29:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:26 executing program 3: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x6810, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252']) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x6000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) open(&(0x7f00000000c0)='./file1\x00', 0x88240, 0xb0) 11:29:26 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) write$binfmt_aout(r0, &(0x7f0000001500), 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/208, 0xd0}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/88, 0x58}], 0x9, 0x43c798d8, 0x2) 11:29:26 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x4, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xe02, {0x1e, 0x80, 0x9, 0x4, 0x800}}) 11:29:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYBLOB="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"], &(0x7f00000008c0)='./file0\x00', &(0x7f0000000080)='ext3\x00', 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) execveat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000280)='obj_type', &(0x7f00000002c0)='\x00', &(0x7f00000003c0)='subjerole'], &(0x7f0000000480)=[&(0x7f0000000380)='+.', &(0x7f0000000400)='version=9p2000.L', &(0x7f0000000440)='\xfa$'], 0x1000) setreuid(r0, r0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1006423, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e24,version=9p2000.L,obj_user=ext3\x00,smackfsroot=ext3\x00,euid<', @ANYRESDEC=r0, @ANYBLOB="2c61756469742c6f626a5f747970653d2c73756269d555a1408670f04e991f2a1520aa986a5f726f6c653d2b2e2c7375626a5f726f6c653dfa242c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 11:29:26 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:42 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:42 executing program 2: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x34}}, 0x0) 11:29:42 executing program 3: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x54b}], 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r2, r3, 0x0, 0x409afb) sendfile(r3, r1, 0x0, 0x409afb) 11:29:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:42 executing program 6: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x3, 0x18, 0x2, 0xfffd, 0xa, "5f981f6d44151b37"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) 11:29:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10181, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x104, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xbb}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1deb}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x18}]}, 0x18}], 0x1}, 0x0) [ 355.334833] 0xffffffffffffffffÙ“Câï™$ßÑíÀsc¿-Ø:ÆiÆCÒ:CÂäÌäoõ$4¨Û'‚²ÉT,¤ª‰õ!I‹ŸÀÞJ‰äÖÂÏ„X»?rÑrF³ò‚„OýEº|ãÝM€ìjOkD%ÏAÎ:žš~I Ç$žºNIZB¯?¼jæ!zŠ¾©ÓaÏ:ßh3ß!îá©dÔ_?\§4†雓u¤¸èBЫC°¼ëRƒe³pÜ‹©·.BIˆh‚X-¸°»IFçßÁ [ 355.334833] …Œè¡&Y¼ [ 355.334833] ãÜ<¢rñRZϼë^ÿË9ô*Ã5L‚DZ2©­ŸˆËJµÎÛ–#ˆ£¿SÏ„rlÌH\¶ZA+èÛpUµ\S7ºôæAªj­ ¹e­[ªÎnÅcï;“þKàÔ8+³‡¬°4›ÇD"÷ eŠ5• ¤ÀwÎÔçHë·Œ<7K} ´:ÜC¦é‘Ë.ã³ðU¬3ëƒ>ŒyŒžŸî&iŒÚŠðÇ,µûŒ¿ù÷¯/7·´Ÿ­öI UÛÐ6µÛË»3Š ¸,·‡ãì>ƒQ!«"¯sÌš-J“1ßY´:Œ«±{KMvº)7ˆÉ¦û@Zã"{„0ÈË–²Ã˜Ìxì¹LùOªÔõ+™/Qç÷õ˜ÿê¦ ï§ì‘ÊTÇLt2|Á<@‚K'ýžXÀ;j믭Z_O§‚n”2Ј·§”tm´’ z™ú‹OüI†¾–k;lïtØã_{#øìîˆ:‚µ×°õ¶šW)sÌ(O)Zî“Y†ò´¹5¬€Öäev<úCM†SÅýÀì߶XMçèEË| [ 355.334833] .浉Sà”¸CIw8]ô©zKεš™–¹½ÿI< Zíi~›Þ)7_àÈîí–k¬Èlò2XKdR“ïWI¼-¼ØbRéN€(lO?Fy›[6oô!×Öùqãð×ÚÛaHÅË߆( [ 355.334833] ò?6øäaˆ˜MÂUG¤üÖܾë=9{x¨ ÜuOØê6ªÚÝ/Ï&Í_5r÷UÌ‘Üب\EÈ{Ôc¾ÌB´e7®<ë¬ÅY…ÑÎ0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}}, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r3 = syz_open_pts(r2, 0x202000) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f0000000000)=""/16, 0x10}], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) 11:29:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000001140)='n', 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002bc0)=""/4096, 0x1000, 0x20) sendfile(r0, r1, &(0x7f00000001c0)=0x3, 0xfff) r2 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x141042, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x81) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x40, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 11:29:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10181, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x104, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xbb}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1deb}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x18}]}, 0x18}], 0x1}, 0x0) 11:29:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x189) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000100000000000477"]) pwrite64(r0, &(0x7f0000000200)='A', 0x1, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 11:29:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x84ca40, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x20) io_uring_enter(r1, 0x29e7, 0x702f, 0x4, &(0x7f0000000080)={[0x52c]}, 0x8) 11:29:43 executing program 4: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/scsi_mod', 0x0, 0x0) openat(r1, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) lseek(r0, 0x1, 0x2) 11:29:43 executing program 6: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x3, 0x18, 0x2, 0xfffd, 0xa, "5f981f6d44151b37"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) 11:29:43 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0x949, 0x8, 0x0, 0x0, "453b636d6cee5865de5371f6f06ab843c65eba"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xb09b, 0x8001, 0x5, 0x7a, 0x1b, "4eaa6f6da18f0130"}) ioctl$TCXONC(r0, 0x540a, 0x1) 11:29:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x189) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000100000000000477"]) pwrite64(r0, &(0x7f0000000200)='A', 0x1, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 11:29:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000001140)='n', 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002bc0)=""/4096, 0x1000, 0x20) sendfile(r0, r1, &(0x7f00000001c0)=0x3, 0xfff) r2 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x141042, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x81) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x40, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 11:29:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x189) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000100000000000477"]) pwrite64(r0, &(0x7f0000000200)='A', 0x1, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 11:29:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:29:56 executing program 6: setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) fchown(0xffffffffffffffff, 0xee00, r1) r2 = getegid() lchown(&(0x7f0000000040)='./file0\x00', r0, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 11:29:56 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:29:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x8000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x8001) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000001) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a01, 0x0) 11:29:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) write(r0, &(0x7f0000000080)="01", 0x33000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x8, 0x3f) read(r1, &(0x7f00000000c0), 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r4, 0xffff, 0x4) 11:30:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x8000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x8001) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000001) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a01, 0x0) 11:30:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) write(r0, &(0x7f0000000080)="01", 0x33000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x8, 0x3f) read(r1, &(0x7f00000000c0), 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r4, 0xffff, 0x4) 11:30:11 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=0x0]) 11:30:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) write(r0, &(0x7f0000000080)="01", 0x33000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x8, 0x3f) read(r1, &(0x7f00000000c0), 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r4, 0xffff, 0x4) 11:30:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:11 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@private=0xa010100, @multicast1, r2}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000080)={@broadcast, @local, @multicast1}, 0xc) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 11:30:11 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:30:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c650103883900048810f0d3ae1dacb4398231180caa1e0be999a78267e6e5c2603bd29bc34eb8aa8621371c3d776cdcd13caad372f1d601dc10700cb969da8985e79975a0310bc97c7c5b876879667ff"], 0x24}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) [ 399.515629] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 399.543420] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' 11:30:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) write(r0, &(0x7f0000000080)="01", 0x33000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x8, 0x3f) read(r1, &(0x7f00000000c0), 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r4, 0xffff, 0x4) 11:30:11 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=0x0]) [ 399.684822] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' 11:30:11 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@private=0xa010100, @multicast1, r2}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000080)={@broadcast, @local, @multicast1}, 0xc) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 11:30:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x23}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x536d1648a36dd408, 0x8010, r1, 0x6fc20000) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000680)="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", 0xd74}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000000)=0x5) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r3, r0, 0x0, 0x100000001) 11:30:25 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:30:25 executing program 7: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffe}]) io_setup(0xffff, &(0x7f0000000000)=0x0) io_destroy(r3) 11:30:25 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="54f4359bc0ba9db319be844d262e3d64f362f06e35f6dd0ea4356f4b22be4322014a51d00d", 0x25}], 0x1, 0x7, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x10001) 11:30:25 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 11:30:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:25 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400080, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x7ffc) lseek(r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "09e004b3aa8563379b6db0bdec00d7a5"}, 0x11, 0x1) 11:30:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000040)={[{@shortname_win95}]}) [ 414.447337] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 35 (only 16 groups) [ 414.479222] loop0: detected capacity change from 0 to 40 11:30:26 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x1000}, 0x70, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="46601059fdbba23abd072de47ea830fb7f0743a2e4c09b1ee532199865af3533c511a3d141bdbd78708a3343618c6eae0b18bf4c202549f208cb986851b55369ea9df33668707307b3188f78f0c00db337fa6fd40a61fe9c912e555c18f2afeddb201af885228e1c96aa41be51cfc443a0543e2cb08ae3b2e34e0dfb23725181cb7d244ed56e48bd513a057f9aaf8ce9a524f3179e1fa4a90f82928dc2b4dd1d11c3fdff947abcc7a5451184ac7682031aca29b5eb04c8a4b765bff72755f6baa1df7fe0bd53392198533f8c6e372f0dabfe5c2797aa5d0e5bdb2b57323957014bdbd9fc27cc240f6bcaa27f12dab49d2f766058d6725e869759838e97ecb8c1f3f454508f42480aaf3802046114412bfdaa11337e70056981c953f20703c118be62a40d96a35c21b7e4a8f95f35476a5b727f06b9bab91be6efd41ec75698d8afcebab1b4bf0e4de715bd902109d0a3dd4a1484388fb712b29402b237c7d4c488629b99d859c958a6e7edefe82c5d7718076cf2bf7e2b0f10cd453ac914bedd043e4ff9d9565517c61d0716f510a3fd7b58928d21264d6ebc01bb0e93e26271486f42b44c2e0c0cc50a22c35988c6cd5d283d6c997b4d86ffb1502d60a1c57376884d910c", 0x1c5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x227}) sync_file_range(r3, 0x2, 0x21, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:26 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="54f4359bc0ba9db319be844d262e3d64f362f06e35f6dd0ea4356f4b22be4322014a51d00d", 0x25}], 0x1, 0x7, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x10001) 11:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x23}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x536d1648a36dd408, 0x8010, r1, 0x6fc20000) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000680)="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", 0xd74}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000000)=0x5) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r3, r0, 0x0, 0x100000001) 11:30:26 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x1000}, 0x70, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="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", 0x1c5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x227}) sync_file_range(r3, 0x2, 0x21, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:26 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 414.749683] EXT4-fs warning (device sda): verify_group_input:137: Cannot add at group 35 (only 16 groups) 11:30:41 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 11:30:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x183042, 0x120) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) sendfile(r1, r1, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40080, 0x107) r3 = syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x4, 0xa, &(0x7f0000001880)=[{&(0x7f0000000200)="2fe7a67fbeb47b65b82a973de57b9cf21ef2cf80e9eaf52b23e76c214328f86b1119e6490973fd05ea0b2d7f825bf6a203f22aa740b12f049633282cfc1d8198962d160ce6080e99e2f2d4f7cb009ada654b8a1f6fe832326d116b42f6eee914cd00ccdf67f62a177284c7ddfc3aa9b641ac5298c01a558b8eb9eb904db9e91d75fc16d20ae7c9d36920163ce339352694375f2b15df777f3454ebc6ce267db1ddc09b6bae81ea322ecc0a1a091b5adae4ba5d10cfdad2fcd425e4c4", 0xbc, 0x4}, {&(0x7f0000000380)="a4112d4d8433c983f567efbd9cb4b6e038c24ee88a3c77bda4113cd2e9b0556980321d834a20aa9d1e1f8bb6365e754cee9096ccd932f8ae5f2996696bddd4d70074892830a09be94935f0920977cb667b163d999f592eab8e19d85e407633a61cd25b0b15cc47b347f16d6965878ddffb89c707f5a5ac89b5ebc2e28df2a15ddd5aeaa7fef7c591ee2f05e16cf2b4", 0x8f, 0x2}, {&(0x7f0000000880)="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", 0x1000, 0x1}, {&(0x7f0000000440)="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", 0xfd, 0x80}, {&(0x7f00000002c0)="c4bb5f3290bab38077fe7770dd561f7e2dc24456234eb2de46e6c33b749c7b8ce1824f2162ce2bb629e27b99fac41d83c4103d520bfdfbbd3e655d4278665c057b0e107bce693438", 0x48, 0x100000001}, {&(0x7f0000000540)="2b840db7d001280f2b5507076f9f9d6b866155899ca02227a47acb1978ae8d49b70dbc3821", 0x25, 0x9}, {&(0x7f0000001a80)="6fae80105c81829de7230ce9f9079c7130eb1dc18d987c015511473037a9fea0c617bea27c051a3561f11545e035fd91b62526256fc37f327c6e3eb921c3a6886cc3f26cfa95ad75c343e2334d211258d28524d02bc693f7d5e92a8049bff8ccc3e2b658d00920317dfd4bbbb7413cd550a2197b6d65ee", 0x77, 0xfe}, {&(0x7f0000000600)="bc47f7ba6dc72e27d9d17852d4f721050add71e072584180af95ed8248da6c95383138db5ac1177f5e1a0671e1fe6311d5fd84d4a8f6090a95901f81fb5c2f05a12085f3f51a5b74dcf2cc63b737a6647881daa22328b07fcc4e2d458653fdcd491a6c85d8259deb991ce7bc33e4a7516691ee047ab6a06a4a0dd4146952d21c54ef916b69609990157986c10d1860dee0bca14087123e37bc53a7a46a481575e930b9b9355bebf20897ad48ed9760ad0117faf317b738e82b13faab9a2f7fceff5ce49a3369826f7e359884718831f4efa09034270691555605ca9701f415eae84cae78d2c38713fe18186486", 0xed, 0xa9}, {&(0x7f0000000700)="abc43ac3464a0779ee", 0x9, 0x91d}, {&(0x7f0000000740)="55058a61e4", 0x5, 0x5}], 0x20005, &(0x7f0000000780)={[{@huge_advise}, {@huge_always}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt}, {@obj_user={'obj_user', 0x3d, '['}}, {@dont_measure}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '(*-:'}}, {@uid_lt={'uid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, ',-:!{/[\\[*\''}}]}) pwrite64(r3, &(0x7f0000001980)="9555c204874aaa1bfe1868406813ba349b0e9ec28741b71bc9222534cdb8ed88f208ec216825233672e2fa3d1d850c84b572f6c762a509ce18157e97e967fa906838298afd5301ad3a3528ba28c565b0ea531d01db8e63e13cc793babb172aee1d03e77dac0862c7a8b021b2e5e75776b86f9c3dc8050c9d6fa2cb6a9bd0dba0ef3d3ce193b25f4bcaabe8c24119d1370569039f2188c26dd6f3be7e4703e37f9e2780648a570f10254be30c18fb7d9a48c69519096f388cc651f2a3f55b12e63b12ef3869c9cb187909abb5ee9f43255dd20bb27680ce70229e332143d848d446d27689f3d96e4474eac97371f9edfd91ef2f", 0xf3, 0x36e4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000001b00)) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x40000, 0xd8) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x44) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}}, 0x8801) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001bc0), &(0x7f0000001c00)=0x8) ioctl$FICLONE(r4, 0x40049409, r5) 11:30:41 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 11:30:41 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x1000}, 0x70, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="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", 0x1c5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x227}) sync_file_range(r3, 0x2, 0x21, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 11:30:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:30:41 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:30:41 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x489c1, 0x0) write$bt_hci(r0, &(0x7f0000000880)=ANY=[], 0xffffffd0) [ 430.112506] loop0: detected capacity change from 0 to 264192 [ 430.181456] loop0: detected capacity change from 0 to 264192 11:30:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 11:30:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36313130373331373200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="200000001cc2eb501cc2eb5000000000d4f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000d4f4655fd4f4655fd4f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b698e28d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001000800000000000000010000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a20e8d2000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3631313037333137322f66696c65302f66696c65300000000000000000000000000000000000000000000015d4476a000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008851284000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c03}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d5f4655fd5f4655fd5f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2c222a9000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c1705df1d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000013a00)) 11:30:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 11:30:41 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x1000}, 0x70, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="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", 0x1c5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x227}) sync_file_range(r3, 0x2, 0x21, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 430.304049] loop7: detected capacity change from 0 to 512 [ 430.346535] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. 