)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:28:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:28:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x34000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:28:34 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x3, 0x7, 0x9a, 0x0, 0x8ae, 0x4808, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb8fc, 0x2, @perf_config_ext={0x1}, 0x10083, 0xd3f4, 0x7, 0x4, 0x2a, 0x3ee3, 0x5, 0x0, 0x20}, 0xffffffffffffffff, 0x8, r0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x3b, 0x0, &(0x7f0000000380)) 21:28:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x1) ftruncate(r0, 0x1000003) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x1, 0x64d}}, './file0\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r2, 0x0, 0x200f5ef, 0x0) 21:28:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:28:53 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:28:53 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x2, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:28:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x80000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:28:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:28:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="130000005a00015b"], 0x1c}}, 0x0) 21:28:53 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x103) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESHEX], 0xfdef) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x28000, 0x8) readv(r3, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f00000015c0)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x72, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() pidfd_open(r4, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f00000000c0)=""/183, &(0x7f0000000040)=0xb7) 21:28:53 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x428bc0, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x678, 0x2, 0x2a, &(0x7f0000000040)=""/42}) 21:28:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:28:54 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0xfffffffffffffffd, 0x0, &(0x7f0000000040)={r0, r1+10000000}, 0x0, 0x0) 21:28:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x400300, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:28:54 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000340)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000280)="000000000000000000000000e5ae81319b144b749b1668edf97c22c301004017a75f38e2d91573967772d5917ff215af3788a855502ec61adecfba103059421787e074e6602b45a983e34cbe139e13f6ccfa420d230393c994d593411048d99ad748626e28ffc3bb9c99dc4b15ed0c6e24dd3a948d0144f6e35a9ad8e4b7c8083c93e7fe34ba878bc27285e4fef7572655907bfd1a24bfabec283d9ca60fbbbb1dd78dbebb3122d13b5443bdaddb37e95a56353240d69a940a3132", 0xbb, 0x2000000004e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040080", 0x1d, 0x4100}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='dont_hash,fowner>', @ANYRESDEC=r0, @ANYBLOB="2c7065726d61745f64697265631aeb000000000000757365723d2bfa2c00"]) getdents64(r1, 0x0, 0x0) statx(r1, &(0x7f0000000180)='./file0\x00', 0x1000, 0x4, &(0x7f0000000440)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') getdents64(r1, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x2e3b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = dup2(r7, r6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x40a0}, 0x1, {0x0, r9}}, 0xa84) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x89, 0x0) 21:28:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) [ 1510.642369] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value 21:28:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:28:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:28:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) [ 1511.299329] EXT4-fs: failed to create workqueue [ 1511.300898] EXT4-fs (loop1): mount failed 21:29:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic="7ee20759"]}]}, 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r2, 0x8, 0x100000001}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x98a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0402, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 21:29:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r3, 0x1, 0x0, 0x800, 0x0, 0x1, {0x0, r5}}, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r7, r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r8, r6, 0x0, 0x7ffffff9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000005c0)) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 21:29:13 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xdf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002d00274e000000000000000000000000140000000000000000000000000000b22dd31f32419c72adfc00000000000a4412776c166b15075bccf6f59703db4a2bf753b19589e2b68582a7bfe0873f51dd7b702e6e3d98478a01d6b395708d75bfc39c557b96fec946881f2e1d5bf33f286cde21fc6af8ba148f8c03da08c9a6ba6e31f3c4d5a334b5b762b997dac29c79f8b5856a0463f9b5d8d9841c213466da5b"], 0x28}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048011}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="20002abd70000008df2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0xc800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) 21:29:13 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x3, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1529.804006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10087 comm=syz-executor.7 [ 1529.822998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 21:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1529.883568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10093 comm=syz-executor.7 21:29:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1529.919525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10093 comm=syz-executor.7 21:29:13 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1530.237815] Process accounting resumed [ 1530.301772] Process accounting resumed 21:29:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:32 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x40, 0x1, 0x1}) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000140)={0x6, 0x3e}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x279b3dfe, 0xff, 0x9, 0x0, 0xfffffffa, 0xfff}) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') 21:29:32 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:29:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x153}}, './file0\x00'}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be, 0x7}, r1, 0xd, r0, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x1, 0x8, 0x0, 0x1, 0x1000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x7fff}, 0x1, 0x8, 0x1, 0x16c4f9f6fa4bb0ab, 0x5, 0x4, 0x8, 0x0, 0x5, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r0, 0x8) unshare(0x48020200) 21:29:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:32 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:32 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x5, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1549.167066] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 21:29:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48010000100001000000000000000000ac1e00000000000000000000000000fe81609a2aeba32e8a000000000000aa0000ff0300000000000000006c00000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x148}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x12d002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = getpgid(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r4) r5 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="31ffffff100001000000000000000000ac1e0001800000000000000000000000fe8000000000000000000000000000aa00000000000000050000000039c59c699dbe762631252900000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES64], 0x148}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @mcast2, 0x2}, 0x1c) 21:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x1d, 0x200, 0x3, 0x0, {0x4, 0x0, 0x2}, [@typed={0x6, 0xb, 0x0, 0x0, @str='}\x00'}]}, 0x1c}}, 0x0) 21:29:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:29:33 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x5000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x203, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./file0/file1\x00') link(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)='./file0/file0\x00') unlink(&(0x7f0000000300)='./file0/file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) 21:29:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48010000100001000000000000000000ac1e00000000000000000000000000fe81609a2aeba32e8a000000000000aa0000ff0300000000000000006c00000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x148}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x12d002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = getpgid(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r4) r5 