11:30:41 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e0008000000000853174c18ec08929da1007809140b2a3a0802", 0x23, 0xf000}], 0x0, &(0x7f0000011e00)) r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xf5, 0x8, &(0x7f0000000680)=[{&(0x7f0000000140)="fcc9937a5b762527d4ac2ffa3e80aafa824739ab1f2cb60fd00759b658ba91b3abd093366a704b533d7f39dd99a81af54514b8c5fbbff0ead32ca55222493b60dd94468bfbc40d9072fb0e09763351ef0269dbac76fecb2f252fcdd9edcb1baacf7a15605e1630149cc97cf85169b57fd7851fe61c4c12d458f69b7e1d2e6b22aabaf72149c6ea376e1765423e6e50917c1ca64c749e6e9603be0ea64ed40c0ae3", 0xa1, 0x101}, {&(0x7f00000000c0)="78c86c36f4c0399bb9a0c29271cd9143691c77844e8ebc1b373c2728ea0a860f60d8f0b1630f45", 0x27, 0x800000000000000}, {&(0x7f0000000240)="08e0db1e9ff346be51", 0x9, 0x3}, {&(0x7f0000000280)="dd70aa64afd42ae60928a42cdbe5ea2738a19d2c156d768b0bedd5df27c1a204bc385d26e815f8fdce7683f1a51b6bff368c9647e03162f6aa8b59807a620bb3cea6f1a840972b00fa791e54beb969d4078725d4b0e209dc2b1c83843e9e059201d6e1b089e1f6db6d93c8ef0181fe720587e89de80931dd3de19a2708b746f7228ae67ee8349b0aa5fac5a9800f5d7e200f19cc926a11e3454e5ad99090f78d302d56f0325f991ed764b9e366cf29fbaf520e09c739ee4d81856f35be727350f6510ad9fa3d449e4d523ff28279e2be877afbcdd74c15c5b5931d316cd4a25750e9ccd082", 0xe5, 0x7}, {&(0x7f00000003c0)="ffddb3384668e732fee03351f6d9d24c81ec75f85f3529c2791ae5e7628703a27a0dc9b9b8af48ac0d868f58d0467cb28a448fee7ad49e44a90162c847fccbe85575ec117058fb", 0x47, 0x100000000}, {&(0x7f0000000440)="1ea5d29e46eda45041bb8d5ddc372b003bf4f9004083e4c79569bd8556455e3f4d1b8360e8c87fc619a858fbaa4f90ceecc79f49956c77de7a1d5b515192ba9d9b307b3df2af826ae522b4500af3f16a2e616e9eb2b43e", 0x57, 0x7}, {&(0x7f00000004c0)="4d0228baecf7263b045ee04b2f0da335382d0536e219d76b8d338578ea94e2e4f42cdf74d89f2f01411072a2e5654c4cb594658b4b601b12fcd953109da2b57e67dcbbff7234283cf9d252f7333211c76875280853c086bc0b778a7949ab35b0a51e5e651ff1a696fa644fa42ca8ef6570d50a9093c3cd6b3f0d3ff18035a8f39c7acaf2d636f0ac708148c62652eb41130ef6f4610673c8625a5fe13e8af0310651f7b64dddc3d468401020810bba240a152995afda7f220c43448879dfb1d98306c35edad771ebe7949cbf4fc6adfb713a243742bc0186f49533903363e9802fb8908ecc5c82f39260f4721a29c7d583", 0xf1, 0x2}, {&(0x7f00000005c0)="f7629c47195fdb63746bcd39153c45a35c7f297a7c657e9a460bbb928ef37f4b10b541ea275a2926ba77cc0ac8e4efb81c16147b545828aad4f5aedee6de26179e2a19a4802346e674bd4cab836eeb0190e40eef1b439c7a28e8eb197d934341098b3d64db79806ba0f8051f9583eddcac3ed72397200fee940bed8760cf44b49fc19d3ef2ae2d5e9b", 0x89, 0x9}], 0x30c00, &(0x7f0000000740)={[{'.\xf0'}], [{@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'iso9660\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfsfloor}, {@audit}]}) mknodat$loop(r0, &(0x7f00000007c0)='./file0\x00', 0x40, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x20000, 0x80) 11:30:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0xc043, 0x77ad}) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x60000000000, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0), 0x0, 0xaefd}], 0x200000, &(0x7f0000000340)={[{@numtail}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = fork() tkill(r3, 0x0) fcntl$setown(r2, 0x8, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x4, 0x14102) fsetxattr$security_evm(r5, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5ffef15427ad72f78e492aa2b3cd758c"}, 0x11, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000000)=0x4) 11:30:42 executing program 7: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)) read(r0, &(0x7f0000000000), 0xfffffdef) mknodat$loop(r0, &(0x7f0000000080)='./file2\x00', 0x2000, 0x0) [ 430.495018] loop4: detected capacity change from 0 to 264192 [ 430.507818] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 430.606913] loop4: detected capacity change from 0 to 264192 [ 430.613884] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 11:30:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0xc043, 0x77ad}) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x60000000000, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0), 0x0, 0xaefd}], 0x200000, &(0x7f0000000340)={[{@numtail}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = fork() tkill(r3, 0x0) fcntl$setown(r2, 0x8, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x4, 0x14102) fsetxattr$security_evm(r5, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5ffef15427ad72f78e492aa2b3cd758c"}, 0x11, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000000)=0x4) 11:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 11:30:56 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 11:30:56 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:30:56 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x1000}, 0x70, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="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", 0x1c5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x227}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) 11:30:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'geneve1\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x38, 0x5, [0x8, 0x8, 0x10001, 0x3f, 0x4]}}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup(r0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0xf89a8ca5d1e6147d) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x10, "e6"}, 0x3, 0x0) 11:30:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0xc043, 0x77ad}) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x60000000000, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0), 0x0, 0xaefd}], 0x200000, &(0x7f0000000340)={[{@numtail}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = fork() tkill(r3, 0x0) fcntl$setown(r2, 0x8, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x4, 0x14102) fsetxattr$security_evm(r5, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5ffef15427ad72f78e492aa2b3cd758c"}, 0x11, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000000)=0x4) 11:30:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xaf58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000300)=ANY=[@ANYBLOB='F\x00'/17]) [ 444.992550] loop3: detected capacity change from 0 to 264192 [ 444.996615] loop7: detected capacity change from 0 to 256 [ 444.997850] loop4: detected capacity change from 0 to 264192 [ 444.998151] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 445.012456] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 11:30:56 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 445.032084] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 445.137125] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:30:56 executing program 7: set_thread_area(&(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) creat(&(0x7f0000000600)='./file0\x00', 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 11:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736698fa1b00080801000240004000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100010e770325132510000e77032510300000000002e2e202020202020202020100010e770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200010e770325132510000e770325104001a040000", 0x80, 0x6000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0xe000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16000}], 0x0, &(0x7f0000010d00)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/216, 0xd8}, {&(0x7f0000000b00)=""/38, 0x26}, {&(0x7f0000000b40)=""/252, 0xfc}], 0x4, &(0x7f0000000c80)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000d40)=""/104, 0x68}, {&(0x7f0000000dc0)=""/131, 0x83}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/125, 0x7d}, {&(0x7f0000001f00)=""/102, 0x66}, {&(0x7f0000001f80)=""/71, 0x47}], 0x6, &(0x7f0000002080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x6, 0x2, 0x0) openat(r0, &(0x7f0000002400)='./file0\x00', 0x200900, 0x10) 11:30:56 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) readlinkat(r4, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:56 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:30:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000680)={[{}]}) chmod(&(0x7f00000004c0)='./file0\x00', 0x60) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2d9c) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x2}, {0x1ff}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='!x', 0x2, 0x0, &(0x7f0000000280)={0x2, 0xd3, {0x1, 0xc, 0x57, "039366169644fb90c54e514cd94fe957feefb61eed443d20d2004f09a3fc3f57706e9daba9580d1972a328155cdee974af770afacd855addaad2a9733a6d733df5d28d839f0af331c3162e45b25ba5d65eb192a7f09f50", 0x6f, "7ef244896455995800c0c276cab7aedcb81cdcf811f807987fdd7a8189ab6e00da67f8880748a98da202bad397af621c9940fe8b8827f8cb6458913275ac19dcd69f9cd0c7ade1e714b3922255acf11955fd383d9322376fc472db86dbcdc1d9cb67e4eaa224f9ff4888081b0c6733"}, 0xb8, "03aa9da61adb07e2c60870ed4e16417e55265ac58f76adcd7c7c371b41d67dad5340d165eef45d60b7751ac443a9f60012883968cad129d2212a9629d3630ad0a1250106915c4f7a0b915294ba075fc33fbd668394209c2df9b9f7effd1225bca97680fd250f3e81c391c5784e5f6b55d3535651259004f5d02911750f901af667dd6af3325aa44f7de0deabcda028c452f173f16b7b017eae8609fe78f5d3524f77a13e1cece3bf0bcb1c7cc6e2b4851daeb8938e0192f7"}, 0x197}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 11:30:56 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240), 0x0) write$bt_hci(r3, &(0x7f0000000540)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x3f, 0x3, 0x1d}}}, 0x7) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:30:56 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) pipe2(&(0x7f0000000240), 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 445.387851] loop3: detected capacity change from 0 to 352 11:31:13 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1a4420, &(0x7f0000000400)=ANY=[]) 11:31:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 11:31:13 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:31:13 executing program 7: set_thread_area(&(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) creat(&(0x7f0000000600)='./file0\x00', 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 11:31:13 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 11:31:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xaf58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000300)=ANY=[@ANYBLOB='F\x00'/17]) 11:31:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000680)={[{}]}) chmod(&(0x7f00000004c0)='./file0\x00', 0x60) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2d9c) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x2}, {0x1ff}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='!x', 0x2, 0x0, &(0x7f0000000280)={0x2, 0xd3, {0x1, 0xc, 0x57, "039366169644fb90c54e514cd94fe957feefb61eed443d20d2004f09a3fc3f57706e9daba9580d1972a328155cdee974af770afacd855addaad2a9733a6d733df5d28d839f0af331c3162e45b25ba5d65eb192a7f09f50", 0x6f, "7ef244896455995800c0c276cab7aedcb81cdcf811f807987fdd7a8189ab6e00da67f8880748a98da202bad397af621c9940fe8b8827f8cb6458913275ac19dcd69f9cd0c7ade1e714b3922255acf11955fd383d9322376fc472db86dbcdc1d9cb67e4eaa224f9ff4888081b0c6733"}, 0xb8, "03aa9da61adb07e2c60870ed4e16417e55265ac58f76adcd7c7c371b41d67dad5340d165eef45d60b7751ac443a9f60012883968cad129d2212a9629d3630ad0a1250106915c4f7a0b915294ba075fc33fbd668394209c2df9b9f7effd1225bca97680fd250f3e81c391c5784e5f6b55d3535651259004f5d02911750f901af667dd6af3325aa44f7de0deabcda028c452f173f16b7b017eae8609fe78f5d3524f77a13e1cece3bf0bcb1c7cc6e2b4851daeb8938e0192f7"}, 0x197}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 11:31:13 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xaf58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000300)=ANY=[@ANYBLOB='F\x00'/17]) 11:31:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1a4420, &(0x7f0000000400)=ANY=[]) 11:31:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x94}}, 0x0) 11:31:13 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:13 executing program 4: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x94}}, 0x0) 11:31:13 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x94}}, 0x0) 11:31:13 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:31:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x94}}, 0x0) 11:31:13 executing program 3: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000280)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000069f09c75f0000ffff53efd01df2ceac545457d843cbb3e4d3eb6e41813fca6db2d04ac1afaa1bd94ca1361a44376e9fde9892fb07ea1b43769b4fc27e512040c0c2391dc732d360a5e0a6c1e522621d6659a3de", 0x83, 0x400}, {&(0x7f0000000180)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="0000000000000000000000000000000800000000000000000000009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001", 0x4c, 0x8c60}], 0x0, &(0x7f0000000080)) truncate(&(0x7f0000000140)='./mnt\x00', 0x800) creat(&(0x7f0000000000)='./mnt\x00', 0x40) removexattr(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="62747239b7e85d"]) [ 462.261124] loop3: detected capacity change from 0 to 140 11:31:13 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 462.283647] EXT4-fs (loop3): unsupported inode size: 13985 [ 462.285186] EXT4-fs (loop3): blocksize: 1024 [ 462.319160] loop3: detected capacity change from 0 to 140 [ 462.328976] EXT4-fs (loop3): unsupported inode size: 13985 [ 462.330300] EXT4-fs (loop3): blocksize: 1024 11:31:14 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:31:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xaf58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000300)=ANY=[@ANYBLOB='F\x00'/17]) 11:31:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1], 0x94}}, 0x0) 11:31:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) [ 462.679102] loop4: detected capacity change from 0 to 13 [ 462.694816] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 462.733461] syz-executor.4: attempt to access beyond end of device [ 462.733461] loop4: rw=2049, want=19, limit=13 [ 462.787323] syz-executor.4: attempt to access beyond end of device [ 462.787323] loop4: rw=2049, want=122, limit=13 [ 462.811041] syz-executor.4: attempt to access beyond end of device [ 462.811041] loop4: rw=2049, want=27, limit=13 [ 462.813312] buffer_io_error: 16382 callbacks suppressed [ 462.813326] Buffer I/O error on dev loop4, logical block 26, lost async page write [ 464.476304] Bluetooth: hci0: command 0x0415 tx timeout [ 479.160620] loop0: detected capacity change from 0 to 13 11:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:31:30 executing program 7: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:31:30 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:30 executing program 3: setuid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '(\x00'}, &(0x7f0000000080)=""/4096, 0x1000) fchown(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000003d00)=[{{&(0x7f0000001080), 0x6e, &(0x7f0000002500)=[{&(0x7f0000001100)=""/68, 0x44}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/59, 0x3b}, {&(0x7f0000001280)=""/198, 0xc6}, {&(0x7f0000001380)=""/104, 0x68}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/254, 0xfe}], 0x7, &(0x7f0000002580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000002680)=@abs, 0x6e, &(0x7f0000003880)=[{&(0x7f0000002700)=""/166, 0xa6}, {&(0x7f00000027c0)=""/106, 0x6a}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/23, 0x17}], 0x4, &(0x7f00000038c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003900)=@abs, 0x6e, &(0x7f0000003980), 0x0, &(0x7f00000039c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000010000001000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003ac0)=""/126, 0x7e}], 0x1, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003c80)=""/36, 0x24}], 0x1}}], 0x5, 0x100, &(0x7f0000003e40)={0x0, 0x3938700}) ioprio_get$uid(0x3, r1) 11:31:30 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 479.171724] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:31:30 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) 11:31:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1], 0x94}}, 0x0) [ 479.198697] loop4: detected capacity change from 0 to 13 11:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) [ 479.222615] syz-executor.0: attempt to access beyond end of device [ 479.222615] loop0: rw=2049, want=19, limit=13 [ 479.246475] syz-executor.4: attempt to access beyond end of device [ 479.246475] loop4: rw=2049, want=19, limit=13 [ 479.260968] syz-executor.0: attempt to access beyond end of device [ 479.260968] loop0: rw=2049, want=122, limit=13 11:31:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1], 0x94}}, 0x0) 11:31:30 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:30 executing program 3: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 479.305592] syz-executor.4: attempt to access beyond end of device [ 479.305592] loop4: rw=2049, want=122, limit=13 [ 479.314917] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.244287] Bluetooth: hci0: command 0x0415 tx timeout [ 483.292290] Bluetooth: hci0: command 0x0415 tx timeout [ 485.340276] Bluetooth: hci0: command 0x0415 tx timeout 11:31:48 executing program 7: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) 11:31:48 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) 11:31:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:31:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x94}}, 0x0) 11:31:48 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:31:48 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:31:48 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 496.620938] loop4: detected capacity change from 0 to 13 [ 496.647880] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.654867] loop0: detected capacity change from 0 to 13 [ 496.695459] syz-executor.4: attempt to access beyond end of device [ 496.695459] loop4: rw=2049, want=19, limit=13 [ 496.721457] syz-executor.0: attempt to access beyond end of device [ 496.721457] loop0: rw=2049, want=19, limit=13 [ 496.751659] syz-executor.4: attempt to access beyond end of device [ 496.751659] loop4: rw=2049, want=122, limit=13 [ 496.786891] syz-executor.0: attempt to access beyond end of device [ 496.786891] loop0: rw=2049, want=122, limit=13 11:32:04 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:32:04 executing program 7: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) 11:32:04 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 513.193538] loop4: detected capacity change from 0 to 13 11:32:04 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x94}}, 0x0) 11:32:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:32:04 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:04 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) [ 513.225135] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.278490] syz-executor.4: attempt to access beyond end of device [ 513.278490] loop4: rw=2049, want=19, limit=13 11:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x94}}, 0x0) 11:32:04 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 513.345833] syz-executor.4: attempt to access beyond end of device [ 513.345833] loop4: rw=2049, want=122, limit=13 [ 513.374663] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:32:04 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:05 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x20000081) 11:32:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000"], 0x94}}, 0x0) 11:32:05 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 513.523150] loop4: detected capacity change from 0 to 13 [ 513.582856] syz-executor.4: attempt to access beyond end of device [ 513.582856] loop4: rw=2049, want=19, limit=13 11:32:05 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 515.420257] Bluetooth: hci0: command 0x0415 tx timeout [ 517.468265] Bluetooth: hci0: command 0x0415 tx timeout [ 519.516271] Bluetooth: hci0: command 0x0415 tx timeout 11:32:19 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000"], 0x94}}, 0x0) 11:32:19 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 11:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x20000081) 11:32:19 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:19 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) 11:32:19 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:19 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) [ 528.267949] loop4: detected capacity change from 0 to 13 [ 528.299865] syz-executor.4: attempt to access beyond end of device [ 528.299865] loop4: rw=2049, want=19, limit=13 11:32:19 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x20000081) 11:32:20 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000"], 0x94}}, 0x0) 11:32:20 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 528.495172] loop4: detected capacity change from 0 to 13 11:32:20 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:20 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000"], 0x94}}, 0x0) [ 528.556512] syz-executor.4: attempt to access beyond end of device [ 528.556512] loop4: rw=2049, want=19, limit=13 11:32:20 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:20 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) [ 530.268469] Bluetooth: hci0: command 0x0415 tx timeout [ 532.316308] Bluetooth: hci0: command 0x0415 tx timeout [ 534.364287] Bluetooth: hci0: command 0x0415 tx timeout [ 536.412273] Bluetooth: hci0: command 0x0415 tx timeout 11:32:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x20000081) 11:32:36 executing program 6: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000"], 0x94}}, 0x0) 11:32:36 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) 11:32:36 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:36 executing program 5: r0 = fork() r1 = fork() waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:36 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:32:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) [ 545.106352] loop0: detected capacity change from 0 to 13 [ 545.122093] syz-executor.0: attempt to access beyond end of device [ 545.122093] loop0: rw=2049, want=19, limit=13 [ 545.124748] loop4: detected capacity change from 0 to 13 11:32:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x20000081) [ 545.171821] syz-executor.4: attempt to access beyond end of device [ 545.171821] loop4: rw=2049, want=19, limit=13 [ 545.182714] loop0: detected capacity change from 0 to 13 [ 545.191300] syz-executor.4: attempt to access beyond end of device [ 545.191300] loop4: rw=2049, want=122, limit=13 [ 545.200898] syz-executor.0: attempt to access beyond end of device [ 545.200898] loop0: rw=2049, want=19, limit=13 11:32:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000"], 0x94}}, 0x0) 11:32:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:32:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000"], 0x94}}, 0x0) 11:32:36 executing program 6: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:36 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:32:36 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 545.299333] loop4: detected capacity change from 0 to 13 [ 545.316068] syz-executor.4: attempt to access beyond end of device [ 545.316068] loop4: rw=2049, want=19, limit=13 [ 545.332224] syz-executor.4: attempt to access beyond end of device [ 545.332224] loop4: rw=2049, want=122, limit=13 11:32:36 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:32:36 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:32:36 executing program 5: r0 = fork() r1 = fork() waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x20000081) [ 545.452504] loop4: detected capacity change from 0 to 13 [ 545.488110] syz-executor.4: attempt to access beyond end of device [ 545.488110] loop4: rw=2049, want=19, limit=13 [ 545.514874] syz-executor.4: attempt to access beyond end of device [ 545.514874] loop4: rw=2049, want=122, limit=13 11:32:49 executing program 0: r0 = fork() r1 = fork() waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050"], 0x94}}, 0x0) 11:32:49 executing program 5: r0 = fork() r1 = fork() waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:32:49 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:49 executing program 6: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:32:49 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:32:49 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) 11:32:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x20000081) [ 557.914623] loop4: detected capacity change from 0 to 13 11:32:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050"], 0x94}}, 0x0) 11:32:49 executing program 2: timerfd_create(0x0, 0x80800) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) [ 557.964723] syz-executor.4: attempt to access beyond end of device [ 557.964723] loop4: rw=2049, want=19, limit=13 11:32:49 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 558.012406] syz-executor.4: attempt to access beyond end of device [ 558.012406] loop4: rw=2049, want=122, limit=13 11:32:49 executing program 2: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:33:08 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) 11:33:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050"], 0x94}}, 0x0) 11:33:08 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) fcntl$addseals(r1, 0x409, 0x0) 11:33:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:08 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) 11:33:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) semget$private(0x0, 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:33:08 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:08 executing program 5: r0 = fork() r1 = getpgid(r0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 576.661627] loop4: detected capacity change from 0 to 13 11:33:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 576.741405] syz-executor.4: attempt to access beyond end of device [ 576.741405] loop4: rw=2049, want=19, limit=13 11:33:08 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003740)) 11:33:08 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000010802110000005050505050"], 0x94}}, 0x0) [ 576.808582] syz-executor.4: attempt to access beyond end of device [ 576.808582] loop4: rw=2049, want=122, limit=13 11:33:08 executing program 5: r0 = fork() r1 = getpgid(r0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:33:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:33:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000010802110000005050505050"], 0x94}}, 0x0) 11:33:08 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 577.015090] loop4: detected capacity change from 0 to 13 [ 577.047521] syz-executor.4: attempt to access beyond end of device [ 577.047521] loop4: rw=2049, want=19, limit=13 [ 577.073420] syz-executor.4: attempt to access beyond end of device [ 577.073420] loop4: rw=2049, want=122, limit=13 [ 578.717249] Bluetooth: hci0: command 0x0415 tx timeout [ 580.764251] Bluetooth: hci0: command 0x0415 tx timeout [ 582.812252] Bluetooth: hci0: command 0x0415 tx timeout [ 584.860330] Bluetooth: hci0: command 0x0415 tx timeout 11:33:23 executing program 5: r0 = fork() r1 = getpgid(r0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:33:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:23 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003740)) 11:33:23 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) fcntl$addseals(r1, 0x409, 0x0) 11:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:33:23 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:33:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a08000000802110000010802110000005050505050"], 0x94}}, 0x0) [ 591.465654] loop4: detected capacity change from 0 to 13 [ 591.485444] loop0: detected capacity change from 0 to 13 [ 591.493496] syz-executor.4: attempt to access beyond end of device [ 591.493496] loop4: rw=2049, want=19, limit=13 [ 591.509583] syz-executor.4: attempt to access beyond end of device [ 591.509583] loop4: rw=2049, want=122, limit=13 [ 591.528801] syz-executor.0: attempt to access beyond end of device [ 591.528801] loop0: rw=2049, want=19, limit=13 11:33:23 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003740)) 11:33:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 591.562999] syz-executor.0: attempt to access beyond end of device [ 591.562999] loop0: rw=2049, want=122, limit=13 11:33:23 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r1, 0x0, 0x20000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:33:23 executing program 5: r0 = fork() r1 = getpgid(0x0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, 0x0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(0x0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 591.643823] loop4: detected capacity change from 0 to 13 11:33:23 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) [ 591.669961] syz-executor.4: attempt to access beyond end of device [ 591.669961] loop4: rw=2049, want=19, limit=13 11:33:23 executing program 0: r0 = fork() r1 = getpgid(r0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 591.688012] syz-executor.4: attempt to access beyond end of device [ 591.688012] loop4: rw=2049, want=122, limit=13 [ 591.697902] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:33:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:23 executing program 2: r0 = fork() r1 = getpgid(r0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:33:23 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 593.500245] Bluetooth: hci0: command 0x0415 tx timeout [ 595.549275] Bluetooth: hci0: command 0x0415 tx timeout [ 597.596243] Bluetooth: hci0: command 0x0415 tx timeout [ 599.644236] Bluetooth: hci0: command 0x0415 tx timeout [ 601.692257] Bluetooth: hci0: command 0x0415 tx timeout 11:33:39 executing program 2: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:33:39 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) fcntl$addseals(r1, 0x409, 0x0) 11:33:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:39 executing program 5: r0 = fork() r1 = getpgid(0x0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, 0x0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(0x0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:33:39 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:39 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) timerfd_create(0x4, 0x81000) fcntl$addseals(r1, 0x409, 0x0) [ 607.452447] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.468741] loop4: detected capacity change from 0 to 13 11:33:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r1, 0x0, 0x20000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 607.506489] syz-executor.4: attempt to access beyond end of device [ 607.506489] loop4: rw=2049, want=19, limit=13 [ 607.525962] loop2: detected capacity change from 0 to 13 [ 607.534005] syz-executor.4: attempt to access beyond end of device [ 607.534005] loop4: rw=2049, want=122, limit=13 [ 607.541939] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:33:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 607.561691] syz-executor.2: attempt to access beyond end of device [ 607.561691] loop2: rw=2049, want=19, limit=13 11:33:39 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 607.586536] syz-executor.2: attempt to access beyond end of device [ 607.586536] loop2: rw=2049, want=122, limit=13 [ 609.500238] Bluetooth: hci0: command 0x0415 tx timeout [ 611.548234] Bluetooth: hci0: command 0x0415 tx timeout [ 613.597216] Bluetooth: hci0: command 0x0415 tx timeout [ 615.644300] Bluetooth: hci0: command 0x0415 tx timeout [ 617.692229] Bluetooth: hci0: command 0x0415 tx timeout 11:33:53 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) timerfd_create(0x4, 0x81000) fcntl$addseals(r1, 0x409, 0x0) 11:33:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:33:53 executing program 5: r0 = fork() r1 = getpgid(0x0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, 0x0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r0, &(0x7f0000001640), 0x100) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(0x0, &(0x7f00000016c0)) r4 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:33:53 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r1, 0x0, 0x20000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:53 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) [ 621.669475] loop4: detected capacity change from 0 to 13 [ 621.679922] loop2: detected capacity change from 0 to 13 11:33:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:53 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(0x0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 621.725551] syz-executor.4: attempt to access beyond end of device [ 621.725551] loop4: rw=2049, want=19, limit=13 11:33:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 621.748046] syz-executor.2: attempt to access beyond end of device [ 621.748046] loop2: rw=2049, want=19, limit=13 [ 621.754161] syz-executor.4: attempt to access beyond end of device [ 621.754161] loop4: rw=2049, want=122, limit=13 [ 621.768443] syz-executor.2: attempt to access beyond end of device [ 621.768443] loop2: rw=2049, want=122, limit=13 11:33:53 executing program 7: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:33:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:33:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:33:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 623.708242] Bluetooth: hci0: command 0x0415 tx timeout [ 625.756238] Bluetooth: hci0: command 0x0415 tx timeout [ 627.816323] Bluetooth: hci0: command 0x0415 tx timeout [ 629.852358] Bluetooth: hci0: command 0x0415 tx timeout [ 631.902390] Bluetooth: hci0: command 0x0415 tx timeout [ 633.949599] Bluetooth: hci0: command 0x0415 tx timeout [ 638.001660] loop4: detected capacity change from 0 to 13 11:34:09 executing program 7: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:09 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(0x0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:34:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:34:09 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:09 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) fcntl$addseals(r1, 0x409, 0x0) [ 638.072048] syz-executor.4: attempt to access beyond end of device [ 638.072048] loop4: rw=2049, want=19, limit=13 [ 638.124118] syz-executor.4: attempt to access beyond end of device [ 638.124118] loop4: rw=2049, want=122, limit=13 11:34:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:09 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:09 executing program 7: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:09 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:09 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(0x0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:34:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:10 executing program 7: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:10 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:34:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 638.553652] loop2: detected capacity change from 0 to 13 [ 638.606389] syz-executor.2: attempt to access beyond end of device [ 638.606389] loop2: rw=2049, want=19, limit=13 [ 638.634303] syz-executor.2: attempt to access beyond end of device [ 638.634303] loop2: rw=2049, want=122, limit=13 11:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:10 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:34:10 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:34:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x20000081) 11:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:10 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 638.852845] loop2: detected capacity change from 0 to 13 [ 638.912634] syz-executor.2: attempt to access beyond end of device [ 638.912634] loop2: rw=2049, want=19, limit=13 [ 638.944263] syz-executor.2: attempt to access beyond end of device [ 638.944263] loop2: rw=2049, want=122, limit=13 [ 640.092265] Bluetooth: hci0: command 0x0415 tx timeout [ 642.143495] Bluetooth: hci0: command 0x0415 tx timeout [ 644.190984] Bluetooth: hci0: command 0x0415 tx timeout [ 646.236568] Bluetooth: hci0: command 0x0415 tx timeout [ 648.290012] Bluetooth: hci0: command 0x0415 tx timeout [ 650.334887] Bluetooth: hci0: command 0x0415 tx timeout [ 653.184788] loop2: detected capacity change from 0 to 13 11:34:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:24 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:24 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:34:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:24 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:34:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:34:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) [ 653.217471] syz-executor.2: attempt to access beyond end of device [ 653.217471] loop2: rw=2049, want=19, limit=13 [ 653.231319] loop4: detected capacity change from 0 to 13 11:34:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 653.240899] syz-executor.2: attempt to access beyond end of device [ 653.240899] loop2: rw=2049, want=122, limit=13 [ 653.291441] syz-executor.4: attempt to access beyond end of device [ 653.291441] loop4: rw=2049, want=122, limit=13 [ 655.196318] Bluetooth: hci0: command 0x0415 tx timeout [ 657.244261] Bluetooth: hci0: command 0x0415 tx timeout 11:34:38 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:34:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 666.685702] loop0: detected capacity change from 0 to 13 [ 666.698402] loop2: detected capacity change from 0 to 13 11:34:38 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 666.722472] loop4: detected capacity change from 0 to 13 11:34:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 666.791258] syz-executor.4: attempt to access beyond end of device [ 666.791258] loop4: rw=2049, want=122, limit=13 [ 666.823960] syz-executor.0: attempt to access beyond end of device [ 666.823960] loop0: rw=2049, want=122, limit=13 [ 666.826944] syz-executor.2: attempt to access beyond end of device [ 666.826944] loop2: rw=2049, want=122, limit=13 11:34:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 668.700242] Bluetooth: hci0: command 0x0415 tx timeout [ 670.749238] Bluetooth: hci0: command 0x0415 tx timeout [ 672.796335] Bluetooth: hci0: command 0x0415 tx timeout [ 674.844212] Bluetooth: hci0: command 0x0415 tx timeout 11:34:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:51 executing program 3: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) 11:34:51 executing program 2: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:34:51 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 679.536537] loop4: detected capacity change from 0 to 13 11:34:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 679.544477] loop0: detected capacity change from 0 to 13 11:34:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 679.579687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:34:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 679.624016] syz-executor.4: attempt to access beyond end of device [ 679.624016] loop4: rw=2049, want=122, limit=13 11:34:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:34:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 679.644134] syz-executor.0: attempt to access beyond end of device [ 679.644134] loop0: rw=2049, want=122, limit=13 11:34:51 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) [ 679.688937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:34:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:34:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 679.799013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.564239] Bluetooth: hci0: command 0x0415 tx timeout [ 683.613218] Bluetooth: hci0: command 0x0415 tx timeout [ 685.660236] Bluetooth: hci0: command 0x0415 tx timeout [ 687.708309] Bluetooth: hci0: command 0x0415 tx timeout 11:35:14 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r1, 0x409, 0x0) [ 702.864951] loop4: detected capacity change from 0 to 13 11:35:14 executing program 3: timerfd_create(0x0, 0x80800) r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:35:14 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:35:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) 11:35:14 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 702.886559] netlink: 'syz-executor.1': attribute type 160 has an invalid length. [ 702.887467] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 702.889644] loop0: detected capacity change from 0 to 13 11:35:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 702.927592] syz-executor.4: attempt to access beyond end of device [ 702.927592] loop4: rw=2049, want=122, limit=13 [ 702.959214] syz-executor.0: attempt to access beyond end of device [ 702.959214] loop0: rw=2049, want=122, limit=13 11:35:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:14 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 703.006028] netlink: 'syz-executor.1': attribute type 160 has an invalid length. [ 703.007038] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:14 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:35:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 703.103690] loop4: detected capacity change from 0 to 13 [ 703.112934] netlink: 'syz-executor.1': attribute type 160 has an invalid length. [ 703.113779] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x20000081) [ 703.137082] syz-executor.4: attempt to access beyond end of device [ 703.137082] loop4: rw=2049, want=122, limit=13 [ 703.223393] loop0: detected capacity change from 0 to 13 [ 703.256971] syz-executor.0: attempt to access beyond end of device [ 703.256971] loop0: rw=2049, want=122, limit=13 [ 704.924215] Bluetooth: hci0: command 0x0415 tx timeout [ 706.972200] Bluetooth: hci0: command 0x0415 tx timeout 11:35:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 717.925375] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 717.953912] loop4: detected capacity change from 0 to 13 11:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 718.031561] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 718.052712] syz-executor.4: attempt to access beyond end of device [ 718.052712] loop4: rw=2049, want=122, limit=13 11:35:29 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) fcntl$addseals(r1, 0x409, 0x0) 11:35:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) fcntl$addseals(r1, 0x409, 0x0) 11:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 718.121314] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:29 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:35:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:29 executing program 3: r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:35:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 719.964226] Bluetooth: hci0: command 0x0415 tx timeout [ 722.012213] Bluetooth: hci0: command 0x0415 tx timeout [ 724.176517] Bluetooth: hci0: command 0x0415 tx timeout [ 726.236253] Bluetooth: hci0: command 0x0415 tx timeout [ 728.284205] Bluetooth: hci0: command 0x0415 tx timeout 11:35:42 executing program 3: r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:42 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:35:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:35:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 731.318729] loop0: detected capacity change from 0 to 13 [ 731.327644] loop4: detected capacity change from 0 to 13 [ 731.348539] syz-executor.0: attempt to access beyond end of device [ 731.348539] loop0: rw=2049, want=122, limit=13 [ 731.365122] syz-executor.4: attempt to access beyond end of device [ 731.365122] loop4: rw=2049, want=122, limit=13 [ 733.405198] Bluetooth: hci0: command 0x0415 tx timeout 11:35:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:35:55 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:55 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:35:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:35:55 executing program 3: r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:55 executing program 0: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 744.398455] loop4: detected capacity change from 0 to 13 11:35:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 744.502477] syz-executor.4: attempt to access beyond end of device [ 744.502477] loop4: rw=2049, want=122, limit=13 11:35:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x20000081) 11:35:56 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050"], 0x94}}, 0x0) 11:35:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 744.561648] loop6: detected capacity change from 0 to 13 [ 744.610795] syz-executor.6: attempt to access beyond end of device [ 744.610795] loop6: rw=2049, want=19, limit=13 [ 744.634934] syz-executor.6: attempt to access beyond end of device [ 744.634934] loop6: rw=2049, want=122, limit=13 [ 746.460199] Bluetooth: hci0: command 0x0415 tx timeout 11:36:09 executing program 0: sysfs$3(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 758.114797] loop4: detected capacity change from 0 to 13 [ 758.135251] loop2: detected capacity change from 0 to 13 11:36:09 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:09 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:36:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:09 executing program 6: sysfs$3(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setresuid(0x0, r2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 758.193644] syz-executor.4: attempt to access beyond end of device [ 758.193644] loop4: rw=2049, want=122, limit=13 [ 758.194802] syz-executor.2: attempt to access beyond end of device [ 758.194802] loop2: rw=2049, want=122, limit=13 11:36:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:09 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x20000081) 11:36:09 executing program 6: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="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", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) 11:36:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:09 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 758.325880] loop0: detected capacity change from 0 to 13 11:36:09 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:36:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 758.372666] loop4: detected capacity change from 0 to 13 11:36:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 758.407881] syz-executor.4: attempt to access beyond end of device [ 758.407881] loop4: rw=2049, want=122, limit=13 [ 758.418384] syz-executor.0: attempt to access beyond end of device [ 758.418384] loop0: rw=2049, want=19, limit=13 [ 758.471226] syz-executor.0: attempt to access beyond end of device [ 758.471226] loop0: rw=2049, want=122, limit=13 [ 758.490419] loop2: detected capacity change from 0 to 13 11:36:10 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 758.563050] syz-executor.2: attempt to access beyond end of device [ 758.563050] loop2: rw=2049, want=122, limit=13 11:36:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:10 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/19, 0x13) preadv(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, 0x3ff, 0x3) r1 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r1, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) r2 = timerfd_create(0x4, 0x81000) timerfd_settime(r2, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000003740)) pwrite64(r1, &(0x7f00000026c0)="4fd103b93c548e5229ac87c3821e9ab0be24f11cac6fbf939a585d33646d0974c2b5d70a846073a740b6e9b97a97eb39d350149f2805995237d86757cfd29368730a0f2faa8758a54121e0632881a152a407c86bdb74fbc72a567adce9ff77b3624ed819d1aab74b76a5a0efa00810b7197559f3ab3571d4558bd21a8979e5c52937a9284b7c306e10546879db0ef5afb03259d803ac0193e587545c906208ca908dc2914345eede4827e66d42583b2202492d7f447c50e4c3cf1d3418c1d1377996abd700ceab1b3c088a2adfd78fb273d368920f0ac97e0b0a76b22c2c52c3bfd71cb71fcfbab901a77ec527ae139d762cce3d87a630101baeacf91234a115e56233adb702ef1c241fb2113ca059ea9d7f8ce3f2164f6b4b37149968c5105d4f3236eb3ad589556520220c223c5c2b071d6c404c3f501ca01e93f59b1ce675136ae5e1e7a3c0b473e1076f72d0a6e02f589cdd34b07fb3c5d0806ee4c402de54ba5a2836201ac935b8e8ec0ab1adc14d0d3ad25bcabeb274dcf400565837eb393216b5daa8865f464e05052ac2ee4a812413b09cd035d88e79105a4b0426b085a5f760a36794e9bb1ad01e510c60e64c5261e47f10d203af03b048e2fcbf01dffc8a0a9522394d66b005636f7c2f3e26d2fc892b72c59b86f54b51889947e3bdd97aa22d0998cab75f845fc513fb59dfa571ef80edd33da430c74496b1881c80a9167710abaae7a259a9faa482a242a4e7937d53ace8a18f4fb67c4577ac234e88acc139f1b2bd1911a53d2640b8ac0d612075520c29084de8a9f3d175e1b22a4c9c63674f453e4e4da2908ec4f61e0b4a3265c1945d01139686ca5f715cf6b23212d831c202a85f4d93038c7f75c10346d60697f6b4b52192eb4c5a13256f772417bf33cf71ff685e966f9841920a3b4dd13ebb73fbbe38aea6d5d7be2a62559053bd38f57576fa6fdc39dced56cab74d10d3d59f2ebe3f35f6b91dc9bfc335246b338f375b49a94ff25050f2b4d97639f0353f06f68fd838ca8edd55415975d0fa48055be1d5f0ee6e26607e48f81517b27e4e2e9d7e510cbc15c1cdde8be7a136b4356ecc1c658b9d099cd1d38a66ae285af461906eb7c08dc1bc76b91bd94fbe934bffc825a91a799553d52a1ff6b61bbccc0370bdc88fc4d26a790378842a183f450cc62bb0ccadd0a1e51257def8892309976060ecfb47b5c52fd9dc813ef8e967b0b08121c5a8c26bb95bfa753f1504ef812e4de074e6fcc89cdcc5f3393111db204b1ad5449f0e89b73f2d8de36564fe83ec121efb53318b7eb7a575212fb9e27c286e9f401d19a57e9e5abbf16d876eb8a93b477adec1fddecbab85117647f4ef6964762822006bcb8b0dd06ff7c7fe4ee9d0259e5049a987deee0b8defcadec6663ddede3df451cba0c27d888097183b34704e0149ba2a862ece9d0d7855e5e3175998212b0e2222b42ade4886b6c507727b1f15d380065cd2b387f0b9bd7c2daff61ebc24fd3eebb4e0edd6d9e906119a4e1af56b022f9bb9e8f9715849c664cd281c4dee89e665d3e21ef51a982d194a6a5b7710438129019300f46f9aceb47f03b996f6eb3767727ec314bb4b9650523fd1d741ed3a18dca98222004ff6a13f475f86b20d3c8149e92614af831d052999027e3771846a6969792946ccb344c13b5fc18ce1f6819dc2f0a787f04d3f7d3b04260b7c8a0275518ccdca9f4a70600988db7d6b40739fcef15c180d3da8a58bf662757d14903b0231e82f2a97704e512ebc0de88a3b92193bddccab3ed9849feb84b315b27b2ef552d146b88d8eb22fe02b3a25a78151e61caee14df514a1578f8edb49d7e2e6e94f4a7c15ed20501ccb11652372bb3649ed7825f9c473bd872fe94b01527f442ab0e81edf45e7e68b3d891bcc817893cfffabefa77763e31e34d963b057c4f1ba8454aa4f07fa35aff6f980ac1555b46742284f63fb5e2336c44757b362f1824cce81a8074a5e76fb5a4b6d95c36437d25f9edecc52675e07d723581d873ff9cd143f54f590e430d965b04fd95696c24862034c506414a4ae36a6775111d05d1f01e891eea0fdc19e00ace97635e6fcea90a2d2b92078be417d6fd745081c389308236df32e89c27acf9671ff3454bec8e5964c2eae83826c4d82ed986742e1083b6b96ae27664824df089d599451d5e9e7c058b47036cafaa9beec3804732dd6f892f5d53d5f781880b28f461463efb75947117a64d6f076ba1c5b0eab50a942d6dd4303bf2bb09b666cde9ccdf242c2b23080371b7958358c86444652b04731dc7800d58a8fbd7b3f5fe785d20cefcf030a0b6f567a7654c4c9798709e8093c57fbe5cb91aa5542f3e844969e16d27022a86aae18e5ac91f0c64d9d307c4c3044b8e7a431208f7b54c5ad3e825a2217c32ed8810eda4f8c5175f4d002572ac23dd19d1b04e3175e442d92afb9834e2133bc34273ff23d9276419a238f128f7f0c91f1c85b5fc01ec7307c14c651065fa7b8a78bf95722c4f90707f56a9ebe37f22c6300726fbee22dd964e31a0405d1b0c25be4eea5a14c4beb85275b09a362b6b25fa324d14052d527292daba4421f3210a0327de3ea6f7bf62fa3d75065209f8971a9ebb2281f32c705e6493e6ae51fa28881dd44ca9b1f1a829018fbe89593f9e90dc5cda93860c6acecc8a49663dfbdc6f6e92be74c0a1ba8bf67b8f53f197f20f890a796416629edec423f31f7b57df4aa3e4e32842b3ee99715e34182594087b096fe70e91b0c92cf15c44b4cdb335f5f08153ec355b87505037414a66c6e7ddf7c43894586d1220926b7bf6cea8c359879281adba59ce0f4a03ccf1da2dcc47e86b5ee98dde4d75d87c6e4ef1deb5e442fb96797421f4d0353c01f1a9efbad376f2a31877548e05d8c2ce7203a3f7cc714161ef589a52a75b3782306ba41b1fce2af44a2f93461bb0d58f33305896c801be312bdc1ad6d3149e4374b43a004cebc3f5dba05ecf664f895194bb7ecb7202c6d1e75a11f606c282b46a550b651b0e82569aaa4bd7316e2eee5cf55ecad5a448fc852f64dffb15ff67a8ff5d4920455624467fe9961bd22576f4f862bfa84cf811d515ec138993deb8207d4f881b3d5eeea99f109dbb78958a5f4b3d977a22aee33fc705f53e47f5df527c4dc09e9eec5907e233c3d4811f24417b177ded45af2974e0fff592cf22ff41667d057c743ce6a0dc4ea327f0b73acf1c50d8bdc643347df5e2b8107dad3f729a805908f64bf35bc5def5ed05d76d8e349767dbc12beb782fd6919e2b5b6ee24f2d85a80aa2c7463231b54e4f9029957c3ee69f0ef1f42bbe49457f0cd9dd700c4f751c7e0dc01daee3ec134835043de03ea2bfe26de0456c10de26003b6cd0b771aec2990eb504c4e05037b702dfcf668ab9a40568a72b4952ae5cf2085519c81b58fd22c84e29d79207aaa55a216ad9f95070fe740d2c05e2e3d380d88770fd8f8d4e537f7a0501963a782d7a7d1a1aa5d7a5ef89f8a0ab3739af4b271ed39ed9de63d70d32694c31d4c1c8915c0d4e58ad3f215d6129a99ccfca50006325d97d2706e7bf034fe78fcec9b6b2326a9945b7a96157652954cae8148624cf605324dbd21dbd41d62ecf0fa97cc251fd35d076498a5a3828a74d3f46144721d4551c756f9ff9c033d541f733f9a7522d9b12771d3a9c5081aff0310f520c8203c33876cf0a6deb71f9fbbf2deb7b28df5eb223b8180487443f93b4215f4a36ae1dab0229a285866799fa16b6e8dead7084af3e20140aee1d9f2797ab6f39434b63819a87cf09a2c6ce8f7e6f22713b95625ed36abb53f42a44ae651c38f8ced594ea464c34f45fad8ac549235cd26d32ffb8f180153566c426f79cfcfad1e4d2158fc0d628361492fc7268a7de2974143259af72bcc39251de1c2ceab1203a5b5a9788f28555a3e1134fb891efc7055b88992573ff0994292bfb0952987ed2afba1150f5084000f439f27650ba10840a9dea9f0e8100ed18dc13fd579f4c14de4af66f1535e3522a6c7b21b0554888acfbd2f9bb0eb97ea123dad4c656f8e8b89aa09eeb4a213d2cc0432821c68ccbae549be63d023edbd164b21c3ccb2afdb35fb7cb2a040b604d133570ca08bcd86b458586c3458dfda64e3b88421247b0fc9e0a5748d2eb51104f4465d73b98cebf7a4a20a979c325511003fe8b390ff147d4d77b41787b71930e30c1ad514d26bf04479a28aa2539bbce58fb595ec9b324a4ae8b9a9eda3a3bb4773f440fdaa15b6cdf23c63edf515df5aacf6aa023333c2f9b46c24afafd69f3d5b6d234e29b1444bb0887668271a9c3f713396a6747f2eb15e788e3691e95bf566326dd1588fd5581b7307f00f0ac3b7391b187d8e412e47c5e661bb37a394ab0d5c5e8fb596326e8259062970d0bc72c3571c0c86e621a12d9e17a12095620f2949b788963720e5259f042bf5a91e7a867be5695ed2ec3307e03fa5404faa0645b98ff2d282393c60145744c34078a427b95012a812d87bae516cd15c1c2f8457f71e964755c0f151781d5236cf1108053b7d3cd9c91f7f1192b0755452f4ccf31e9f661ef500a089f8355ffbfa126c25210f787fb446a16713cae209cd3b5d50fd4280c3a37d3e2ceaf957cf7d9535c22ae8d532604ecf756f2cfd1a61fdd6409f1dbebc8a59b030602263f25321868f1ffcb03b83ffe9af73d7bb63ffc7f1d2a701bd79a37bbdca5fcbe4a3d359d4c536e08c1f7ae7d1667ef7693a3fd1ea41b6feb0bfd267c83ff1b39ae155845679b96f62346a3fabfeabae60678104b7fbe1538c623f6fb4f96c8fb1e3b25513a553d1a5b391d835f47524053a394846df921ceeaa08b19623eff14e76ce11e9dcbead503fb6319f2eb3738d6669082bbf2d0dd99c78cf07165f3d04bb6f59ddd0bd67ad22d0ffcae0061b302402d4438b21a44af7bf12dde3e2b69e336a9d168fbfd14e4253f07c532a39ec63cd2d6a78c5acdcff330c9e0e9c6caabd6db1f3e27122be8f8c8322b2ba18ae69d472db9236e374c02a05f0d90d0b5f532b623dbef42f1dd239d8d06547e7d97c22362ea16433cf1c2cc7798b3a162b571fe556a668939cf0c4ee6376734d6f875e1bccc906348aa2d548da0ec96bec7e19997de0ecb932e481cb1b3563a062718092e0c39d08981479b6ef337414d57b04c176eb9288c80c90f0cd2c87a2209a3fa8bb4613242a3589eaf4a9fc65340ffef08262f80faa2fd84f777c84ab29f10a791f463b4e62e77125b4f834dde45d22dbcb82dc3993c0be19fda62e015d991e7f83268845fde442b52469e53110da437d5bbf718a031de4f21abe2287f6eedd71e2cf1fb1a3d07b905091aa6efc2ddc715523c9d755efd7aebbef7b6dc9c7ecf108eb01076913507ed59bcf0c4e7e7bdc77171073bd3edfa917838a8260b148f8555c5e5a4d12d3da62c89aa6e3d48f8f5c4fb1ddb28362cd2f8d561c1ff9927d3654e8e857406d021b4e70cb1cec1d93ddf6b1db67ebf0a4be4a3bc7864e7cefd91cfeaa75bd3d32fb7b58c693b692072100c04e431b146265630a3077d542f5931eed50026b874eba2df86c46f4f3136ef2269f43a41d5b5072a0659f73e0e8323961a8ce7d97a18e68301e8c7e7661f3d9b59d82cd261c2360a695456562dad7add6689cd32f72126935dfe510ee3124d6f82df98ebd77aa9a8eea6c49228a5deddb5f350bce7a160aaf70fdc400c74da17d70f159021bbe040438d5663507318231a374cdbfdfc51b2d7f283921cac1c552ae2a3a131a", 0x1000, 0x3f74) fcntl$addseals(r1, 0x409, 0x0) lseek(r1, 0x0, 0x4) 11:36:10 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:10 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 758.660849] loop4: detected capacity change from 0 to 13 11:36:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:36:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 758.824963] loop2: detected capacity change from 0 to 13 [ 758.902347] syz-executor.2: attempt to access beyond end of device [ 758.902347] loop2: rw=2049, want=19, limit=13 [ 758.958500] syz-executor.2: attempt to access beyond end of device [ 758.958500] loop2: rw=2049, want=122, limit=13 11:36:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) [ 773.436498] loop6: detected capacity change from 0 to 13 [ 773.468968] loop2: detected capacity change from 0 to 13 11:36:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') clock_gettime(0x1, &(0x7f00000000c0)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x5f1a02, 0x0) symlinkat(0x0, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x94, 0x61b) creat(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000) ppoll(&(0x7f0000000380)=[{r0, 0x514}, {r1}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1000}], 0x5, &(0x7f00000003c0), &(0x7f00000026c0)={[0x20]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)) r3 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/26) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0xdb, 0x1000}, {0x1}, {0x2, 0xd0, 0x800}, {0x0, 0x1ff, 0x1000}, {0x2, 0x1, 0x1800}, {0x1, 0x3}], 0x6, &(0x7f0000000340)={r4, r5+10000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x20000081) 11:36:25 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:25 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:36:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) (fail_nth: 1) [ 773.493101] loop4: detected capacity change from 0 to 13 [ 773.510041] syz-executor.2: attempt to access beyond end of device [ 773.510041] loop2: rw=2049, want=19, limit=13 11:36:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:25 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 773.531794] syz-executor.2: attempt to access beyond end of device [ 773.531794] loop2: rw=2049, want=122, limit=13 11:36:38 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:36:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="f54d943b931584ba435289de383b5a476aeb6eec1bc9fb1206a045af799277962a628a9d06a1c1564ba7fe67f8868ad259142781048452f6b86759cfaca7917e1ebbc18ae0f7b3eee1849d5d3ca3253385e623a818d672a2e0cb687fcc44bb8d79898b223b71d02d774828a31716acf2592b1d6be89455e83a91c4a357d32e6da766e8", 0x83}, {&(0x7f00000003c0)="aa05217d91c606cf56f7695ea190669e3562e75bd824be6caf8e1799b25b4ff051bc23cb5ba704fa082f65601f8e67c604c0d08de5cad51f6a6eaf0a99cceaf1922aa4dec7c7ea0c3270c89adb7a32051e6a3d8e50b2799313eaeaf67aabaff93def1c6a31d29b31eeecc55317d18a3e8e7f60e37e7f0b011cc24f6f3742a746c081a9dd473589e24c47b454f1f42f706ed2a8a779349cf9bac65acf2a0806dc909e51c493b3a4ad2536b166be2e188fc10e4bb1cd75a07b7234fff53b2695172255874a2c2697b9681fc870f17987b02809bb92e3e99f5a35722a713c00cbc1e0", 0xe1}], 0x2, &(0x7f0000000500)}}, {{&(0x7f00000005c0)=@ieee802154, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000880)=[{0x90, 0x29, 0xff, "b5e84ceb7587480a9a6385d86f3be1ce965634353be6aa81c11e15f02309b66e2534b32c93da887befe462ab64c494bf636c8791390fa178b420291f1927dabc456cd53527e115b025aeb9debe37c135c50ba59b3644752cc653d8d859be96101859f1242b277d8d27de5ff391b2066fb7889e78707c41d46d"}, {0x30, 0x109, 0x1ff, "b0a3d3f67b5632633a46a64ee29e348b6a7e5ce65021e0b9c3826e8d40"}, {0xb0, 0x112, 0x9, "05c5a21a44fa6d1fdb6fc307cf87ae2347209a0f58dc066045fe5da17feba1eda4b0992b3588e29ec698a7753d5d6c5dab858e0b6b6c5c44711b25faa1a05e985d57cac6d3e679d518022cc1687726d22ec16710f6bf1f45f50a4bbae00ca2155df0a4dc706e50a6bb212ed988b81f4762503294bc78dbd1927789d0b4470439993bdf281105001bac601e4308686deecd9f3565ecdbb4b03550264d6b0e"}, {0x90, 