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="31ffffff100001000000000000000000ac1e0001800000000000000000000000fe8000000000000000000000000000aa00000000000000050000000039c59c699dbe762631252900000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES64], 0x148}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @mcast2, 0x2}, 0x1c) 21:29:52 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:29:52 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:52 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xb, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:29:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:29:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x6000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x7000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:29:52 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:29:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:29:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:29:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00') getdents64(r0, &(0x7f00000002c0)=""/196, 0xc4) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000400)="5f2c2627ff7f90a7a75d3d2123442638bf1510a34034e1f47b5d43e515fdbe2c1ba0e0bc448070b29017f227400478babea62ea863c1fcb95ba91af21e60bbe66f0ac0bc45a09c03f4e00e7623b03ded7aa69128c42e149d21d1eea9d5fc6b69e59017986c3b91d8cd3c", 0x6a, 0xfffffffffffffff9}, {&(0x7f0000000480)="c56e111c2910ce38a167206dd378b1eac7afb988548ddfdfb279491bb08a0976f30f54d728b1c1419a3d6a28f3ce8e3271b6d7a3bd2aca6185ef1ad2a14ea9534d70881671bb1d33e51e36f7d6518436877f849f2e4465abf511fb9077dcece34690cad84d805aeda62a2d5ec53031f81e91a5381d4c0d07ab3d40c2a0d1d1aefee60d3d12e13961a4ca9aa39bd94ae28f088f56a7ba26cc", 0x98, 0x800}, {&(0x7f0000000540)="1cd09fd261b5dc7e1f1520a13ff9c7cc08b4640515b1e8e228dc0700c916aedc94ce049c6719bf", 0x27, 0x1000}], 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='huge=advise,size=545-8,huge=advise,fowner=', @ANYRESDEC=r1, @ANYBLOB="64657569643d8ea1b286da427bf901fbfe8da0ada47da6e24d05af7a37fdcd6000834c32ce437e6147db85f1b0be63bc153b9a28c5ad29e6672c1629ec05aa0dd806a572f337f78d2d2c5db39acc157ed6b3fcb71177003bdf3a181b9dd3ce658d4fcf318aa0cf27c5b055ba7c4edc39e427dcd9090440e379cc80534d37fe415adfc08136a9ca47398526c63f9af2ec7f1af974c68bce0ae6828400b64bbbd8aef0b0b608487b26bda385", @ANYRESDEC, @ANYBLOB=',obj_role=*,defcontext=sysadm_u,fsmagic=0x000000000000004f,mask=^MAY_WRITE,subj_role=^,appraise,subj_role=,obj_user=tmpfs\x00,\x00']) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) getdents64(r2, &(0x7f0000000140)=""/95, 0x5f) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)={{0x0, 0xea60}, {r4, r5/1000+10000}}) 21:30:12 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f00000000000004", 0x1b, 0x2100}], 0x0, &(0x7f0000000180)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) 21:30:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:30:12 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:30:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:12 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:30:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x9000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:30:12 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001010000000000e20000000000007b828f25ec5b0000"], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000102e2f66ec64682145d32672f02d877770696c653000"]) unshare(0x10000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x48020200) socket$nl_generic(0x10, 0x3, 0x10) 21:30:12 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xc, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:30:12 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) [ 1588.625145] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1588.626730] EXT4-fs (loop3): mount failed 21:30:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xf000000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1588.649210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:30:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) [ 1588.683508] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1588.684371] EXT4-fs (loop3): mount failed 21:30:12 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:30:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:30:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:30:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r0 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x6f, 0x7, 0x5, 0x20, 0x0, 0xfc, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4710, 0x3, @perf_bp={&(0x7f00000000c0), 0x3}, 0x120e, 0x6, 0xa72b, 0x8, 0x3, 0x2, 0x4, 0x0, 0x7}, r0, 0xf, r1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='/usr/sbin/cups-browsed\x00', 0x17, 0x1) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x4) r5 = dup3(r3, r4, 0x80000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x90, 0xae, 0x20, 0x8, 0x0, 0x3, 0x568cabbaf6f2c99e, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1000, 0xa25f, 0x10001, 0x6, 0x80000000, 0x3, 0xf, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r5, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1589.048265] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 1589.052152] audit: type=1400 audit(1673904612.627:121): avc: denied { associate } for pid=10269 comm="syz-executor.3" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="/usr/sbin/cups-browsed" [ 1589.233859] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:30:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:30:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_dev$loop(&(0x7f00000004c0), 0x100000000, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x100000000, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount(&(0x7f0000000180)=@filename='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x880, &(0x7f0000000200)='mounts\x00') lseek(r0, 0x0, 0x0) 21:30:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xb6010000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:30:31 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:30:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000280)={0x200000}) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x7, 0x0, 0x4, 0x0, 0x4, 0x2a098, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff800, 0x1, @perf_bp={0xfffffffffffffffd}, 0x18a40, 0xaf7, 0x9, 0x1, 0x7ff, 0x2, 0x5, 0x0, 0x7fffffff, 0x0, 0x800}, r0, 0xc, r1, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x10000) io_setup(0x3e7, &(0x7f0000000580)) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb570001b10c0fff8c66d4c31e4a09c79621b73accb8ce9dd850cbc79a18b92c641e06fe2b40118534e8522e7fdc8873fc85f629005e492794cbc67ae410684445229706c57956f024038bd70b007d70668e038d3b9c8aec60454b6036952ede6bd06a19afd1406eae563ddaa545d1421a5668937931cc5d391162252a3e27f62843978c12bc96918a229cf9fcc29be4491a5cd6976c259050c6295eb14e70346eb55142b0fecc9111779614e76b7b348f89e2a36d50c6971aa35e59ab8c4e3fdf4c40887649970a0851487904a078720034d943a46a73cbd8ec588e7be2a46c05dc55df14d8429a7f92a49b3b401567b4e4a8c73daaf8"], 0x57, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1607.928315] devtmpfs: Unknown parameter 'mounts' 21:30:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1607.988419] devtmpfs: Unknown parameter 'mounts' [ 1608.032298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:30:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xf0ffffff, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:30:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:30:31 executing program 3: fallocate(0xffffffffffffffff, 0x12, 0x524d, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f0000001700)=[{&(0x7f0000000400)="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", 0x1000, 0x2}, {&(0x7f0000000340)="a69a7951bd5380f646bf1e41466fbd0e86e86189689c83ae74e1414425d33b46ba377328056f82ae41b3f52ccd561d3713093910ffe57bb7d693e001f5e51cbd8534e5bf66706695a1be9cb771a6d9ab3d9a3cfee02145c849246e9401391f1487f1dff8f49d54c91a1f69f7dcd5a21ce0", 0x71, 0x6}, {&(0x7f0000001400)="be959fb6b572f725efc5affb320b7c7472929010c2e03b19cef2026b552c1a8e945b203b068bf475c236e29633310673ed38bd5af3c9c683ba8144c1dd25b7b2d896de316176721a9a59bbd2b63468f62e8e7c24ecef3f6bb0fbed349a90ef29a256341fd4965b2f4beb2ed13432adafb48be3828d03ce2d887b33ab8d55c3f322e4eb55b6ba663fe9f5f53b3022a61fd87406f8da3c5b1d0407de352376e75e73f2f60cdc22e871431b7973d0fbc0e2d5656197e32cd6ccaf1574cdcf9576b93808", 0xc2, 0xd88}, {&(0x7f0000001500)="793b5d8fe5be79c3738b24d082fc65cec935fe6ac0bce9d30982fe7b04a0eca215548cef46f120c717005be9e6d651214f9a68d213895a1657bcecf877e7503699aa6019935c1a543085e12583965aadecca101407d34d69442c939835f517343dbc7764d8d939a1f1caaab20b73c76597704f45631e7ff0fd52323778203f2955f706cf470309e99b549a4f30922a3b59a9beadf37502a0c0f7de360309872875118b974ccf2a51e23ab07c3c4da5a692dab34ef29fa8f39a85666462e8661c96b396c8d9eb0da2ee75fed92baf1ef2e01cfc0a487e976bccbc4fd330c9", 0xde, 0x1ff}, {&(0x7f0000001600)="f2aea3420fdbd7faea4afda620444551484d96b150ee565dc1dc574cb55a0f9063e7a7d8cf2448ec70a171ab0449201ced3deefdca6afc4e2221492b4429dffd3042c79185646629543e980200d18835459b524616215afe5791d148aa8508b5286d74f40002b1f74f1c1461", 0x6c, 0x3}, {&(0x7f0000001680)="43675a6856c11e5360b2d2a48abf0f1ed7d03372f4f8568385c188466e3adb11df31a4eb6cbb02ec3a6965cc155cc69f6f12f65a8c8073b0bac565e7b9bf5c92798915df8e5c47d61d314084", 0x4c, 0x4}], 0x4000, &(0x7f00000017c0)={[{@nonumtail}, {@utf8no}, {@rodir}, {@uni_xlate}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@context={'context', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@permit_directio}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{&(0x7f00000001c0)="2b99c4a3835a0b2800ce1efde2a8f0e1eb27", 0x12, 0xffffffff}, {&(0x7f0000001880)="a82f1cf8ac5aac27c8", 0x9, 0x9}, {&(0x7f00000018c0)="02ea179f4a6f994565471e4ee6c1c419841d92489083785018f729980c01d24931", 0x21, 0xa2cd}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000300)='./file0\x00', 0xc101, 0x100) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 21:30:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1608.261228] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1608.283189] audit: type=1400 audit(1673904631.860:122): avc: denied { associate } for pid=10300 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1609.103905] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 1609.156547] FAT-fs (loop3): invalid media value (0x00) [ 1609.157371] FAT-fs (loop3): Can't find a valid FAT filesystem 21:30:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xfffff000, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:30:50 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:30:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:30:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x200, 0x100000001) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x101081, 0x43) r4 = fsmount(r3, 0x0, 0x4) ioctl$CDROMCLOSETRAY(r4, 0x5319) 21:30:50 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xe, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:30:50 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:30:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:50 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:30:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:30:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xffffff7f, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1626.938094] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:31:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:10 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xf, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:10 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:10 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:31:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0x7}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x311580) 21:31:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xfffffff0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0xffffffff, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1647.326117] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:31:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x10, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:11 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:11 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1648.032826] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:31:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:30 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:30 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:30 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:30 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1666.911204] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:31:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:30 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1667.118012] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1667.338031] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:31:49 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x12, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:49 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:31:49 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:31:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2000041c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:31:49 executing program 3: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:31:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:31:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1686.102894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:31:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:31:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:31:49 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1686.465826] perf: interrupt took too long (2547 > 2500), lowering kernel.perf_event_max_sample_rate to 78000 [ 1686.634219] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:32:06 executing program 3: semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:06 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x13, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:06 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:06 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:06 executing program 3: semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1703.338798] perf: interrupt took too long (3241 > 3183), lowering kernel.perf_event_max_sample_rate to 61000 21:32:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:32:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:07 executing program 3: semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1703.514454] perf: interrupt took too long (4076 > 4051), lowering kernel.perf_event_max_sample_rate to 49000 [ 1703.580896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1703.606745] perf: interrupt took too long (5129 > 5095), lowering kernel.perf_event_max_sample_rate to 38000 21:32:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:25 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x14, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:32:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1721.846251] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x13, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:32:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1722.069848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:32:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:42 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:42 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x69, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:42 executing program 3: semop(0x0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:42 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:32:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1739.212272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:32:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:42 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1739.506382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:32:59 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0xfeffffff}}) 21:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:59 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:32:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:32:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:59 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:32:59 executing program 3: semop(0x0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:32:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:32:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:32:59 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:32:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:32:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1756.241509] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:33:16 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0xfffffffe}}) 21:33:16 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:33:16 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:16 executing program 3: semop(0x0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:33:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:33:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:16 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:33:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:33:16 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:33:16 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1773.142976] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:33:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:33:33 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:33 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0xfeffffff}) 21:33:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:33 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:33:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:33:33 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:33:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:33 