0x0, 0x3, "fd99d87eb5431dcd14a27bc8196b3ae68937613c14cc242fb27969bf5dcc72ffb4ca48ea942d1b3f78124fe1a3582cda53fa2075764a03d2f9e3fa7417d9ae4cf0baa1f3d00e41a686f0ff4d2bd8d0f2c165fb7577b1ccaeeafc5aecc9a0d8cacf767ff8382faec20c1649b4bfdf0a60649ff276a1b2f394dbc6f4d15f298eb9"}, {0x70, 0x110, 0xaf52, "acdf6629d4507bf3bdf2b25e51dbf5fcdd1414d5790e15e0c1fc7088a164345b6525aa0c88bdaf51f819dde4014651291f4271edba9685bdefe001de3bf208c632f7b97ccc52db97f8502910c0ea015a9e770bbebb32d2bf43de"}, {0x108, 0x116, 0x200, "326c0850f928b41d40aadd3369c674655ed9dc59e93966147b7118f16c732121884fa7a3a584dd5c97afc26e1cc51d0cbed5ea391fd582202e8200252c48a5d16584117eeadcd6e3a007c5b36c8c0ac1ee2b6b2df1120ad4305c468482179cb7a4f5bcfa844428c082f1e4758df7aa70a13d05a48743bbf1fde1facaeffa9efd85600e0eb59dc950237667a9d9d51b344b0e4bb7ffe816cabfdb8b6490dd348224f6f5bb02be1276f1453d4b13f19453ac6144ded26b21d44a833d02e1927a95d1edf65e9a754e437f7855d345857c4cc47fd9a63d25059b56a90525a2b6eb183705a990cda58fd51d3d4e1596801573c818f565add595"}], 0x378}}, {{&(0x7f0000000640)=@generic={0x5, "735fa1771699032bd0a67b76868be2b99ae42e2227ea1c2e3669fc785fd0c0203fe57f6f462a0af1ebe0689727954ffb1008c6ea08d40ff154289d40ae3ca6dc731cef73b810624840880041d9a8c3156dec7e6cb87b0c498de27963a2dd300f5a39b7747c14c703d5dc441e5b9552fbc2c2d19dff0d412cbdd76eadef34"}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)="1df10318bd70e1af9438e4322aa19f8620047e6da95051baa3f94a927e4ee1459af95c2da36e277b1f31d10491659c7cab010b3e4fc238feb10e670b0579102fdb2d58ea74224d0d79618bb2c57faf0375e42a0d228ad8b97237fc1dfeb713b46d31f764c4e562c5aa8107eb929cd50469fdf1862fca1db43f6bd09067850ba7c3ffb08b4cd281dbcf368aefc0ee6fcf2a187bcd5f90f65087ff443b34b1b3c213236e3b454d79dbea33f5567e101fe65dab3832d024e3", 0xb7}, {&(0x7f0000000780)="7a70e7f46131d7abf2d56a8fcc335cfce10e661f52d630ac1d0d224ae1f689f7d0db301dbde6a721d5bbb627c04b3fd8083b09ebb323f0da9190391cc648b73f7c1ea2a26568567a5ca4f1ee2cf333cafcf29327ff8b8da011319abe950ef739094ab63c", 0x64}, {&(0x7f0000000c00)="f7e81f746e03be46adbb39beea7bd357a5cd8c8aeaf3aa93bce975fa4e6020c0d3c28e303338c6f55b7f08480a1d9773961f56cc6fed3c08175e1012d38e65a03f354e848933b18e8e6b472b4a6e139c83fbb63f504af3a3df042be18857d7c27c73", 0x62}, {&(0x7f0000000c80)="1531a6d3be7cf2ab64dd13e5d3fa0e8ad5626e49cb5bdcb74d0a45795cfa45b4633bd6044b08ba0d58f0e718bfc5e54b731b91d54b2d5c27a1ec8cec80566f1f397a19fad84289dc590f066dfbe742328a88af36dd0e82c5c1c9ecc9b048ddc8c5577d15d98975154cdf0e913e", 0x6d}], 0x4}}], 0x3, 0x80) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6150, 0xffffffffffffffff, &(0x7f0000000040)="df7ed01461a471cb351a1f52b2af16fa1837db09945069c6e0eb1da2d495504a0c", 0x21, 0x8, 0x0, 0x3, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1000, r3, &(0x7f0000000180)="b05f4c421d924df6eb56dc22a90967ec88bd31ca050909ba18323b2d6403a71917c99c8cf69ce1fb81c1021f91209364b1e4c3a5b2c6351830095244c4b4ac2e14bd54e47af1c71d87c467250886fe5045370264bc8335d494ca12396f731aca6e6eb4f974ba17fabab9074b547e68146599fc4bda05434b2eb39ef54bd3797bf7577dae41b9206710bee31bdd123b87e79cd6cb1394ca75089b385bc0bd4aaf5c064a6e383baad7a6b93804643dd356763a3124c7f45e93e3f30304ff07221d8aad2249d30303d92b65d18e", 0xcc, 0x100000000, 0x0, 0x2, r1}]) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x6, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000540)=0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xffffff9e}) [ 786.571835] FAULT_INJECTION: forcing a failure. [ 786.571835] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 786.574676] CPU: 0 PID: 12142 Comm: syz-executor.2 Not tainted 5.17.0-next-20220330 #1 [ 786.576345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.578725] Call Trace: [ 786.579269] [ 786.579748] dump_stack_lvl+0x8b/0xb3 [ 786.580558] should_fail.cold+0x5/0xa [ 786.581402] _copy_from_user+0x2a/0x170 [ 786.582293] get_timespec64+0x75/0x190 [ 786.583135] ? __ia32_compat_sys_gettimeofday+0x210/0x210 [ 786.584308] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 786.585395] get_itimerspec64+0x1a/0x50 [ 786.586278] __x64_sys_timerfd_settime+0x108/0x220 [ 786.587363] ? timerfd_release+0x230/0x230 [ 786.587396] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.588071] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.589053] ? fput+0x2a/0x50 [ 786.589094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.591738] do_syscall_64+0x3b/0x90 [ 786.592528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.593615] RIP: 0033:0x7fe474dd1b19 [ 786.594406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.598259] RSP: 002b:00007fe472347188 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 786.599897] RAX: ffffffffffffffda RBX: 00007fe474ee4f60 RCX: 00007fe474dd1b19 [ 786.601412] RDX: 0000000020003700 RSI: 0000000000000000 RDI: ffffffffffffffff [ 786.602953] RBP: 00007fe4723471d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.604467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.605983] R13: 00007ffe7f4dbf5f R14: 00007fe472347300 R15: 0000000000022000 [ 786.607536] 11:36:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x2, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:38 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (fail_nth: 1) 11:36:38 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:36:38 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (fail_nth: 2) [ 786.656373] loop4: detected capacity change from 0 to 13 11:36:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="f54d943b931584ba435289de383b5a476aeb6eec1bc9fb1206a045af799277962a628a9d06a1c1564ba7fe67f8868ad259142781048452f6b86759cfaca7917e1ebbc18ae0f7b3eee1849d5d3ca3253385e623a818d672a2e0cb687fcc44bb8d79898b223b71d02d774828a31716acf2592b1d6be89455e83a91c4a357d32e6da766e8", 0x83}, {&(0x7f00000003c0)="aa05217d91c606cf56f7695ea190669e3562e75bd824be6caf8e1799b25b4ff051bc23cb5ba704fa082f65601f8e67c604c0d08de5cad51f6a6eaf0a99cceaf1922aa4dec7c7ea0c3270c89adb7a32051e6a3d8e50b2799313eaeaf67aabaff93def1c6a31d29b31eeecc55317d18a3e8e7f60e37e7f0b011cc24f6f3742a746c081a9dd473589e24c47b454f1f42f706ed2a8a779349cf9bac65acf2a0806dc909e51c493b3a4ad2536b166be2e188fc10e4bb1cd75a07b7234fff53b2695172255874a2c2697b9681fc870f17987b02809bb92e3e99f5a35722a713c00cbc1e0", 0xe1}], 0x2, &(0x7f0000000500)}}, {{&(0x7f00000005c0)=@ieee802154, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000880)=[{0x90, 0x29, 0xff, "b5e84ceb7587480a9a6385d86f3be1ce965634353be6aa81c11e15f02309b66e2534b32c93da887befe462ab64c494bf636c8791390fa178b420291f1927dabc456cd53527e115b025aeb9debe37c135c50ba59b3644752cc653d8d859be96101859f1242b277d8d27de5ff391b2066fb7889e78707c41d46d"}, {0x30, 0x109, 0x1ff, "b0a3d3f67b5632633a46a64ee29e348b6a7e5ce65021e0b9c3826e8d40"}, {0xb0, 0x112, 0x9, "05c5a21a44fa6d1fdb6fc307cf87ae2347209a0f58dc066045fe5da17feba1eda4b0992b3588e29ec698a7753d5d6c5dab858e0b6b6c5c44711b25faa1a05e985d57cac6d3e679d518022cc1687726d22ec16710f6bf1f45f50a4bbae00ca2155df0a4dc706e50a6bb212ed988b81f4762503294bc78dbd1927789d0b4470439993bdf281105001bac601e4308686deecd9f3565ecdbb4b03550264d6b0e"}, {0x90, 0x0, 0x3, "fd99d87eb5431dcd14a27bc8196b3ae68937613c14cc242fb27969bf5dcc72ffb4ca48ea942d1b3f78124fe1a3582cda53fa2075764a03d2f9e3fa7417d9ae4cf0baa1f3d00e41a686f0ff4d2bd8d0f2c165fb7577b1ccaeeafc5aecc9a0d8cacf767ff8382faec20c1649b4bfdf0a60649ff276a1b2f394dbc6f4d15f298eb9"}, {0x70, 0x110, 0xaf52, "acdf6629d4507bf3bdf2b25e51dbf5fcdd1414d5790e15e0c1fc7088a164345b6525aa0c88bdaf51f819dde4014651291f4271edba9685bdefe001de3bf208c632f7b97ccc52db97f8502910c0ea015a9e770bbebb32d2bf43de"}, {0x108, 0x116, 0x200, "326c0850f928b41d40aadd3369c674655ed9dc59e93966147b7118f16c732121884fa7a3a584dd5c97afc26e1cc51d0cbed5ea391fd582202e8200252c48a5d16584117eeadcd6e3a007c5b36c8c0ac1ee2b6b2df1120ad4305c468482179cb7a4f5bcfa844428c082f1e4758df7aa70a13d05a48743bbf1fde1facaeffa9efd85600e0eb59dc950237667a9d9d51b344b0e4bb7ffe816cabfdb8b6490dd348224f6f5bb02be1276f1453d4b13f19453ac6144ded26b21d44a833d02e1927a95d1edf65e9a754e437f7855d345857c4cc47fd9a63d25059b56a90525a2b6eb183705a990cda58fd51d3d4e1596801573c818f565add595"}], 0x378}}, {{&(0x7f0000000640)=@generic={0x5, "735fa1771699032bd0a67b76868be2b99ae42e2227ea1c2e3669fc785fd0c0203fe57f6f462a0af1ebe0689727954ffb1008c6ea08d40ff154289d40ae3ca6dc731cef73b810624840880041d9a8c3156dec7e6cb87b0c498de27963a2dd300f5a39b7747c14c703d5dc441e5b9552fbc2c2d19dff0d412cbdd76eadef34"}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)="1df10318bd70e1af9438e4322aa19f8620047e6da95051baa3f94a927e4ee1459af95c2da36e277b1f31d10491659c7cab010b3e4fc238feb10e670b0579102fdb2d58ea74224d0d79618bb2c57faf0375e42a0d228ad8b97237fc1dfeb713b46d31f764c4e562c5aa8107eb929cd50469fdf1862fca1db43f6bd09067850ba7c3ffb08b4cd281dbcf368aefc0ee6fcf2a187bcd5f90f65087ff443b34b1b3c213236e3b454d79dbea33f5567e101fe65dab3832d024e3", 0xb7}, {&(0x7f0000000780)="7a70e7f46131d7abf2d56a8fcc335cfce10e661f52d630ac1d0d224ae1f689f7d0db301dbde6a721d5bbb627c04b3fd8083b09ebb323f0da9190391cc648b73f7c1ea2a26568567a5ca4f1ee2cf333cafcf29327ff8b8da011319abe950ef739094ab63c", 0x64}, {&(0x7f0000000c00)="f7e81f746e03be46adbb39beea7bd357a5cd8c8aeaf3aa93bce975fa4e6020c0d3c28e303338c6f55b7f08480a1d9773961f56cc6fed3c08175e1012d38e65a03f354e848933b18e8e6b472b4a6e139c83fbb63f504af3a3df042be18857d7c27c73", 0x62}, {&(0x7f0000000c80)="1531a6d3be7cf2ab64dd13e5d3fa0e8ad5626e49cb5bdcb74d0a45795cfa45b4633bd6044b08ba0d58f0e718bfc5e54b731b91d54b2d5c27a1ec8cec80566f1f397a19fad84289dc590f066dfbe742328a88af36dd0e82c5c1c9ecc9b048ddc8c5577d15d98975154cdf0e913e", 0x6d}], 0x4}}], 0x3, 0x80) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6150, 0xffffffffffffffff, &(0x7f0000000040)="df7ed01461a471cb351a1f52b2af16fa1837db09945069c6e0eb1da2d495504a0c", 0x21, 0x8, 0x0, 0x3, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1000, r3, &(0x7f0000000180)="b05f4c421d924df6eb56dc22a90967ec88bd31ca050909ba18323b2d6403a71917c99c8cf69ce1fb81c1021f91209364b1e4c3a5b2c6351830095244c4b4ac2e14bd54e47af1c71d87c467250886fe5045370264bc8335d494ca12396f731aca6e6eb4f974ba17fabab9074b547e68146599fc4bda05434b2eb39ef54bd3797bf7577dae41b9206710bee31bdd123b87e79cd6cb1394ca75089b385bc0bd4aaf5c064a6e383baad7a6b93804643dd356763a3124c7f45e93e3f30304ff07221d8aad2249d30303d92b65d18e", 0xcc, 0x100000000, 0x0, 0x2, r1}]) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x6, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000540)=0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xffffff9e}) [ 786.689103] FAULT_INJECTION: forcing a failure. [ 786.689103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.690436] CPU: 1 PID: 12160 Comm: syz-executor.2 Not tainted 5.17.0-next-20220330 #1 [ 786.691277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.692465] Call Trace: [ 786.692738] [ 786.692976] dump_stack_lvl+0x8b/0xb3 [ 786.693390] should_fail.cold+0x5/0xa [ 786.693808] _copy_from_user+0x2a/0x170 [ 786.694241] get_timespec64+0x75/0x190 [ 786.694672] ? __ia32_compat_sys_gettimeofday+0x210/0x210 [ 786.695261] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 786.695792] get_itimerspec64+0x3d/0x50 [ 786.696215] __x64_sys_timerfd_settime+0x108/0x220 [ 786.696737] ? timerfd_release+0x230/0x230 [ 786.697180] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.697768] ? fput+0x2a/0x50 [ 786.698124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.698673] do_syscall_64+0x3b/0x90 [ 786.699081] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.699640] RIP: 0033:0x7fe474dd1b19 [ 786.700045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.702013] RSP: 002b:00007fe472347188 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 786.702837] RAX: ffffffffffffffda RBX: 00007fe474ee4f60 RCX: 00007fe474dd1b19 [ 786.703593] RDX: 0000000020003700 RSI: 0000000000000000 RDI: ffffffffffffffff [ 786.704379] RBP: 00007fe4723471d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.705157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.705952] R13: 00007ffe7f4dbf5f R14: 00007fe472347300 R15: 0000000000022000 [ 786.706746] 11:36:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9400", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) [ 786.742178] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 11:36:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:36:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6", 0x43, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:51 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) [ 799.551545] FAULT_INJECTION: forcing a failure. [ 799.551545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.553034] CPU: 1 PID: 12279 Comm: syz-executor.2 Not tainted 5.17.0-next-20220330 #1 [ 799.553894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 799.555112] Call Trace: [ 799.555379] [ 799.555619] dump_stack_lvl+0x8b/0xb3 [ 799.556033] should_fail.cold+0x5/0xa [ 799.556455] _copy_to_user+0x2a/0x140 [ 799.556872] simple_read_from_buffer+0xcc/0x160 [ 799.557397] proc_fail_nth_read+0x194/0x220 [ 799.557862] ? proc_exe_link+0x1d0/0x1d0 [ 799.558304] ? security_file_permission+0xb1/0xd0 [ 799.558831] ? proc_exe_link+0x1d0/0x1d0 [ 799.559278] vfs_read+0x1ea/0x5d0 [ 799.559660] ksys_read+0x127/0x250 [ 799.560039] ? __ia32_sys_pwrite64+0x220/0x220 [ 799.560533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 799.561098] do_syscall_64+0x3b/0x90 [ 799.561491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.562040] RIP: 0033:0x7fe474d8469c [ 799.562441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 799.564372] RSP: 002b:00007fe472347170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 799.565151] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fe474d8469c [ 799.565924] RDX: 000000000000000f RSI: 00007fe4723471e0 RDI: 0000000000000003 [ 799.566700] RBP: 00007fe4723471d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.567447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.568202] R13: 00007ffe7f4dbf5f R14: 00007fe472347300 R15: 0000000000022000 [ 799.568960] 11:36:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9400", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:51 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:36:51 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (fail_nth: 3) 11:36:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:36:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x5, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:51 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11:36:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6", 0x43, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x6, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:36:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) 11:36:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9400", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:36:51 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:36:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6", 0x43, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:36:51 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fff, 0x8001) timerfd_gettime(r0, &(0x7f0000000040)) 11:36:51 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:37:04 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:04 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a13", 0x65, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:04 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 11:37:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:04 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x0) [ 813.395446] loop6: detected capacity change from 0 to 13 11:37:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x2}}}, 0x6) 11:37:05 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x3}}}, 0x6) 11:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a13", 0x65, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:05 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x10000, 0x400d80) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_settime(r0, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x77359400}}, 0x0) 11:37:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x6, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:37:05 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:05 executing program 2: faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa, 0x300) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xa880, 0x24, 0x8}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x7) 11:37:05 executing program 7: syz_open_dev$vcsn(&(0x7f0000000000), 0x10000, 0x400d80) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_settime(r0, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x77359400}}, 0x0) 11:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a13", 0x65, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:37:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x4}}}, 0x6) 11:37:05 executing program 2: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 814.351636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51302 sclass=netlink_route_socket pid=12681 comm=syz-executor.2 11:37:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:05 executing program 2: clock_gettime(0x5, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{}, {r0, r1+60000000}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000066c8781420a0a806acbdda19ca64925e00cdfd501000010000eaff000000"], 0x20}], 0x1}, 0x0) read(r2, &(0x7f0000000040)=""/50, 0x32) 11:37:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x5}}}, 0x6) [ 814.504875] loop6: detected capacity change from 0 to 13 [ 815.186088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51302 sclass=netlink_route_socket pid=12687 comm=syz-executor.2 11:37:21 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 829.753859] loop6: detected capacity change from 0 to 40 11:37:21 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:21 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8e01, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x54142, 0x0) 11:37:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) chdir(&(0x7f0000000040)='./file0\x00') 11:37:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x11}}}, 0x6) 11:37:21 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448", 0x76, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) (fail_nth: 1) 11:37:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/66, 0x42}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/38, 0x26}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000101000000", @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010000100000000000000a90008000000052356c7191be31474008183a8d0622360a21933e9818cc4a9814264ed8554f3710b122779b57d7d80a35851204715a2d77cbf3332bc531c7cda418a01936081f777a2b4a42f7ca04ea882889cb4df6a619627d1a4335e24dd3e777cbc899ab35719967de1ad5b3a03604ef2e23abcd1c2b8cb0c0b5e2d2c830bc7acdf29eac1942fe95c14"], 0x20}], 0x1}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x18850}, 0x400c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r7, &(0x7f0000000000), 0xfffffdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r9, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf7d}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20044011) r12 = dup2(r2, r3) read(r12, &(0x7f0000000b00)=""/199, 