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:33:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 1) [ 1790.091180] FAULT_INJECTION: forcing a failure. [ 1790.091180] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.093763] CPU: 1 PID: 10838 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1790.094530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.095427] Call Trace: [ 1790.095721] dump_stack+0x107/0x167 [ 1790.096120] should_fail.cold+0x5/0xa [ 1790.096552] ? hci_sock_sendmsg+0x8f6/0x2090 [ 1790.097037] should_failslab+0x5/0x20 [ 1790.097462] __kmalloc+0x72/0x3f0 [ 1790.097838] ? __local_bh_enable_ip+0x9d/0x100 [ 1790.098340] hci_sock_sendmsg+0x8f6/0x2090 [ 1790.098803] ? hci_sock_compat_ioctl+0x80/0x80 [ 1790.099303] ? hci_sock_compat_ioctl+0x80/0x80 [ 1790.099797] sock_sendmsg+0x154/0x190 [ 1790.100218] sock_write_iter+0x291/0x3d0 [ 1790.100664] ? sock_sendmsg+0x190/0x190 [ 1790.101106] ? perf_trace_lock+0xac/0x490 [ 1790.101572] ? inode_has_perm+0x171/0x1d0 [ 1790.102039] new_sync_write+0x42c/0x660 [ 1790.102472] ? new_sync_read+0x6f0/0x6f0 [ 1790.102913] ? _cond_resched+0x12/0x80 [ 1790.103340] ? selinux_file_permission+0x36/0x510 [ 1790.103872] ? __fget_files+0x296/0x480 [ 1790.104311] vfs_write+0x747/0xa30 [ 1790.104700] ksys_write+0x1f6/0x260 [ 1790.105095] ? __ia32_sys_read+0xb0/0xb0 [ 1790.105564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1790.106154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1790.106721] do_syscall_64+0x33/0x40 [ 1790.107135] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1790.107710] RIP: 0033:0x7f7085901b19 [ 1790.108117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.110171] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1790.111018] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1790.111812] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1790.112601] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.113454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.114258] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:33:33 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) [ 1790.142139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:33:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:33 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:33:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:33:49 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0xfffffffe}) 21:33:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:33:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 2) 21:33:49 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:49 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, 0x0) 21:33:49 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1806.108894] FAULT_INJECTION: forcing a failure. [ 1806.108894] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.110641] CPU: 1 PID: 10873 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1806.111773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.113127] Call Trace: [ 1806.113578] dump_stack+0x107/0x167 [ 1806.114178] should_fail.cold+0x5/0xa [ 1806.114812] ? create_object.isra.0+0x3a/0xa20 [ 1806.115566] should_failslab+0x5/0x20 [ 1806.116194] kmem_cache_alloc+0x5b/0x360 [ 1806.116851] ? lock_downgrade+0x6d0/0x6d0 [ 1806.117548] create_object.isra.0+0x3a/0xa20 [ 1806.118272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1806.119109] __kmalloc+0x16e/0x3f0 [ 1806.119702] hci_sock_sendmsg+0x8f6/0x2090 [ 1806.120396] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.121156] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.121926] sock_sendmsg+0x154/0x190 [ 1806.122546] sock_write_iter+0x291/0x3d0 [ 1806.123213] ? sock_sendmsg+0x190/0x190 [ 1806.123861] ? __switch_to+0x572/0xff0 [ 1806.124506] ? inode_has_perm+0x171/0x1d0 [ 1806.125195] new_sync_write+0x42c/0x660 [ 1806.125862] ? new_sync_read+0x6f0/0x6f0 [ 1806.126527] ? _cond_resched+0x5d/0x80 [ 1806.127176] ? selinux_file_permission+0x36/0x510 [ 1806.127974] ? __fget_files+0x296/0x480 [ 1806.128633] vfs_write+0x747/0xa30 [ 1806.129220] ksys_write+0x1f6/0x260 [ 1806.129842] ? __ia32_sys_read+0xb0/0xb0 [ 1806.130511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.131362] do_syscall_64+0x33/0x40 [ 1806.131969] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1806.132809] RIP: 0033:0x7f7085901b19 [ 1806.133417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.136406] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1806.137417] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1806.138368] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1806.139305] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.140246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.141181] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:33:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:33:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:33:49 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:49 executing program 0: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1806.230157] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:33:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, 0x0, 0x6) 21:33:49 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:33:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 3) [ 1806.328488] FAULT_INJECTION: forcing a failure. [ 1806.328488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1806.329832] CPU: 1 PID: 10895 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1806.330524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.331351] Call Trace: [ 1806.331625] dump_stack+0x107/0x167 [ 1806.331997] should_fail.cold+0x5/0xa [ 1806.332388] _copy_from_iter_full+0x201/0xa60 [ 1806.332848] ? __virt_addr_valid+0x128/0x350 [ 1806.333295] ? __check_object_size+0x319/0x440 [ 1806.333769] hci_sock_sendmsg+0x92c/0x2090 [ 1806.334201] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.334672] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.335134] sock_sendmsg+0x154/0x190 [ 1806.335518] sock_write_iter+0x291/0x3d0 [ 1806.335964] ? sock_sendmsg+0x190/0x190 [ 1806.336406] ? perf_trace_lock+0xac/0x490 [ 1806.336870] ? inode_has_perm+0x171/0x1d0 [ 1806.337296] new_sync_write+0x42c/0x660 [ 1806.337740] ? new_sync_read+0x6f0/0x6f0 [ 1806.338187] ? _cond_resched+0x12/0x80 [ 1806.338613] ? selinux_file_permission+0x36/0x510 [ 1806.339152] ? __fget_files+0x296/0x480 [ 1806.339597] vfs_write+0x747/0xa30 [ 1806.339986] ksys_write+0x1f6/0x260 [ 1806.340383] ? __ia32_sys_read+0xb0/0xb0 [ 1806.340829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.341401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.341968] do_syscall_64+0x33/0x40 [ 1806.342378] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1806.342930] RIP: 0033:0x7f7085901b19 [ 1806.343334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.345303] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1806.346135] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1806.346905] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1806.347661] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.348416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.349169] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:33:49 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:33:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 1) 21:33:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1806.427989] FAULT_INJECTION: forcing a failure. [ 1806.427989] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.429278] CPU: 1 PID: 10902 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1806.430043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.430886] Call Trace: [ 1806.431178] dump_stack+0x107/0x167 [ 1806.431581] should_fail.cold+0x5/0xa [ 1806.432000] ? hci_sock_sendmsg+0x8f6/0x2090 [ 1806.432479] should_failslab+0x5/0x20 [ 1806.432897] __kmalloc+0x72/0x3f0 [ 1806.433276] ? __local_bh_enable_ip+0x9d/0x100 [ 1806.433795] hci_sock_sendmsg+0x8f6/0x2090 [ 1806.434242] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.434747] ? hci_sock_compat_ioctl+0x80/0x80 [ 1806.435207] sock_sendmsg+0x154/0x190 [ 1806.435633] sock_write_iter+0x291/0x3d0 [ 1806.436070] ? sock_sendmsg+0x190/0x190 [ 1806.436499] ? perf_trace_lock+0xac/0x490 [ 1806.436953] ? inode_has_perm+0x171/0x1d0 [ 1806.437410] new_sync_write+0x42c/0x660 [ 1806.437854] ? new_sync_read+0x6f0/0x6f0 [ 1806.438294] ? _cond_resched+0x12/0x80 [ 1806.438720] ? selinux_file_permission+0x36/0x510 [ 1806.439246] ? __fget_files+0x296/0x480 [ 1806.439662] vfs_write+0x747/0xa30 [ 1806.440052] ksys_write+0x1f6/0x260 [ 1806.440445] ? __ia32_sys_read+0xb0/0xb0 [ 1806.440885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.441448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.442025] do_syscall_64+0x33/0x40 [ 1806.442428] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1806.442980] RIP: 0033:0x7f808a7d9b19 [ 1806.443383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.445371] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1806.446149] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1806.446945] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1806.447718] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.448486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.449257] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1806.473126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:34:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 4) 21:34:07 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, 0x0) 21:34:07 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0xfeffffff00000000}) 21:34:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x1b6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:34:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 2) 21:34:07 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:07 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) [ 1823.642957] FAULT_INJECTION: forcing a failure. [ 1823.642957] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.645396] CPU: 0 PID: 10927 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1823.646817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.648503] Call Trace: [ 1823.649051] dump_stack+0x107/0x167 [ 1823.649810] should_fail.cold+0x5/0xa [ 1823.650591] ? create_object.isra.0+0x3a/0xa20 [ 1823.651523] should_failslab+0x5/0x20 [ 1823.652296] kmem_cache_alloc+0x5b/0x360 [ 1823.653135] ? lock_downgrade+0x6d0/0x6d0 [ 1823.654013] create_object.isra.0+0x3a/0xa20 [ 1823.654914] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.655965] __kmalloc+0x16e/0x3f0 [ 1823.656709] hci_sock_sendmsg+0x8f6/0x2090 [ 1823.657590] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.658562] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.659501] sock_sendmsg+0x154/0x190 [ 1823.660281] sock_write_iter+0x291/0x3d0 [ 1823.661114] ? sock_sendmsg+0x190/0x190 [ 1823.661942] ? perf_trace_lock+0xac/0x490 [ 1823.662812] ? inode_has_perm+0x171/0x1d0 [ 1823.663677] new_sync_write+0x42c/0x660 [ 1823.664494] ? new_sync_read+0x6f0/0x6f0 [ 1823.665328] ? _cond_resched+0x12/0x80 [ 1823.666142] ? selinux_file_permission+0x36/0x510 [ 1823.667135] ? __fget_files+0x296/0x480 [ 1823.667964] vfs_write+0x747/0xa30 [ 1823.668707] ksys_write+0x1f6/0x260 [ 1823.669460] ? __ia32_sys_read+0xb0/0xb0 [ 1823.670310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.671387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.672448] do_syscall_64+0x33/0x40 [ 1823.673217] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1823.674279] RIP: 0033:0x7f808a7d9b19 [ 1823.675046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.678824] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1823.680390] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1823.681840] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1823.683283] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.684725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.686204] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:34:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:34:07 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1823.726464] FAULT_INJECTION: forcing a failure. [ 1823.726464] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.729506] CPU: 1 PID: 10933 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1823.730948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.732680] Call Trace: [ 1823.733247] dump_stack+0x107/0x167 [ 1823.734033] should_fail.cold+0x5/0xa [ 1823.734880] ? __alloc_skb+0x6d/0x5b0 [ 1823.735697] should_failslab+0x5/0x20 [ 1823.736522] kmem_cache_alloc_node+0x55/0x370 [ 1823.737464] ? _copy_from_iter_full+0x27c/0xa60 [ 1823.738457] __alloc_skb+0x6d/0x5b0 [ 1823.739259] hci_sock_sendmsg+0x1714/0x2090 [ 1823.740167] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.741138] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.742106] sock_sendmsg+0x154/0x190 [ 1823.742881] sock_write_iter+0x291/0x3d0 [ 1823.743707] ? sock_sendmsg+0x190/0x190 [ 1823.744561] ? perf_trace_lock+0xac/0x490 [ 1823.745438] ? inode_has_perm+0x171/0x1d0 [ 1823.746313] new_sync_write+0x42c/0x660 [ 1823.747125] ? new_sync_read+0x6f0/0x6f0 [ 1823.747956] ? _cond_resched+0x12/0x80 [ 1823.748795] ? selinux_file_permission+0x36/0x510 [ 1823.749806] ? __fget_files+0x296/0x480 [ 1823.750659] vfs_write+0x747/0xa30 [ 1823.751400] ksys_write+0x1f6/0x260 [ 1823.752143] ? __ia32_sys_read+0xb0/0xb0 [ 1823.752977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.754063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.755151] do_syscall_64+0x33/0x40 [ 1823.755905] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1823.756948] RIP: 0033:0x7f7085901b19 [ 1823.757701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.761465] RSP: 002b:00007f7082e56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1823.763061] RAX: ffffffffffffffda RBX: 00007f7085a15020 RCX: 00007f7085901b19 [ 1823.764496] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1823.765951] RBP: 00007f7082e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.767424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.768869] R13: 00007ffed378526f R14: 00007f7082e56300 R15: 0000000000022000 21:34:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 3) 21:34:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) [ 1823.881123] FAULT_INJECTION: forcing a failure. [ 1823.881123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.883617] CPU: 1 PID: 10943 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1823.884985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.886643] Call Trace: [ 1823.887180] dump_stack+0x107/0x167 [ 1823.887910] should_fail.cold+0x5/0xa [ 1823.888683] _copy_from_iter_full+0x201/0xa60 [ 1823.889566] ? __virt_addr_valid+0x128/0x350 [ 1823.890431] ? __check_object_size+0x319/0x440 [ 1823.891330] hci_sock_sendmsg+0x92c/0x2090 [ 1823.892165] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.893076] ? hci_sock_compat_ioctl+0x80/0x80 [ 1823.893977] sock_sendmsg+0x154/0x190 [ 1823.894719] sock_write_iter+0x291/0x3d0 [ 1823.895509] ? sock_sendmsg+0x190/0x190 [ 1823.896289] ? perf_trace_lock+0xac/0x490 [ 1823.897125] ? inode_has_perm+0x171/0x1d0 [ 1823.897976] new_sync_write+0x42c/0x660 [ 1823.898755] ? new_sync_read+0x6f0/0x6f0 [ 1823.899554] ? _cond_resched+0x12/0x80 [ 1823.900324] ? selinux_file_permission+0x36/0x510 [ 1823.901281] ? __fget_files+0x296/0x480 [ 1823.902077] vfs_write+0x747/0xa30 [ 1823.902794] ksys_write+0x1f6/0x260 [ 1823.903510] ? __ia32_sys_read+0xb0/0xb0 [ 1823.904317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.905341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.906543] do_syscall_64+0x33/0x40 [ 1823.907359] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1823.908393] RIP: 0033:0x7f808a7d9b19 [ 1823.909119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.913558] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1823.915109] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1823.916493] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1823.917878] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.919262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.920645] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1823.956793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:34:07 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:34:25 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0xffffffff00000000}) 21:34:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, 0x0) 21:34:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 5) 21:34:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:34:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:34:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 4) [ 1841.587946] FAULT_INJECTION: forcing a failure. [ 1841.587946] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.590315] CPU: 0 PID: 10961 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1841.591706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.593352] Call Trace: [ 1841.593885] dump_stack+0x107/0x167 [ 1841.594648] should_fail.cold+0x5/0xa [ 1841.595410] ? create_object.isra.0+0x3a/0xa20 [ 1841.596354] should_failslab+0x5/0x20 [ 1841.597147] kmem_cache_alloc+0x5b/0x360 [ 1841.598008] create_object.isra.0+0x3a/0xa20 [ 1841.598917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1841.599969] kmem_cache_alloc_node+0x169/0x370 [ 1841.600921] ? _copy_from_iter_full+0x27c/0xa60 [ 1841.601885] __alloc_skb+0x6d/0x5b0 [ 1841.602672] hci_sock_sendmsg+0x1714/0x2090 [ 1841.603576] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.604528] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.605478] sock_sendmsg+0x154/0x190 [ 1841.606269] sock_write_iter+0x291/0x3d0 [ 1841.607103] ? sock_sendmsg+0x190/0x190 [ 1841.607921] ? perf_trace_lock+0xac/0x490 [ 1841.608803] ? inode_has_perm+0x171/0x1d0 [ 1841.609650] new_sync_write+0x42c/0x660 [ 1841.610458] ? new_sync_read+0x6f0/0x6f0 [ 1841.611277] ? _cond_resched+0x12/0x80 [ 1841.612080] ? selinux_file_permission+0x36/0x510 [ 1841.613064] ? __fget_files+0x296/0x480 [ 1841.613875] vfs_write+0x747/0xa30 [ 1841.614634] ksys_write+0x1f6/0x260 [ 1841.615366] ? __ia32_sys_read+0xb0/0xb0 [ 1841.616182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1841.617228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.618295] do_syscall_64+0x33/0x40 [ 1841.619047] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1841.620079] RIP: 0033:0x7f7085901b19 [ 1841.620823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.624541] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1841.626090] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1841.627512] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1841.628940] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.630369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.631790] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1841.648886] FAULT_INJECTION: forcing a failure. [ 1841.648886] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.651208] CPU: 0 PID: 10978 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1841.652565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.654248] Call Trace: [ 1841.654788] dump_stack+0x107/0x167 [ 1841.655558] should_fail.cold+0x5/0xa [ 1841.656378] ? __alloc_skb+0x6d/0x5b0 [ 1841.657187] should_failslab+0x5/0x20 [ 1841.657975] kmem_cache_alloc_node+0x55/0x370 [ 1841.658884] ? _copy_from_iter_full+0x27c/0xa60 [ 1841.659823] __alloc_skb+0x6d/0x5b0 [ 1841.660586] hci_sock_sendmsg+0x1714/0x2090 [ 1841.661473] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.662413] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.663336] sock_sendmsg+0x154/0x190 [ 1841.664110] sock_write_iter+0x291/0x3d0 [ 1841.664932] ? sock_sendmsg+0x190/0x190 [ 1841.665744] ? perf_trace_lock+0xac/0x490 [ 1841.666621] ? inode_has_perm+0x171/0x1d0 [ 1841.667472] new_sync_write+0x42c/0x660 [ 1841.668285] ? new_sync_read+0x6f0/0x6f0 [ 1841.669108] ? _cond_resched+0x12/0x80 [ 1841.669915] ? selinux_file_permission+0x36/0x510 [ 1841.670913] ? __fget_files+0x296/0x480 [ 1841.671733] vfs_write+0x747/0xa30 [ 1841.672457] ksys_write+0x1f6/0x260 [ 1841.673196] ? __ia32_sys_read+0xb0/0xb0 [ 1841.674045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1841.675086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.676134] do_syscall_64+0x33/0x40 [ 1841.676889] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1841.677919] RIP: 0033:0x7f808a7d9b19 [ 1841.678677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.682373] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1841.683926] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1841.685371] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1841.686866] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.688305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.689792] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:34:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:34:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:34:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 6) 21:34:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 5) [ 1841.900994] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:34:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x900, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1841.970853] FAULT_INJECTION: forcing a failure. [ 1841.970853] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.973534] CPU: 1 PID: 10992 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1841.975035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.976822] Call Trace: [ 1841.977532] dump_stack+0x107/0x167 [ 1841.978345] should_fail.cold+0x5/0xa [ 1841.979186] should_failslab+0x5/0x20 [ 1841.980039] __kmalloc_node_track_caller+0x74/0x3f0 [ 1841.981133] ? hci_sock_sendmsg+0x1714/0x2090 [ 1841.982142] ? _copy_from_iter_full+0x27c/0xa60 [ 1841.983179] __alloc_skb+0xb1/0x5b0 [ 1841.983993] hci_sock_sendmsg+0x1714/0x2090 [ 1841.984960] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.986004] ? hci_sock_compat_ioctl+0x80/0x80 [ 1841.987014] sock_sendmsg+0x154/0x190 [ 1841.987860] sock_write_iter+0x291/0x3d0 [ 1841.988941] ? sock_sendmsg+0x190/0x190 [ 1841.989828] ? perf_trace_lock+0xac/0x490 [ 1841.990961] ? inode_has_perm+0x171/0x1d0 [ 1841.991906] new_sync_write+0x42c/0x660 [ 1841.992955] ? new_sync_read+0x6f0/0x6f0 [ 1841.993856] ? _cond_resched+0x12/0x80 [ 1841.994907] ? selinux_file_permission+0x36/0x510 [ 1841.995980] ? __fget_files+0x296/0x480 [ 1841.996979] vfs_write+0x747/0xa30 [ 1841.997767] ksys_write+0x1f6/0x260 [ 1841.998573] ? __ia32_sys_read+0xb0/0xb0 [ 1841.999465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1842.000616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1842.001746] do_syscall_64+0x33/0x40 [ 1842.002589] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1842.003714] RIP: 0033:0x7f7085901b19 [ 1842.004536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1842.008568] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1842.010251] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1842.011823] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1842.013392] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1842.014988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.016559] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1842.025331] FAULT_INJECTION: forcing a failure. [ 1842.025331] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.027914] CPU: 1 PID: 10997 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1842.029413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1842.031265] Call Trace: [ 1842.031851] dump_stack+0x107/0x167 [ 1842.032665] should_fail.cold+0x5/0xa [ 1842.033511] ? create_object.isra.0+0x3a/0xa20 [ 1842.034548] should_failslab+0x5/0x20 21:34:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1842.035391] kmem_cache_alloc+0x5b/0x360 [ 1842.036526] create_object.isra.0+0x3a/0xa20 [ 1842.037503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1842.038642] kmem_cache_alloc_node+0x169/0x370 [ 1842.039658] ? _copy_from_iter_full+0x27c/0xa60 [ 1842.040697] __alloc_skb+0x6d/0x5b0 [ 1842.041511] hci_sock_sendmsg+0x1714/0x2090 [ 1842.042499] ? hci_sock_compat_ioctl+0x80/0x80 [ 1842.043524] ? hci_sock_compat_ioctl+0x80/0x80 [ 1842.044538] sock_sendmsg+0x154/0x190 [ 1842.045390] sock_write_iter+0x291/0x3d0 [ 1842.046295] ? sock_sendmsg+0x190/0x190 [ 1842.047166] ? perf_trace_lock+0xac/0x490 [ 1842.048107] ? inode_has_perm+0x171/0x1d0 [ 1842.049038] new_sync_write+0x42c/0x660 [ 1842.049913] ? new_sync_read+0x6f0/0x6f0 [ 1842.050822] ? _cond_resched+0x12/0x80 [ 1842.051671] ? selinux_file_permission+0x36/0x510 [ 1842.052753] ? __fget_files+0x296/0x480 [ 1842.053630] vfs_write+0x747/0xa30 [ 1842.054451] ksys_write+0x1f6/0x260 [ 1842.055238] ? __ia32_sys_read+0xb0/0xb0 [ 1842.056144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1842.057314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1842.058466] do_syscall_64+0x33/0x40 [ 1842.059293] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1842.060433] RIP: 0033:0x7f808a7d9b19 [ 1842.061253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1842.065331] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1842.067025] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1842.068594] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1842.070181] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1842.071742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.073308] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1842.240512] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:34:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 7) 21:34:45 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:34:45 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0xfeffffff}) 21:34:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 6) 21:34:45 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:45 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:45 executing program 3: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1861.501012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1861.515042] FAULT_INJECTION: forcing a failure. [ 1861.515042] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.516849] CPU: 0 PID: 11026 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1861.517846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.519053] Call Trace: [ 1861.519455] dump_stack+0x107/0x167 [ 1861.520001] should_fail.cold+0x5/0xa [ 1861.520552] ? create_object.isra.0+0x3a/0xa20 [ 1861.521222] should_failslab+0x5/0x20 [ 1861.521785] kmem_cache_alloc+0x5b/0x360 [ 1861.522411] create_object.isra.0+0x3a/0xa20 [ 1861.523044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1861.523794] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1861.524525] ? hci_sock_sendmsg+0x1714/0x2090 [ 