0xc7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="073c19cb", @ANYBLOB="a0d96a3caf4293cfde39fce51234fff9796b5499dc4b414826c868b2e55ecae94285188d3e57f760223d292b370ab882a60e6acdcb0ae80797d3da2a38b15266c941f5cd5108d3fd18baddcc27ba3d01397953a669481e797c775fdaf961bd6baba2f799e914ed", @ANYBLOB="0100000000000000808c0000000000000000ae1055455c59e2adabcebd6e2d3683dd0fb598851b0af2c7e72ed0c0453e3abae9d6adb7db95f50296a22a902ebf05786c0c3bed00157be8b1662b6e46b2a8d4866f842295b6f1ebf719aff7981f55f81b956781c7a033a9d0a0f9fac5d907f6404c8763b155ec6ffaba8edb557bd5eb5109b4278a7c7997a1fe38ad9505ddfd0cb0c435a376704c640fd1be3308d3f2875d612e337fef8e88931a6304bc075adb01d74607a1ebdcd9d3231dfb48508a5910c1f35db8721815775f7fdc6407280f2cc7d5116418989e9d65e994d1408b8161352235b5e55153a4540176d6", @ANYRES16=r5, @ANYRESHEX=r6], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x2004c080) 11:37:21 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448", 0x76, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 829.809460] loop4: detected capacity change from 0 to 13 [ 829.820009] syz-executor.6: attempt to access beyond end of device [ 829.820009] loop6: rw=2049, want=44, limit=40 [ 829.821475] Buffer I/O error on dev loop6, logical block 10, lost async page write 11:37:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:21 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448", 0x76, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x300}}}, 0x6) 11:37:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="ef7265f0bcd04123ca8a6aaa480772a4e5b3c6ebaf021e10c3d6fb60204e8e08483fb86cce8b8adc7dc97983f314ddb0f2080ca66fef4cbfe217fcc8f3748c1ab32b9164026d357accac0fe864fe7e2dcd09ad44c66ff5dfe1"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)={0x1160, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10001}, {0x8, 0x0, 0x9d50}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10ec, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x3d, 0x1, "5511079c1aed61b1943cd80b7e4973ee689a638b6b6ab9b77ec057d8b9ca3002b57a2f3f490616a9389c96db221d3e188086cc4834fe04897e"}, @NL80211_BAND_60GHZ={0xa3, 0x2, "587aae7a47d5f0c54d9a64203732e4886de46e2d49ff2f953498ba55a3d76dc560d2f5b2b4590bfcb9d98d24d55d7f4bd80f61b55d227ff186ac1aca35bd688dd2f7136750b83aa2ef4155ffebe1edd3d0ecb35bcea5118591c72d722ad263f070c5433dd31eda872e22b20a79a64da6594395429af188528d64d719bb60f064dbf2bcf113102b728e35990a66ac04235920481d3fb6687a521afdf6e7e687"}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x4014}, 0x70c0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x4001) 11:37:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/66, 0x42}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/38, 0x26}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000101000000", @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010000100000000000000a90008000000052356c7191be31474008183a8d0622360a21933e9818cc4a9814264ed8554f3710b122779b57d7d80a35851204715a2d77cbf3332bc531c7cda418a01936081f777a2b4a42f7ca04ea882889cb4df6a619627d1a4335e24dd3e777cbc899ab35719967de1ad5b3a03604ef2e23abcd1c2b8cb0c0b5e2d2c830bc7acdf29eac1942fe95c14"], 0x20}], 0x1}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x18850}, 0x400c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r7, &(0x7f0000000000), 0xfffffdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r9, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf7d}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20044011) r12 = dup2(r2, r3) read(r12, &(0x7f0000000b00)=""/199, 0xc7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="073c19cb", @ANYBLOB="a0d96a3caf4293cfde39fce51234fff9796b5499dc4b414826c868b2e55ecae94285188d3e57f760223d292b370ab882a60e6acdcb0ae80797d3da2a38b15266c941f5cd5108d3fd18baddcc27ba3d01397953a669481e797c775fdaf961bd6baba2f799e914ed", @ANYBLOB="0100000000000000808c0000000000000000ae1055455c59e2adabcebd6e2d3683dd0fb598851b0af2c7e72ed0c0453e3abae9d6adb7db95f50296a22a902ebf05786c0c3bed00157be8b1662b6e46b2a8d4866f842295b6f1ebf719aff7981f55f81b956781c7a033a9d0a0f9fac5d907f6404c8763b155ec6ffaba8edb557bd5eb5109b4278a7c7997a1fe38ad9505ddfd0cb0c435a376704c640fd1be3308d3f2875d612e337fef8e88931a6304bc075adb01d74607a1ebdcd9d3231dfb48508a5910c1f35db8721815775f7fdc6407280f2cc7d5116418989e9d65e994d1408b8161352235b5e55153a4540176d6", @ANYRES16=r5, @ANYRESHEX=r6], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x2004c080) 11:37:21 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea9573103", 0x7e, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:36 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:36 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 11:37:36 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea9573103", 0x7e, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x2, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x500}}}, 0x6) 11:37:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:37:36 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x202, 0xc4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{r1, r2+60000000}, {r3, r4+10000000}}, &(0x7f0000000100)) io_setup(0x8001, &(0x7f0000000140)=0x0) io_getevents(r5, 0x5, 0x2, &(0x7f0000000180)=[{}, {}], 0x0) [ 845.287349] loop4: detected capacity change from 0 to 13 11:37:36 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r0], 0x94}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:37:36 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea9573103", 0x7e, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x5, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x1100}}}, 0x6) 11:37:37 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_gettime(r0, &(0x7f0000000000)) 11:37:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x110, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="f7182d159f1e"}, @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "17bc74a2c566961f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "51212ef8fe"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ce08058b1e1b9252b0380c117"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x12, 0x4, "d20869c790ae4efc4f462e47f5d3"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cd62a5887d3714078761423f7b"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "461b2a79fed9d91044032a77aa"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "69324c7d1240bcab54a85e33e5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "95529450ac23ec1c1437cc52d2"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e48e39fff0"}]]}, 0x110}, 0x1, 0x0, 0x0, 0x854}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:37:37 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602", 0x82, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:37 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x6, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:37:51 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:37:51 executing program 6: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x202, 0xc4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{r1, r2+60000000}, {r3, r4+10000000}}, &(0x7f0000000100)) io_setup(0x8001, &(0x7f0000000140)=0x0) io_getevents(r5, 0x5, 0x2, &(0x7f0000000180)=[{}, {}], 0x0) 11:37:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x3) 11:37:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:37:51 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11:37:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602", 0x82, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000dbcd", @ANYRES16=r1, @ANYRES64=r4], 0x20}}, 0x20040010) 11:37:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x8]}, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="0108000300"/18, @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 860.446897] loop4: detected capacity change from 0 to 13 11:37:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0xb8) 11:37:52 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x4}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x4}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000140)) 11:37:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x404) 11:37:52 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602", 0x82, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:37:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x7ffffffff000) 11:37:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) [ 860.640970] loop4: detected capacity change from 0 to 13 11:38:04 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:38:04 executing program 0: sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x3, 0xaeb, 0xffff, 0x101, 0x8, 0x7, 0x8}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x1}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) fallocate(r2, 0x10, 0x7, 0x11f) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:38:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="01f4dfb1361c540000003b3d28efe4a90d25865cc6a4c8c8dc13000008008fa286019e218f0300", @ANYRES32=r3, @ANYRESOCT], 0x94}}, 0x0) 11:38:04 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x400) fcntl$setpipe(r0, 0x407, 0x80000001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x20}], 0x1}, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/225, 0xe1}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000180)=""/220, 0xdc}], 0x3, 0x401, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000003700)={{0x0, 0x3938700}}, 0x0) 11:38:04 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:38:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x404) 11:38:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d", 0x84, 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 873.139770] loop4: detected capacity change from 0 to 13 11:38:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d", 0x84, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:38:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d", 0x84, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:38:04 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000020010000100000004000000a9000800c5b4aa8ef027ceb30109f267"], 0x20}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x0, 0x2}, 0x6) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xcc, 0x0, &(0x7f0000000480)=[@acquire_done={0x40106309, 0x3}, @dead_binder_done, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x4, 0x0, 0x2c}, @fda={0x66646185, 0x6, 0x0, 0x25}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x1000}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0xf6, 0x0, &(0x7f0000000280)="bda99bec7ab158e833dfc57a57b64c8ff679d3b3eb1797b1e9191c4cd456be0c1bde65dd5c6d961c4c9b01d3a6c9d8d234da425c9c8e3c49904a4c4d67509e91b2ef8df18c48f9e746be902890bd35652e88800caec651c61355c7bb4ce7ed7e6c176e8ef353ffe4b9acb8d82ce7fb8a464012fe4eb27500d2f53871d2501019ceede905878396419b1f7655896291b2082807287dab908cf2538b92e77fc16f5b4c6215eae63a51a53f0322594d6309dd1e92b819d63d8f3f836a2935fb1c6f4bf06f8d1da8cf4212980207cd86c098ad69565113933afa54dbc2d8fbc1b5c7f332eef4e4a8f7f446bedae5037cb79866fc657abee4"}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "6b9f89cfd0688571d559e34239edead2884b2fc29dc5d0410b77a5f4eb6bd4"}}}, 0x27) read(r0, &(0x7f0000000000)=""/49, 0x31) 11:38:04 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 873.352214] loop6: detected capacity change from 0 to 13 [ 875.356157] Bluetooth: hci0: command 0x2038 tx timeout [ 877.405142] Bluetooth: hci0: command 0x2038 tx timeout 11:38:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="01f4dfb1361c540000003b3d28efe4a90d25865cc6a4c8c8dc13000008008fa286019e218f0300", @ANYRES32=r3, @ANYRESOCT], 0x94}}, 0x0) 11:38:22 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x10000, 0x4}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000580)=""/60, 0x3c}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [{@subj_user}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '@*+'}}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@euid_eq={'euid', 0x3d, r5}}, {@hash}, {@uid_eq={'uid', 0x3d, r6}}]}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="01acf53ee68837e66311285a34230d81f823b1bfbb3541dc"], 0x6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0x10000) 11:38:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0xdb) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c653000ea1168c78fcbe9e8b6851b30ed7b77041ffe3d809605132d4484f023875feb47e2494a27746ec896afc5f51979ad778d8752ecec6ad67e02fcf7a01bb2485a7ad7694d52d5554bac369c718ca8eb09d09f154739e8087d97d5e7e8f20fbba7a8b56c416887f1e2c63fd754d3a3ab0a953bfebbde8a12eee13f5e252dd53c41a32a980f1ff06373b754ddebad"]) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) listen(r0, 0x80000001) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11:38:22 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:38:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x2}}}, 0x6) 11:38:22 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d23", 0x85, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:38:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x7fd6, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x5350, &(0x7f0000001640)={0x0, 0xd4ec, 0x1, 0x2, 0x33c, 0x0, r4}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4002880}, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x13b8, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x7}}, @NL80211_ATTR_SCAN_SUPP_RATES={0xd0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4a, 0x2, "106f30006c866096ee3216f65ca0909ada3844bac348d4dbdbf6701502fef1f9697db34f8cdd22b8ec49d6dc9ca4e309ca78e22d63f5333d084b1190348b91c9218e14637220"}, @NL80211_BAND_2GHZ={0x7d, 0x0, "3dee308ed069cf805eef5150bf3ddf0e996e3900e9d9bec0f2ff356d786e3e23ca13febcb3eb33e9ab1d57aeb8a529ce96916f5911c51b64a8ad9e4854f4c5f815d9304a645eefbe3ed8a71a9a9b8f4493b9a5912ea237e1eff14f384ba23f3266cadf0bc0934d4eda5047c07483e50dd3544d1a50a7c27ec4"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12c4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, "b0b6f2ed3a91141ba79c4d4cc16b6172a434a8b824146fc90ff6d947d06922c8b863cdf56a2b075203918acc2dccdb63f2b96e805168bebe386df3d9f9dd8ce1201f0a6afb160b96a3c6af511837ef39db1cd3e1fd929ca8aa522ca07a51fc3951abe2653cb8fdf98ac5191363cf8a1f5c2eaca1597e5bf09507ca43ee4ddde2b46e46fde432a364"}, @NL80211_BAND_2GHZ={0x38, 0x0, "b0800db047532613b09294e4f7081f64af5471df2f2eae9c6f3232163465c2034a075f200ed365decaf34ac1211ea11feb8426c4"}, @NL80211_BAND_60GHZ={0x15, 0x2, "b80378d6123a3efd3f958e9862c6ebe3b8"}, @NL80211_BAND_5GHZ={0xfc, 0x1, "263275f4ee1b6ca16b319324e1340528fbbab8966da62f043f2fb08cdcf4fbc6261180ebeea2257997d7bf73f8df0a9885371d3ecf0e28e62313d18c2735f2683c40e80a340c9f667bef9e30f2f2cde40b924b3e266be619ecb3cc6d91e905197955e5e28fedabd48ae906b7126bc9272120c1809425afb34712f9336ecb728b3bf625490a8352071252c1f2a94e771ab8b87a10ed0459c6c501156e5adb957dc8076048af3cd8b5145a77f8a1d67c94ed51e46eb28344c89297ac268be18acf8ab9516b0a9cfbef8c8804fafa06115d18d2252fbb0cd1545c7b09f2d009a50d147f424d71c9991bd33f5b5155a932e80c133a284ef3f557"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_60GHZ={0xe4, 0x2, "923d9145b038af51286401fabd9fb7a3fccc46863f9ee99562d576f558bc6353929dab8ee4d5c511fb1386cef563623ef7a9e2373c60c44ee5ead00eeede78dfd4c9e924edf93249cbaf9af5926888817584e51d86a07897c34e6d75ade6a25d66ccac465d846f81b5f1763b0d0185e41a09850f543b27e41203cc911c66b0d7b82cfe760bccb2d9798ff545bab072771b07489719876f6fecbcece3e49f909405b2e0885883cdaf302629cd1d9bd5d45244457a3136b6ff53f19eb09416b7bd3031b3923ca6e5d6b5e1f85dd55ee8174e4208b8c7e23a30e959050b423c79ec"}]}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000080003630000000000000000", @ANYRES32=r5, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:38:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff, r2, r3}, 0xc) 11:38:22 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x1ac, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5dde284094589d7b4ea6eac35240e8ff4344b6d211e7793680bd4a15ab9b5bd8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "66d7706cd89e94ccfd2d6c57352c159a7cfb7c1a8abe69498673fda67a0c3a80337cf0a6f79535879f8518c376eada92e9829bf321794b0ebb5f260056ed332681cb6132ac1d37c9549caa782b181dae6df290ceb8e0474973c59120025173175cee8a09d46eb472bfdaf91ccd070175e3e5e1e5a816799c962f66fc7424ae7122233d15cc32"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c3e44ccf20654ca58c19deeac1f469e64506cc84ec30"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "519bf5a51f80c8112b3b52af7aa8ad8c07a111bd612b71"}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4040004}, 0x4040) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800086, r5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000500)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800086, r8}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x5, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x0, 0xfffff800}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x354, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x2, 0x40, 0x7f}, {0x8, 0xe0, 0x45, 0x1}, {0xffff, 0xa3, 0x0, 0x80000000}, {0x1f, 0x9, 0xfe, 0x3501}, {0x2, 0xff, 0x4, 0x3}, {0x1, 0x2, 0x8, 0xe5c}]}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11:38:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x3}}}, 0x6) [ 891.177885] FAT-fs (loop4): bogus number of reserved sectors [ 891.178584] FAT-fs (loop4): Can't find a valid FAT filesystem 11:38:22 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d23", 0x85, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:38:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r4, &(0x7f0000000000), 0xfffffdef) write$bt_hci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="01372003ff80f900ccdfb0fc9be9f404325510d60000000000000002df9c9f0000000000000000"], 0x27) bind$bt_hci(r1, &(0x7f0000000000), 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r5, &(0x7f0000000000), 0xfffffdef) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpgrp(0x0) r8 = fork() tkill(r8, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}, {&(0x7f00000005c0)={0x1d0, 0x20, 0x2, 0x70bd25, 0x25dfdbff, "", [@nested={0x1b3, 0x1a, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @pid=r7}, @generic="c82b457f09c9aae72c2b9d6650f3f8e0f9e18af623babad438b90e5013bd04924bb9b931dbbf9b634614562f5a11e7236c6e4d5c1bcae0629104d2eac0a493974406cc7a5ad2e392ff9e180d33b620891a3073726636", @generic="288da195", @typed={0x8, 0x8b, 0x0, 0x0, @pid=r8}, @generic="3f929409be9026afeea4032337aa2d479f3008a5b475e9f6c375e1afd8c9fb54861a2d481b059f13aeb1dc5eeba93a3cd950dd58de59229ff7789906a9db8321cdf1199297aac24f1b2b768835360926cd37f84818455dd2d88dcac6e73c1dfd6cc1b47cc4c0baad67bdf7f2795eb689534cb82a028f13d8fdea67ed57fa68b86b4fa73bed2c0c9c19d7c6078e5805ae09556582ad840deeee9e9c0043f0cedcdfbf99cc23dae2ff7a03b895791d6b4fb3828780ff2123428811369125b3daee5743a8ad2e8e996673734077b66991fe00487d8ae73988c0", @generic="f6e81eeb86f5e1942754e98611e7b538497aa85e66fbb422f799c3928cf3b53e6cee6cd688f97d652e3a0dda377c106f7f94c9227fc35cb2fb931a84", @generic="77822caf58de4ff2442efda13f052237307389f8598d1c7227fe9bb34d3d76348d1ceffb8f", @typed={0xa, 0x46, 0x0, 0x0, @str='\'&+%:\x00'}]}, @typed={0x9, 0x60, 0x0, 0x0, @str='/$@/\x00'}]}, 0x1d0}], 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x7ff}}, './file0\x00'}) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x18) 11:38:22 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d23", 0x85, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:38:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="01f4dfb1361c540000003b3d28efe4a90d25865cc6a4c8c8dc13000008008fa286019e218f0300", @ANYRES32=r3, @ANYRESOCT], 0x94}}, 0x0) 11:38:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94800000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="770033a81d934bfad7ec172fa6bdf81f00000802110d000108021100000050505050505000"], 0x94}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d4}, 0x20000010) 11:38:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x4}}}, 0x6) [ 893.405131] Bluetooth: hci0: command 0x0415 tx timeout 11:38:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:36 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:38:36 