1861.525202] __alloc_skb+0xb1/0x5b0 [ 1861.525738] hci_sock_sendmsg+0x1714/0x2090 [ 1861.526458] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.527200] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.527889] sock_sendmsg+0x154/0x190 [ 1861.528454] sock_write_iter+0x291/0x3d0 [ 1861.529066] ? sock_sendmsg+0x190/0x190 [ 1861.529646] ? perf_trace_lock+0xac/0x490 [ 1861.530297] ? inode_has_perm+0x171/0x1d0 [ 1861.530908] new_sync_write+0x42c/0x660 [ 1861.531506] ? new_sync_read+0x6f0/0x6f0 [ 1861.532095] ? _cond_resched+0x12/0x80 [ 1861.532686] ? selinux_file_permission+0x36/0x510 [ 1861.533418] ? __fget_files+0x296/0x480 [ 1861.534030] vfs_write+0x747/0xa30 [ 1861.534617] ksys_write+0x1f6/0x260 [ 1861.535168] ? __ia32_sys_read+0xb0/0xb0 [ 1861.535780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.536563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.537329] do_syscall_64+0x33/0x40 [ 1861.537888] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.538610] RIP: 0033:0x7f7085901b19 [ 1861.539170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.541946] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.543147] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1861.544334] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1861.545425] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.546511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.547550] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1861.553527] FAULT_INJECTION: forcing a failure. [ 1861.553527] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.555268] CPU: 0 PID: 11030 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1861.556307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.557571] Call Trace: [ 1861.557970] dump_stack+0x107/0x167 [ 1861.558585] should_fail.cold+0x5/0xa [ 1861.559183] should_failslab+0x5/0x20 [ 1861.559771] __kmalloc_node_track_caller+0x74/0x3f0 [ 1861.560406] ? hci_sock_sendmsg+0x1714/0x2090 [ 1861.561016] ? _copy_from_iter_full+0x27c/0xa60 [ 1861.561709] __alloc_skb+0xb1/0x5b0 [ 1861.562290] hci_sock_sendmsg+0x1714/0x2090 [ 1861.562919] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.563581] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.564238] sock_sendmsg+0x154/0x190 [ 1861.564784] sock_write_iter+0x291/0x3d0 [ 1861.565367] ? sock_sendmsg+0x190/0x190 [ 1861.565939] ? perf_trace_lock+0xac/0x490 [ 1861.566602] ? inode_has_perm+0x171/0x1d0 [ 1861.567236] new_sync_write+0x42c/0x660 [ 1861.567830] ? new_sync_read+0x6f0/0x6f0 [ 1861.568434] ? _cond_resched+0x12/0x80 [ 1861.569022] ? selinux_file_permission+0x36/0x510 [ 1861.569742] ? __fget_files+0x296/0x480 [ 1861.570384] vfs_write+0x747/0xa30 [ 1861.570959] ksys_write+0x1f6/0x260 [ 1861.571491] ? __ia32_sys_read+0xb0/0xb0 [ 1861.572106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.572887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.573647] do_syscall_64+0x33/0x40 [ 1861.574222] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.574987] RIP: 0033:0x7f808a7d9b19 [ 1861.575530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.578274] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.579436] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1861.580457] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1861.581539] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.582627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.583716] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:34:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 7) [ 1861.617349] FAULT_INJECTION: forcing a failure. [ 1861.617349] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.619313] CPU: 0 PID: 11036 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1861.620319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.621495] Call Trace: [ 1861.621956] dump_stack+0x107/0x167 [ 1861.622500] should_fail.cold+0x5/0xa [ 1861.623039] ? create_object.isra.0+0x3a/0xa20 [ 1861.623705] should_failslab+0x5/0x20 [ 1861.624296] kmem_cache_alloc+0x5b/0x360 [ 1861.624881] create_object.isra.0+0x3a/0xa20 [ 1861.625521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1861.626284] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1861.627005] ? hci_sock_sendmsg+0x1714/0x2090 [ 1861.627659] __alloc_skb+0xb1/0x5b0 [ 1861.628173] hci_sock_sendmsg+0x1714/0x2090 [ 1861.628889] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.629688] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.630421] sock_sendmsg+0x154/0x190 [ 1861.630952] sock_write_iter+0x291/0x3d0 [ 1861.631544] ? sock_sendmsg+0x190/0x190 [ 1861.632129] ? perf_trace_lock+0xac/0x490 [ 1861.632145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1861.632734] ? inode_has_perm+0x171/0x1d0 [ 1861.632789] new_sync_write+0x42c/0x660 [ 1861.635271] ? new_sync_read+0x6f0/0x6f0 [ 1861.635950] ? _cond_resched+0x12/0x80 [ 1861.636572] ? selinux_file_permission+0x36/0x510 [ 1861.637383] ? __fget_files+0x296/0x480 [ 1861.638092] vfs_write+0x747/0xa30 [ 1861.638731] ksys_write+0x1f6/0x260 [ 1861.639363] ? __ia32_sys_read+0xb0/0xb0 [ 1861.639987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.640784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.641619] do_syscall_64+0x33/0x40 [ 1861.642179] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.642916] RIP: 0033:0x7f808a7d9b19 [ 1861.643440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.646345] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.647502] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1861.648596] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1861.649691] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.650756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:34:45 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:34:45 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:34:45 executing program 3: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xb601, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1861.651865] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:34:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 8) 21:34:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 8) [ 1861.700181] FAULT_INJECTION: forcing a failure. [ 1861.700181] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.702311] CPU: 0 PID: 11038 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1861.703288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.704460] Call Trace: [ 1861.704849] dump_stack+0x107/0x167 [ 1861.705361] should_fail.cold+0x5/0xa [ 1861.705902] ? get_connections+0x1af/0x590 [ 1861.706518] should_failslab+0x5/0x20 [ 1861.707060] __kmalloc+0x72/0x3f0 [ 1861.707551] ? kmem_cache_free+0x257/0x310 [ 1861.708157] get_connections+0x1af/0x590 [ 1861.708746] ? do_raw_read_unlock+0x3b/0x70 [ 1861.709371] ? pairing_complete+0x570/0x570 [ 1861.710076] hci_sock_sendmsg+0x1b34/0x2090 [ 1861.710705] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.711356] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.712022] sock_sendmsg+0x154/0x190 [ 1861.712560] sock_write_iter+0x291/0x3d0 [ 1861.713143] ? sock_sendmsg+0x190/0x190 [ 1861.713703] ? perf_trace_lock+0xac/0x490 [ 1861.714342] ? inode_has_perm+0x171/0x1d0 [ 1861.714916] new_sync_write+0x42c/0x660 [ 1861.715476] ? new_sync_read+0x6f0/0x6f0 [ 1861.716026] ? _cond_resched+0x12/0x80 [ 1861.716584] ? selinux_file_permission+0x36/0x510 [ 1861.717237] ? __fget_files+0x296/0x480 [ 1861.717860] vfs_write+0x747/0xa30 [ 1861.718478] ksys_write+0x1f6/0x260 [ 1861.719005] ? __ia32_sys_read+0xb0/0xb0 [ 1861.719557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.720319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.721013] do_syscall_64+0x33/0x40 [ 1861.721538] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.722235] RIP: 0033:0x7f808a7d9b19 [ 1861.722760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.725471] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.726552] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1861.727544] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1861.728545] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.729532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.730536] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1861.766009] FAULT_INJECTION: forcing a failure. [ 1861.766009] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.767744] CPU: 0 PID: 11047 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1861.768693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.769833] Call Trace: [ 1861.770220] dump_stack+0x107/0x167 [ 1861.770739] should_fail.cold+0x5/0xa [ 1861.771268] ? get_connections+0x1af/0x590 [ 1861.771909] should_failslab+0x5/0x20 [ 1861.772443] __kmalloc+0x72/0x3f0 [ 1861.772923] ? kmem_cache_free+0x257/0x310 [ 1861.773503] get_connections+0x1af/0x590 [ 1861.774070] ? do_raw_read_unlock+0x3b/0x70 [ 1861.774675] ? pairing_complete+0x570/0x570 [ 1861.775279] hci_sock_sendmsg+0x1b34/0x2090 [ 