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000017e20000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="20000000060000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x46}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000240)={{}, {r2, r3+60000000}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{}, {r4, r5+60000000}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)) ppoll(&(0x7f00000002c0)=[{r1, 0x1000}, {r1, 0x1441}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x100000001]}, 0x8) [ 905.199965] FAT-fs (loop4): bogus number of reserved sectors [ 905.200649] FAT-fs (loop4): Can't find a valid FAT filesystem 11:38:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4226a3, 0x21) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011520571d5d8bf2addf1ead81b64de0a0"], 0x6) 11:38:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a080000211000000505050505762"], 0x94}}, 0x0) 11:38:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x5}}}, 0x6) 11:38:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="01f4dfb1361c540000003b3d28efe4a90d25865cc6a4c8c8dc13000008008fa286019e218f0300", @ANYRES32=r3, @ANYRESOCT], 0x94}}, 0x0) 11:38:36 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:38:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x11}}}, 0x6) [ 907.251234] Bluetooth: hci0: command 0x2015 tx timeout 11:38:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x3, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/51, 0x33}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x2}}], 0x4, 0x1, &(0x7f0000000c80)={0x77359400}) fchown(0xffffffffffffffff, 0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000104000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r7 = fork() tkill(r7, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)={0x12a4, 0x18, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x1283, 0xc, 0x0, 0x1, [@typed={0x4, 0x64}, @generic="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", @typed={0x9, 0x4, 0x0, 0x0, @str='#/-[\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @uid}, @typed={0xa, 0x45, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="58ce6e8be77e0470cdffaeec4b24c0dca62b242359c958f586b9696877e7cee4a561fefb95c56b42ef6ef53cb6cb70388d969b1c973343c49d5650caf72ef8aeaa2579b85bca429b23cb04", @typed={0x8, 0x59, 0x0, 0x0, @fd}, @generic="3eee9f3d4d10fe7d030e9ad0f54b24afbf083264180c6d4cec6b581278833a8448f1c385b8213d44986bfd11e51883425ae6e928395a5e4ea45937da45963dc87f128c490d00a994bc30221c97e64a171958ad", @generic="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", @generic="4cc10c9e7ede5b92817fb46e2ae0c24ec55f1b916296f4b88e018dea26162e6446ba16334c9545889d8881af9e98b8c3db069630ca82bdac077ea4b55e1a525b72d3ed0d0f41885986da7c2c3c19eaaf799942ad2a6739c64cfe77847b46998cb5a419ff142bdc98312a942bea47a813210d9933598f89f13967fa4ab1d54ea8658a6372f869fa1ce79560c7ccae12831947801ce4acd4b51939f6aa58badbacfcee2d2596e5e788f0cf96e9892f51c164a32cdb1fa0065db7d5"]}, @nested={0x10, 0x6e, 0x0, 0x1, [@typed={0xa, 0x21, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}]}]}, 0x12a4}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r3}}}], 0x98}, 0x880) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r9, &(0x7f0000000000), 0xfffffdef) write$bt_hci(r9, &(0x7f00000000c0)={0x1, @le_del_from_accept_list={{0x2012, 0x7}, {0x1, @none}}}, 0xb) 11:38:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:38:51 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x105002, 0x20) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x2100}, {r2, 0xa000}, {0xffffffffffffffff, 0x10001}, {r0, 0x4400}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0xff1]}, 0x8) 11:38:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:38:51 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:38:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x300}}}, 0x6) 11:38:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:38:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="eaffffff0000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) [ 919.486093] FAT-fs (loop4): bogus number of reserved sectors [ 919.486755] FAT-fs (loop4): Can't find a valid FAT filesystem 11:39:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:39:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01000000000000d80037e91e35410d62b956b3d3ba8584d907561abb87c8e0481417bdb2c896cbfd05cf6cdb7c", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:39:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:05 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x0, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x500}}}, 0x6) 11:39:05 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000000c0)="d49e77d5ba71d3980d15e833dc283a698b9dfcb6187f5e4b0f1d00fe6916c3abeba16add4a800537666747ebcc8ff68f72dbd95cc97acc7b82283e2870ffee9bbd8319981770814b7903e87de9e6dd27b47987e8ab9ff582b51c0d22ce956676897944d1704d0f502fad99787ae221512280b324f9f903bfb0e6f8fe281879682f7504deb7a6093ed2b41fb20e396ce91e0d55b7b99884a438d148626046248233b72a518a", 0xa5, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+10000000}}, &(0x7f0000000200)) lseek(r0, 0x9, 0x4) 11:39:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_loaded', 0x80, 0x102) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="4058bbcb0600"], 0x6) [ 934.288484] FAT-fs (loop4): bogus number of reserved sectors [ 934.289842] FAT-fs (loop4): Can't find a valid FAT filesystem 11:39:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0x1100}}}, 0x6) 11:39:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7ff}}}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x44) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:39:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:06 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000000)={0xee, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800086, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002880)={&(0x7f00000016c0)=@updpolicy={0x11ac, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x7f1b, 0x4e24, 0x400, 0x2, 0x0, 0x20, 0x48, 0x0, 0xee01}, {0x2, 0x3, 0x7, 0xf53, 0x84c, 0xd10, 0x2, 0x8}, {0x1, 0x80, 0xf7, 0xe63}, 0x35, 0x6e6bb9, 0x0, 0x1, 0x2, 0x2}, [@algo_aead={0x104c, 0x12, {{'gcm_base(ecb(blowfish),crc32-pclmul)\x00'}, 0x8000, 0x100, "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"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @sec_ctx={0x88, 0x8, {0x84, 0x8, 0x1, 0x5, 0x7c, "ad7549cccac1063c7c9d516949c9d7d7dad01d09e15c6e0d7170276b3d14573459668bb22da5df6a6cbcd5ca50581afc8d6033641765bd6e8726bae6a75ea767bbac0792e30590880231c7648bc2f64b03e4b3cfba11ff01472b57c730a1b503975059b81b17ccb978c0bb19a7535bb5ab9b1641ea669be0c5564fa5"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, r2}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 11:39:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:39:06 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x0, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x3) 11:39:21 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) recvmmsg$unix(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x3, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/51, 0x33}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x2}}], 0x4, 0x1, &(0x7f0000000c80)={0x77359400}) fchown(r1, r2, r3) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0xee01, r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:39:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x5, 0x6]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:21 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_gettime(r0, &(0x7f0000000040)) 11:39:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2860820, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=virtio,posixacl,nodevmap,cache=fscache,noextend,loose,privport,version=9p2000.L,subj_user=,obj_user=()\'{^,hash,fsname=)-,$/:)/,uid>', @ANYRESDEC=r1, @ANYBLOB=',euid=', @ANYRESDEC=r1, @ANYBLOB="2c010000003d4d41596d61636b66736861743d2c736502000000000000"]) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:39:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:21 executing program 3: r0 = memfd_create(&(0x7f0000000100)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z)m\x9cSG\xce\xf3\xe9\x02h\v\xca(\xd7\xdfV9\x02\xdf\x1e\x967&\n\xf9*S\xdc\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\"\xfa\x00\x00\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" {\x9e\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|^\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdb\xaa\x83N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16\xdc\x9d~JEGm\xe4\x1e@\x9dGd@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}\xa5tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\bS>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/567, 0x0) pwrite64(r0, &(0x7f0000000040)="080a3153087f04583985cf25918c99a2ae4e6c54c56b8881cc90329bb70beee10815a75dbbb52812736a910940b4d9be567e6f7357e2b22b6a7db5338d219684b048f6880f147fafebcde911d880590c47d7786598d86b9e0857b486273a0a36c92d1a2a1341a63272f93c791787cd93fa0f9a2e8448edc0760ea957310348a44602117d235f", 0xfe592fea, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 11:39:21 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x0, 0x80000000, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 949.555948] FAT-fs (loop4): bogus number of reserved sectors [ 949.556729] FAT-fs (loop4): Can't find a valid FAT filesystem 11:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0xb8) 11:39:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0\x00', 0x42) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) getpeername$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) 11:39:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) read(r0, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x404) 11:39:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket(0x1f, 0x6, 0x9) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400000) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRESOCT=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) 11:39:21 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x0, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x7ffffffff000) 11:39:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES32], 0x94}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x174, r3, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xc7, 0xc5, "8726f1387d881319b6f45e11b0b5a8d54ebdae371e42fee812aacfb4d2d034649bd33d17ce3284963d40af0fda6a3b40151ce89b72219e335b69774be229f6de55edae07b9c4d0b62419a17b34571fe205c40878ff2c3c54403b79569d1d2f190a77b07e79b2f3128c082f51a52aabdb111ccede8dd0f43bbd99f0321111ca69d87a1ce996aa4498196cb9fc7c7cfc44d8bacb3a2242fc20c932d453bb1352dc890272e468ef904bbf99116d584c3435a22be5b4269cb6c67d0a314a5f00231ee4fbd6"}, @NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "2182607035084f516ecb8cbfce296ae52bcd0bd6189e8fce4a942f52222b8cebc404ef2032b87922a8fcf4068f304f8feba841135d09f18f1f4f39635d47e2d0e03509951729159fbcc5a686480d3259b45a41b883a79bd305b679d1025a15a7"}, @NL80211_ATTR_VENDOR_DATA={0x22, 0xc5, "4d1f3fce874d5746cab09a8959200d320954c06facbe3a818bbce905c03a"}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 11:39:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r0 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00', &(0x7f0000000180)=""/176, 0xb0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1615658adcfeecc246de4f67ee6f3d8a697a64d6a1c47c3c5d050cc0d338383843d347f413629f5d68599b9afb857631fbaf0d77c2d065d023c8b055de3e9469b5fd740e4221c3074e0736081e4ee1a014205e9ed107d4cf4ed84b29add20badf54c0e905e2e9c1a783d8564b7dff8411a2d02658cb72e30e0d60a68fbad985963ae17bec94f158a11220c5e237314405bf4e2a83f4a97710cc25c47e05661559c8c40fd2f9785a1eca6c2add56fba148637834410f0303e6a601d2faf6b9ec0544f7fe895c8d11a5db375eda0d82207f4f9b3508e90f2b1dd3129d87393f977b5604c17ed3e2cfbad0822d63e613eefbab13de127614af79dc26aa678bf96ca9b8f00141bc1f924d47bfb65f5a412625f0f4431f744566ffc", @ANYRES16=r3, @ANYRES32], 0x6) 11:39:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000002540)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc9, 0x3f, 0x3, 0x1, 0x1ff, 0x7, 0x1}}}, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r3 = epoll_create(0xfffffff8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000002500)={0x20000014}) lstat(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) recvmmsg$unix(r5, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x3, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/51, 0x33}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x2}}], 0x4, 0x1, &(0x7f0000000c80)={0x77359400}) fchown(r6, r7, r8) fchownat(r1, &(0x7f0000002580)='./file0\x00', r4, r8, 0x400) sendfile(r3, r0, &(0x7f0000002000)=0xe5, 0x4) recvmmsg$unix(r1, &(0x7f0000002300)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f0000000300)=""/215, 0xd7}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="143c5400000300000000000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='8@\x00\x00'], 0x38}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000640)=""/37, 0x25}], 0x4, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200000055b365e452d18c0fab792a6a5b16fe7e7841519982b9d699e87a870ef1f8ba979999d382e1fb20a5f7c9770d2ab4892c7e7f9a8d95735ea97dfff6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x98}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/18, 0x12}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/201, 0xc9}], 0x3, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)=""/237, 0xed}, {&(0x7f0000001cc0)=""/2, 0x2}], 0x2, &(0x7f0000001d40)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24f2ff00000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/239, 0xef}, {&(0x7f0000001f40)=""/167, 0xa7}, {&(0x7f0000002000)}, {&(0x7f0000002040)=""/247, 0xf7}], 0x4, &(0x7f0000002180)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000021c0), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/44, 0x2c}, {&(0x7f0000002280)=""/10, 0xa}], 0x2}}], 0x7, 0x40000000, 0x0) bind$bt_hci(r9, &(0x7f00000024c0)={0x1f, 0x4}, 0x6) 11:39:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r0 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:21 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x0, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:34 executing program 2: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x60001) 11:39:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r0 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000d6686154c46ce02c0000"], 0x6) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:39:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4e39a54b5310609c03cccaf6d46b2071ccd6b992da0874cd87aeeb2504e0141c83e9143cbcc17fad702d766078a3dc2b05f23b066219744da2cfee82a3645df370a537846373b5795c65fccd335f817a3461d2d765996ff152cbc7ba0f60d38c42a421d"], 0x6) 11:39:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) r0 = open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:34 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x0, 0x5e}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 962.726318] loop4: detected capacity change from 0 to 13 [ 962.774463] FAT-fs (loop4): bogus number of reserved sectors [ 962.776195] FAT-fs (loop4): Can't find a valid FAT filesystem 11:39:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) open(&(0x7f0000000180)='./file0\x00', 0x240, 0x82) read(r0, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:34 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000003700)={{r0, r1+60000000}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 11:39:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f50b1a1504cde3a7"], 0x6) 11:39:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) accept(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000001c0)) r4 = openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x180, 0x4, 0x2}, 0x18) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="e871631c6ee436d6610f57b11a0c2c3800894c2da791944eed1b8047595daf4f1fc562bc09b27e732955eedf2de731a54d0c2c58046d8de1665b6c8b413b92d6c32f9d4308e091a2a4b7239537ec"], 0xb) 11:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES32], 0x94}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x174, r3, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xc7, 0xc5, "8726f1387d881319b6f45e11b0b5a8d54ebdae371e42fee812aacfb4d2d034649bd33d17ce3284963d40af0fda6a3b40151ce89b72219e335b69774be229f6de55edae07b9c4d0b62419a17b34571fe205c40878ff2c3c54403b79569d1d2f190a77b07e79b2f3128c082f51a52aabdb111ccede8dd0f43bbd99f0321111ca69d87a1ce996aa4498196cb9fc7c7cfc44d8bacb3a2242fc20c932d453bb1352dc890272e468ef904bbf99116d584c3435a22be5b4269cb6c67d0a314a5f00231ee4fbd6"}, @NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "2182607035084f516ecb8cbfce296ae52bcd0bd6189e8fce4a942f52222b8cebc404ef2032b87922a8fcf4068f304f8feba841135d09f18f1f4f39635d47e2d0e03509951729159fbcc5a686480d3259b45a41b883a79bd305b679d1025a15a7"}, @NL80211_ATTR_VENDOR_DATA={0x22, 0xc5, "4d1f3fce874d5746cab09a8959200d320954c06facbe3a818bbce905c03a"}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 11:39:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000440)="5fde0cc810fba9f0781679b68155a9c414211b293c90e994ca3ab6f6009d0be851da53c30477c45d4a89851a0083fc8bb88ff062785049ee8beebaea254478dd26eef022f0afe7822ad9bbf70b8b58e677d96737f932a3d651dd23647ee5ababda45be8eb46b77c5f196ac70ba3efd84df3ed20dc8c02e75f7a1b5d4bc79d9e12e979df2f3e5c5eaf61d07e3a0ef7226c848f29c0b223493a6952cc13d2048d0b982d256ac32d3af8c6713b76ec1703d921f48d8675220537eb0d292361188983bc9767d5d20a2dc462700599aa5da492722aa482e915affa26555408b61f4f4910a9ebee19597") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x503001, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7f, 0x100, 0xffff, 0x3, 0xf5f, 0x18000000000000}, {0x5, 0xfbbc, 0x38, 0xf774, 0xffffffff, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) chdir(&(0x7f0000000200)='./file1\x00') bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000000c0)="63ad0ea934e0855709d7c769ffb846181bc1f1e520429e7f1d00bb4b2450c25cbdf78a968e8aebd6620125dc96a21297a5bcf0f3ae335b51421712e1515159ac30bbc516e9ca7ba396a3a6a52402ace688103f06090f467da21ef701bb71b014b581e004aa279e7da17b3c412ceefeb23b06a5caa502d4df6af53f0db793603b138c29243f212bfbe7a3e25bd0631639c910bfb77790d1d3228a5b9db8ecd0e456b36112fc6ddc97f172a519b0b75dd7b1a4a6ee71dd80236df1b08e7eca249470142f46c3a9be4446bd039e56") 11:39:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x4, 0x11}, 0x18) read(r0, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:34 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x77359400}, {r0, r1+60000000}}, 0x0) 11:39:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000005f1a7aec8529549b4a347d1e6e127f58f10431a16929a8eea0f0f59ecd151e1949ddd426ff9b0db3eadfb64bd72b1a35edbd2384b6675bb82bd300265f5d664cd985d4f09aa1aed192bc984d43865153a29c1d7395cd4ecd2c1ba23d3c83e8a42de30b29ee2916aa8d43eacc", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fff, 0x0, &(0x7f0000000540)="989b9e229cff28201c7ca6b066ab4dee59144fa13f1d9a165e045a816a2f93241b29fddd341263f2", 0x9, 0x0, 0x1, {0x3}}, 0x7af6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYBLOB="cc5df410a49f9ee48a6c81c418eee9873f6c11c78792158c2281acacf918750f152d298987208cbc982707a26fdead45ae55edfa6f616bc2ba2419b29c75faaea0dded13fda863bab7e647112331266be79b8872d326baec74f75a4a005b50c177050cb18ed3f90ecb67314a46d1425043266cdbc741f2c743b164c39c3086e39633e15dfc8896fd8dabf9245044aae2fa9b1fcf5b6c62d97cbdc500181624dc6f60d6acbdbdf34f70028fcaa4a929ff402a403565be3d6bc568cbe692981899e8a7e1ff6bd69f201e8c86b7ead36b78b25a09badc93", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r6, &(0x7f0000000000), 0xfffffdef) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x70, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xc880}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc0fee9188dc678b6}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250f000000600001800d0001007564703a730104000000f25c7a83b144b0000044000400200001000a004e230000008020010000000000000000000000000002df000000040000000a004e2400005db9000000000000000000000000000000010300000008"], 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x1) 11:39:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) statx(r1, &(0x7f0000000140)='./file0\x00', 0x2000, 0x80, &(0x7f0000000540)) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6) 11:39:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:49 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11:39:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) fcntl$setownex(r1, 0xf, &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xfffffeae) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x2, 'syz_tun\x00', {0x6}, 0x2}) setreuid(r5, r5) setresuid(r3, r4, r5) 11:39:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000440)="5fde0cc810fba9f0781679b68155a9c414211b293c90e994ca3ab6f6009d0be851da53c30477c45d4a89851a0083fc8bb88ff062785049ee8beebaea254478dd26eef022f0afe7822ad9bbf70b8b58e677d96737f932a3d651dd23647ee5ababda45be8eb46b77c5f196ac70ba3efd84df3ed20dc8c02e75f7a1b5d4bc79d9e12e979df2f3e5c5eaf61d07e3a0ef7226c848f29c0b223493a6952cc13d2048d0b982d256ac32d3af8c6713b76ec1703d921f48d8675220537eb0d292361188983bc9767d5d20a2dc462700599aa5da492722aa482e915affa26555408b61f4f4910a9ebee19597") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x503001, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7f, 0x100, 0xffff, 0x3, 0xf5f, 0x18000000000000}, {0x5, 0xfbbc, 0x38, 0xf774, 0xffffffff, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) chdir(&(0x7f0000000200)='./file1\x00') bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000000c0)="63ad0ea934e0855709d7c769ffb846181bc1f1e520429e7f1d00bb4b2450c25cbdf78a968e8aebd6620125dc96a21297a5bcf0f3ae335b51421712e1515159ac30bbc516e9ca7ba396a3a6a52402ace688103f06090f467da21ef701bb71b014b581e004aa279e7da17b3c412ceefeb23b06a5caa502d4df6af53f0db793603b138c29243f212bfbe7a3e25bd0631639c910bfb77790d1d3228a5b9db8ecd0e456b36112fc6ddc97f172a519b0b75dd7b1a4a6ee71dd80236df1b08e7eca249470142f46c3a9be4446bd039e56") [ 978.089375] loop4: detected capacity change from 0 to 13 11:39:49 executing program 6: read(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) [ 978.109207] FAT-fs (loop4): bogus number of reserved sectors [ 978.110544] FAT-fs (loop4): Can't find a valid FAT filesystem 11:39:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x438, 0x2, 0x3, 0x401, 0x70bd2b, 0x25dfdbfc, {0x4, 0x0, 0x2}, [@nested={0x194, 0x6d, 0x0, 0x1, [@generic="527148e6ccbbb80aa6", @generic="d126341de9a04174bae34292d432158052fcd60670164c304044946b9c4bc213f6df3c541106cd5a00a1", @typed={0x4, 0x3f}, @generic="20e03cac9a925e2d9ea9ec46c4394b72f9784f6d0a7815f192c0", @generic="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", @typed={0x5, 0x2c, 0x0, 0x0, @str='\x00'}, @generic="c8942f952f2672d9d22e378d854b7d4a007f7e86c1299604a6c73c2bb98f77f3b69e62a2ea20de16b0e665afb8c1e513cfd9082634e874ed8f939e8fe4"]}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x93, 0x7c, 0x0, 0x1, [@generic="211276442752d984fd55fe8af7e4fd30314408b61dd6d2c0f4a5df27bc21ca866b76f226e1b7c348053a1a6c69c8ba660f6fb556683fef5a54d3f3d361a1c8d9f6888e97e486e342f31634dc6170844e8c90d4f16e0cc8063225a99042631f93e6c2d6cd498f8700d41f9f21593cc314c14bdf6e7dd520fb2e28e15f8afbee01e6f38560cc091c", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r3}]}, @typed={0x8, 0x19, 0x0, 0x0, @uid=r4}, @nested={0xf5, 0x29, 0x0, 0x1, [@generic="731cdd61ed421636610f34864c94c01cbf38eda0bc66c7fb2078fc2d4f314801e9a36f6638cf0a84aeb3e55c2e9673d776ac462aef451e5dec6cd851c74306a7557d0dab932821620950130927671ff0e8323a0e992cc1b7f1e0a02772dd6b72a6128c13cd7ef323d6688fb19141bd54767ae14155aa3ba9defd359365ab26d0ad906bf04ea1f075a118a914fb738ed1d45ffa737e229cd3ad106ef7369cf0311cbb59f83577368ca9c033ba14843a8d24", @generic="4bc689e3273efb6504a43ff49d5dee61e6d5f1c938261089b6e25517815eae1ce57e8ef95f788c68d73cc5d3530db75b236a67d1b3b8", @generic="ddacfd4437706f94863c"]}, @generic="cf70ed0bbcfc79556f8e65821034577b21b92c5e14c86c5865393bec52eb72235de4583885930b354f8842ad4e4c1d7f582b620002afa3676675122f0f351fba3ca1200bb92f680459624f7e3329350fcea0ee4392827cc3d76603ab64f029c5cc53069dff02b13b7082041c4f305bd21f13811901bf080824ca04c7921912cf132b9897b6f9324be0a022a7bb308e2a278de1943b94ab42114cdcddb6ff14a39a2dc445f955d5837c1fa6c2ced1961d40cb7f9ee2684e8d5076ccb34e669661d0f1ca9b43474ec589b771b08679dd09de8b8a18cfd9e6289611f41582619800830d21cab9"]}, 0x438}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f7af9e750000"], 0x6) 11:39:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01154d021500"], 0x6) 11:39:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:39:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 11:39:49 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:39:49 executing program 6: read(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:39:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0xfffffdef) r2 = eventfd(0x401) pidfd_getfd(r1, r2, 0x0) eventfd2(0x9, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x100, 0x622001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = openat$incfs(r4, &(0x7f0000000100)='.pending_reads\x00', 0x442, 0x80) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRESOCT=r3], 0x94}}, 0x0) 11:39:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000005f1a7aec8529549b4a347d1e6e127f58f10431a16929a8eea0f0f59ecd151e1949ddd426ff9b0db3eadfb64bd72b1a35edbd2384b6675bb82bd300265f5d664cd985d4f09aa1aed192bc984d43865153a29c1d7395cd4ecd2c1ba23d3c83e8a42de30b29ee2916aa8d43eacc", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fff, 0x0, &(0x7f0000000540)="989b9e229cff28201c7ca6b066ab4dee59144fa13f1d9a165e045a816a2f93241b29fddd341263f2", 0x9, 0x0, 0x1, {0x3}}, 0x7af6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYBLOB="cc5df410a49f9ee48a6c81c418eee9873f6c11c78792158c2281acacf918750f152d298987208cbc982707a26fdead45ae55edfa6f616bc2ba2419b29c75faaea0dded13fda863bab7e647112331266be79b8872d326baec74f75a4a005b50c177050cb18ed3f90ecb67314a46d1425043266cdbc741f2c743b164c39c3086e39633e15dfc8896fd8dabf9245044aae2fa9b1fcf5b6c62d97cbdc500181624dc6f60d6acbdbdf34f70028fcaa4a929ff402a403565be3d6bc568cbe692981899e8a7e1ff6bd69f201e8c86b7ead36b78b25a09badc93", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r6, &(0x7f0000000000), 0xfffffdef) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x70, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xc880}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc0fee9188dc678b6}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250f000000600001800d0001007564703a730104000000f25c7a83b144b0000044000400200001000a004e230000008020010000000000000000000000000002df000000040000000a004e2400005db9000000000000000000000000000000010300000008"], 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x1) [ 978.382881] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 978.419767] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 11:40:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000000000), 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000005f1a7aec8529549b4a347d1e6e127f58f10431a16929a8eea0f0f59ecd151e1949ddd426ff9b0db3eadfb64bd72b1a35edbd2384b6675bb82bd300265f5d664cd985d4f09aa1aed192bc984d43865153a29c1d7395cd4ecd2c1ba23d3c83e8a42de30b29ee2916aa8d43eacc", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fff, 0x0, &(0x7f0000000540)="989b9e229cff28201c7ca6b066ab4dee59144fa13f1d9a165e045a816a2f93241b29fddd341263f2", 0x9, 0x0, 0x1, {0x3}}, 0x7af6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYBLOB="cc5df410a49f9ee48a6c81c418eee9873f6c11c78792158c2281acacf918750f152d298987208cbc982707a26fdead45ae55edfa6f616bc2ba2419b29c75faaea0dded13fda863bab7e647112331266be79b8872d326baec74f75a4a005b50c177050cb18ed3f90ecb67314a46d1425043266cdbc741f2c743b164c39c3086e39633e15dfc8896fd8dabf9245044aae2fa9b1fcf5b6c62d97cbdc500181624dc6f60d6acbdbdf34f70028fcaa4a929ff402a403565be3d6bc568cbe692981899e8a7e1ff6bd69f201e8c86b7ead36b78b25a09badc93", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="77003300a0800000080211000001080211000000505050505050"], 0x94}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r6, &(0x7f0000000000), 0xfffffdef) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x70, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xc880}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc0fee9188dc678b6}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250f000000600001800d0001007564703a730104000000f25c7a83b144b0000044000400200001000a004e230000008020010000000000000000000000000002df000000040000000a004e2400005db9000000000000000000000000000000010300000008"], 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x1) 11:40:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x6, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[], 0x20}], 0x1}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 11:40:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0115800c9580"], 0x6) 11:40:02 executing program 6: read(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:40:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xd6d}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0}, {0x0, 0x0, 0x7}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) 11:40:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000005c0)={0x6, [0xffff, 0xfffffffb], 0xf431}, 0x10) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f0000000e40)="be21ef882218aa3b7935d2505f6cfa32c1c162044bf1260dd7b4c88186af88e2f49cddf67cdbe679e45eec27b40317a2a582c9062a59bbdfeb97cb16b3efd80a96f07804ca1b7597443d704fcf8e6f6703537495fd2c17b86f4dd66ba0dceef400ce3573a67d34840cbe212c25e4f424074c61fc55a03daf8cfed85526bcc977886762524683ea48b54e6e4ead910acb275ca7af6b24e0282ba9ee5d463964b1db50552c81fc91d5dd06389fed5d0e9d8e5473ffceb2da400c5fe465cf80d22a652c6cc070736b24197667") openat(r1, &(0x7f0000000600)='./file0\x00', 0x12480, 0x8) setresuid(0x0, r3, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', 0x1f, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="fe604bf526d4229e9f6c06b3f2de475298149b834a8af039fcd697b133068865d7fe7318aa6aa3b1779e71db7bb474a46616fc8f55b3cc587c49c615284d9c15bff47ef4a9d004decdb00fa47489a1a9ce44cf9eb943ca6f220d4a410130ccddc48da37a1dc797110fa74ce2d12ef4d4c92393ee932cebb40765ab53d4903c321e619d3f2c5a4282f5e147e375806afcff3c44052399a243d50e7958fadd", 0x9e, 0x3}, {&(0x7f0000000200)="e922cd638b46c2dd74992151e74e9ebc5fecdf18bcd1cf7ca2b5c712294b5023423206c4eb7ded68829efc91c543a511777f82b6e38baf3753435e8e3f1cdce690cb549a5c975e4a7671b06f854de5fb3c50e3d71981f2e260350a15a0321c9ca7947db8", 0x64}, {&(0x7f0000000300)="8c5d2637f1dd83dfd13e57a4200bdf069da3cf4e6551b14d997dc690be35a30d6170739446b22957142adf0988a00afd2612ce9262794392745b98f19894e61056269ed46a615d95e2ddea6d5fcba75d", 0x50, 0x8}, {&(0x7f0000000380)="a15b49cba63a4782e3ae6c0bdb17816a15d171536238f5a557bd955229f92da421ee77fe556dd145d559bf9c100f83a64df1109350acf7f987b934b8bf488f06564f8caf8ee4670720fe50b71d41b6216a3197cb91a1b58d0d668e3fb2a456bc1a9e5b472ce7b075cad1aee68b2d84288f9de34d111d0da9ca5196b801", 0x7d, 0x7}], 0x2944000, &(0x7f0000000480)={[{@map_normal}, {@utf8}, {@dmode={'dmode', 0x3d, 0x10000}}], [{@uid_lt={'uid<', r3}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}, {@fowner_gt={'fowner>', r3}}, {@measure}, {@subj_user={'subj_user', 0x3d, '\\#['}}, {@measure}, {@euid_lt={'euid<', r3}}]}) openat(r4, &(0x7f0000000540)='./file0\x00', 0x200400, 0x120) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f0000000640)='./file0/file0\x00', 0x101, 0x9, &(0x7f0000000c80)=[{&(0x7f0000000680)="bf96895730f97dd3de900ac37f4aaf1bbc23e3932b6eed12e670071d71e5c6c3928809a907959cdc9a0c519b99a4e34aad5c82c3823e56a3d9f8851ff0f395aa2be769af0386a118745b6e4f02e57540a2d44b3d295300568114c1345d597b44efd613dcc76f772d91a41b4a7d9e0654b8f5613e9abf1c4653479b1e87314345fe705f7db074e38258fcd6025ad40e9eb6db362adcf8421297346667", 0x9c, 0x1ff}, {&(0x7f0000000740)="97d90ca22c6dd13b598cb1e82badbae340b7f711d1a2a2f73e84ba3450d00eca56b6cc687012480c934cd56e20aabf1f3d4c87222057f97c03a625bc881a3c2b68ad", 0x42, 0x8}, {&(0x7f00000007c0)="6e15d282aa6fd7421f38417fb45a72304008f94194f238b87de2564fed98a264dfb19265ed47ed8322760083b2f93b7e9f1dec02f93d53c77efd968cbef82d043672ba8b0fc3ddc054e56ca163a0274933c7b2b57d80133a5b9759fb62b6b7bb843760b9f4cf3d4239466e30760dab4a125df0189e1cec0fdf2edba9a35f17ab6b985298a164728071e13a572f46d6ce6eaaf52486d2a3d9aff2fd0fac49f155e7908d5c8c98800d8a52118f42eaa81ed42d22e2db3eda0f3725ce07a643f5e16c41f48accb9925eb1ffa636c67f2959be3eb4988650fa4303333e95fb3c86f2c68369437cf70c5172", 0xe9, 0xff}, {&(0x7f0000000f80)="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", 0xfc, 0xdf}, {&(0x7f00000009c0)="836eca38c5f3c9c02d6cefd4cb5e96960c3a7267a0ce37ad396829a8c420d839cc11feb39725f0afb022b854d0821a797704ba92afe56aaba55c9060140f30ecf16ad228633d9bb366cdca8ad734b0d13e3527c4a21708ec91994e9a4e20937f212055ee61ca420f332bc326b49eb93d51a568f8de936aca2a1e6ce874d6acc63df77bfdf4340ce9b9e4a0c065905db9ced814e2eba9bb31fea9eb31169b89723074f77752d17910ff9109d7b8535ddaf4197b", 0xb3, 0x1}, {&(0x7f0000000a80)="4ff4c9ad512d19121d81cbd085f9fb436c91d7834e39e657c0be60cc6cc649d15868942f248e8a8fe27b4f8fa0890b1572094062ddee54af070a77f4ba6cda139aebc69ad30857128cdba49bbae87afac00987662623a5d8555bc5217f62413af642e55ba1813f2a0f", 0x69, 0x401}, {&(0x7f0000000b00)="76ccc71b2fad7d3fa722f2aa410ed4b7fa074999a2d1c3f847486bbba6e85fc49eaa0b6d73e4305692a6ba93c0b83f2c4a6be51635071f1ac5257478d226c73a0b1fe7a574f877af515138ceee7a", 0x4e, 0xfffffffffffffffe}, {&(0x7f0000000b80)="6b22b5cf5586a39421ab75bed0d815ab2768c899d083fd7853635eefc2ff94bd0c0b40171b183310d5eb6d9c3fa620f91a39", 0x32, 0x6}, {&(0x7f0000000bc0)="69e7b15319d4d8258c1085dc0c6ecf9ca6ed357718680f0d0ff9c251b01cda52ad01f8b0c26d17b0048c4add928e04e8703f0e241ae6e4f5b1fc223b6914e53738a82329f233321e042bd4366267e970a6d9528d9cf2112ba7e31d83c3f9747749f50a96c35f2cd868d3bc2d0e826360f5f1663ae6515d8986a1f6a2af0962ad58880608cbb7a1d3d958af8985d34b9a185cbc898eb7d3803a2c5d1f8ccc", 0x9e, 0x6d0}], 0x40811, &(0x7f0000000d80)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x64, 0x19, 0x60, 0x31, 0x65, 0x65], 0x2d, [0x33, 0x1, 0x64, 0x36], 0x2d, [0x38, 0x30, 0x55, 0x30], 0x2d, [0x62, 0x66, 0x0, 0x65], 0x2d, [0x37, 0x37, 0x66, 0x66, 0x64, 0x38, 0x36, 0x35]}}}, {@fowner_lt={'fowner<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@fowner_gt={'fowner>', r6}}]}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011505020000"], 0x6) r7 = fcntl$dupfd(r2, 0x406, r4) bind$bt_hci(r7, &(0x7f0000000f40)={0x1f, 0x4}, 0x6) 11:40:02 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000}) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:40:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40840) timerfd_settime(r0, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) [ 991.374293] loop4: detected capacity change from 0 to 13 [ 991.405787] FAT-fs (loop4): bogus number of reserved sectors [ 991.406518] FAT-fs (loop4): Can't find a valid FAT filesystem 11:40:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011504020633"], 0x6) [ 991.461969] loop7: detected capacity change from 0 to 16383 11:40:03 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x410b1, 0xffffffffffffffff, 0x20000) 11:40:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="fb66325925ec2000000010000100000000000000a9000800000005"], 0x20}], 0x1}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="f204f30e8e36b130363b32ea09e98ed2567cf8075e638ad91f22a1d5f4abda87edb81886755d334eb0919bf1f6310581d04b3c4fc8eaf53171ccae9f8e6930884c90ce034900e397fc653518bb141138cee037f5b4cf84e07812771648741aef3367d40eeca891fb61eba5aaa8ea683cab32108e4734488f29a5c890e3dd15cec3001cdca6e3a4378c15643619ff7357510a1ee476150d806af4ed106598dd2db8dbe4e0a55d4ffbea10fa17a63abe8b4217471500c25793ff8cc9e6cf5322481c76a2daacef8fa08b4cc8fd66935ef0285a", 0xd2}, {&(0x7f0000000000)="a5516ead8156787a0d60f958d69edfd75a0b73fc26dfd56907afaced3612d4d0f50779b48c73041f162e6d2b0727260d2aa96e8045400aba0a2eb526eaed", 0x3e}], 0x2, 0x8) 11:40:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) mount_setattr(r3, &(0x7f00000000c0)='./file0\x00', 0x8800, &(0x7f0000000100)={0xf1, 0x100005, 0x40000, {r1}}, 0x20) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:40:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setresuid(0x0, r2, 0x0) getsockname(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r3, &(0x7f0000000300)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc8, 0x14}}}, 0x7) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000200)={r4, r5/1000+10000}, 0x10) 11:40:03 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x1, 0x8c, "ef4844a6b168214bed7e1e08e0d4a29d929f53f4355a4424d10c8cde9be68f6259c92a1685f23be18110f0bf3e55af03fa55548c3bca8860640153dca1b98022ab37327e763e5e327b9c8f54feae1604d33cc417984ecf59afd3a4346e64efc657fea267945645dcd3cacb5e22b13382a134424015ef6e94bc4c44e69b1e05e666235cc1c2dca6284b94ee82"}) 11:40:03 executing program 5: r0 = fork() r1 = fork() r2 = getpgid(r0) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x7}) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000100)={0x20, 0x80000000, 0x5e}) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000180)={0x20, 0x8a, 0x8}) ptrace$getsig(0x4202, r0, 0xfffffffffffff677, &(0x7f0000000200)) capset(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x6, 0x3, 0x1, 0x40, 0x50, 0x1}) process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/102, 0x66}], 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000001640), 0x100) fork() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$userns(r0, &(0x7f00000016c0)) r5 = getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:40:03 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003700)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) timerfd_gettime(r0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xee01}], {}, [{0x8, 0x6, 0xee01}]}, 0x34, 0x2) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) BUG: leak checking failed [ 993.692231] Bluetooth: hci0: command 0x0415 tx timeout VM DIAGNOSIS: 11:40:04 Registers: info registers vcpu 0 RAX=ffffffff84140000 RBX=ffffffff85032800 RCX=ffffffff841223e1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85007e40 R8 =0000000000000001 R9 =ffff88806ce38cd3 R10=ffffed100d9c719a R11=0000000000000001 R12=fffffbfff0a06500 R13=ffffffff858dbf90 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8414000b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556d00c98 CR3=0000000017906000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4145305c00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=1ffff11001dcdeea RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000002 RDI=ffff88800ffad9e4 RBP=0000000000000001 RSP=ffff88800ee6f740 R8 =0000000000000000 R9 =ffffffff858dbf97 R10=fffffbfff0b1b7f2 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff8880445f4018 R15=0000000000000000 RIP=ffffffff8128e49b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556cef400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020c05000 CR3=0000000017906000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 e3332673608b8a4b b445d7bd31492d9f YMM02=0000000000000000 0000000000000000 8b7c10415c2d43c1 70001c627ca8e0a7 YMM03=0000000000000000 0000000000000000 f0797d0d04033587 253bc3e911a4375f YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302 YMM07=0000000000000000 0000000000000000 0e0d0c0f0a09080b 0605040702010003 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000