1861.775865] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.776501] ? hci_sock_compat_ioctl+0x80/0x80 [ 1861.777114] sock_sendmsg+0x154/0x190 [ 1861.777640] sock_write_iter+0x291/0x3d0 [ 1861.778178] ? sock_sendmsg+0x190/0x190 [ 1861.778743] ? perf_trace_lock+0xac/0x490 [ 1861.779312] ? inode_has_perm+0x171/0x1d0 [ 1861.779901] new_sync_write+0x42c/0x660 [ 1861.780440] ? new_sync_read+0x6f0/0x6f0 [ 1861.781004] ? _cond_resched+0x12/0x80 [ 1861.781540] ? selinux_file_permission+0x36/0x510 [ 1861.782350] ? __fget_files+0x296/0x480 [ 1861.783006] vfs_write+0x747/0xa30 [ 1861.783520] ksys_write+0x1f6/0x260 [ 1861.784034] ? __ia32_sys_read+0xb0/0xb0 [ 1861.784598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.785325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.786040] do_syscall_64+0x33/0x40 [ 1861.786576] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.787278] RIP: 0033:0x7f7085901b19 21:34:45 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1861.787793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.790528] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.791572] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1861.792571] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1861.793568] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.794578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.795572] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:34:45 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:34:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1861.954486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 21:35:03 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0xfffffffe}) 21:35:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:03 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:35:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 1) 21:35:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 9) 21:35:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:03 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) (fail_nth: 1) 21:35:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 9) [ 1879.952080] FAULT_INJECTION: forcing a failure. [ 1879.952080] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.954624] CPU: 1 PID: 11076 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1879.956029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.957729] Call Trace: [ 1879.958280] dump_stack+0x107/0x167 [ 1879.959050] should_fail.cold+0x5/0xa [ 1879.959841] ? create_object.isra.0+0x3a/0xa20 [ 1879.960784] should_failslab+0x5/0x20 [ 1879.961565] kmem_cache_alloc+0x5b/0x360 [ 1879.962392] ? find_held_lock+0x2c/0x110 [ 1879.963233] create_object.isra.0+0x3a/0xa20 [ 1879.964147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.965193] __kmalloc+0x16e/0x3f0 [ 1879.965930] get_connections+0x1af/0x590 [ 1879.966785] ? do_raw_read_unlock+0x3b/0x70 [ 1879.967672] ? pairing_complete+0x570/0x570 [ 1879.968564] hci_sock_sendmsg+0x1b34/0x2090 [ 1879.969451] ? hci_sock_compat_ioctl+0x80/0x80 [ 1879.970407] ? hci_sock_compat_ioctl+0x80/0x80 [ 1879.971360] sock_sendmsg+0x154/0x190 [ 1879.972146] sock_write_iter+0x291/0x3d0 [ 1879.972985] ? sock_sendmsg+0x190/0x190 [ 1879.973793] ? perf_trace_lock+0xac/0x490 [ 1879.974666] ? inode_has_perm+0x171/0x1d0 [ 1879.975529] new_sync_write+0x42c/0x660 [ 1879.976354] ? new_sync_read+0x6f0/0x6f0 [ 1879.977187] ? _cond_resched+0x12/0x80 [ 1879.977998] ? selinux_file_permission+0x36/0x510 [ 1879.979039] ? __fget_files+0x296/0x480 [ 1879.979869] vfs_write+0x747/0xa30 [ 1879.980608] ksys_write+0x1f6/0x260 [ 1879.981361] ? __ia32_sys_read+0xb0/0xb0 [ 1879.982194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.983286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.984363] do_syscall_64+0x33/0x40 [ 1879.985132] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1879.986184] RIP: 0033:0x7f808a7d9b19 [ 1879.986950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.990713] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1879.992269] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1879.993723] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1879.995195] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.996645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1879.998107] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1880.015470] FAULT_INJECTION: forcing a failure. [ 1880.015470] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.018320] CPU: 0 PID: 11077 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1880.019985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.021252] FAULT_INJECTION: forcing a failure. [ 1880.021252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.021944] Call Trace: [ 1880.021976] dump_stack+0x107/0x167 [ 1880.022006] should_fail.cold+0x5/0xa [ 1880.022034] ? hci_sock_sendmsg+0x8f6/0x2090 [ 1880.027749] should_failslab+0x5/0x20 [ 1880.028655] __kmalloc+0x72/0x3f0 [ 1880.029479] ? __local_bh_enable_ip+0x9d/0x100 [ 1880.030581] hci_sock_sendmsg+0x8f6/0x2090 [ 1880.031592] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.032679] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.033752] sock_sendmsg+0x154/0x190 [ 1880.034656] sock_write_iter+0x291/0x3d0 [ 1880.035615] ? sock_sendmsg+0x190/0x190 [ 1880.036548] ? perf_trace_lock+0xac/0x490 [ 1880.037544] ? inode_has_perm+0x171/0x1d0 [ 1880.038555] new_sync_write+0x42c/0x660 [ 1880.039497] ? new_sync_read+0x6f0/0x6f0 [ 1880.040456] ? _cond_resched+0x12/0x80 [ 1880.041386] ? selinux_file_permission+0x36/0x510 [ 1880.042537] ? __fget_files+0x296/0x480 [ 1880.043498] vfs_write+0x747/0xa30 [ 1880.044348] ksys_write+0x1f6/0x260 [ 1880.045208] ? __ia32_sys_read+0xb0/0xb0 [ 1880.046173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.047425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.048645] do_syscall_64+0x33/0x40 [ 1880.049524] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.050739] RIP: 0033:0x7fc92b32cb19 [ 1880.051616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.055937] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.057722] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1880.059413] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.061094] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.062787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.064485] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 1880.066213] CPU: 1 PID: 11089 Comm: syz-executor.3 Not tainted 5.10.163 #1 [ 1880.067646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.068214] FAULT_INJECTION: forcing a failure. [ 1880.068214] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.069350] Call Trace: [ 1880.069374] dump_stack+0x107/0x167 [ 1880.069398] should_fail.cold+0x5/0xa [ 1880.069425] _copy_to_user+0x2e/0x180 [ 1880.069453] semctl_main+0x9b3/0x2800 [ 1880.075534] ? semctl_setval+0x16c0/0x16c0 [ 1880.076413] ? lock_downgrade+0x6d0/0x6d0 [ 1880.077257] ? perf_trace_lock+0xac/0x490 [ 1880.078119] ? SOFTIRQ_verbose+0x10/0x10 [ 1880.078964] ? perf_trace_lock+0xac/0x490 [ 1880.079826] ? __lockdep_reset_lock+0x180/0x180 [ 1880.080769] ? perf_trace_lock+0xac/0x490 [ 1880.081624] ? find_held_lock+0x2c/0x110 [ 1880.082477] ? ksys_write+0x21a/0x260 [ 1880.083258] ? lock_downgrade+0x6d0/0x6d0 [ 1880.084099] ? find_held_lock+0x2c/0x110 [ 1880.084941] ? ksys_write+0x12d/0x260 [ 1880.085735] ksys_semctl.constprop.0+0x2b4/0x320 [ 1880.086711] ? wait_for_completion_io+0x270/0x270 [ 1880.087698] ? compat_ksys_semctl+0x380/0x380 [ 1880.088617] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.089562] ? vfs_write+0x354/0xa30 [ 1880.090323] ? fput_many+0x2f/0x1a0 [ 1880.091079] ? ksys_write+0x1a9/0x260 [ 1880.091877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.092945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.093997] do_syscall_64+0x33/0x40 [ 1880.094748] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.095794] RIP: 0033:0x7f4ae2043b19 [ 1880.096555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.100320] RSP: 002b:00007f4adf598188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1880.101873] RAX: ffffffffffffffda RBX: 00007f4ae2157020 RCX: 00007f4ae2043b19 [ 1880.103339] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1880.104808] RBP: 00007f4adf5981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.106285] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 1880.107776] R13: 00007fff5545351f R14: 00007f4adf598300 R15: 0000000000022000 [ 1880.109277] CPU: 0 PID: 11087 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1880.110900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.112818] Call Trace: [ 1880.113439] dump_stack+0x107/0x167 [ 1880.114306] should_fail.cold+0x5/0xa [ 1880.115202] ? create_object.isra.0+0x3a/0xa20 [ 1880.116270] should_failslab+0x5/0x20 [ 1880.117157] kmem_cache_alloc+0x5b/0x360 [ 1880.118104] ? find_held_lock+0x2c/0x110 [ 1880.119076] create_object.isra.0+0x3a/0xa20 [ 1880.120103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.121286] __kmalloc+0x16e/0x3f0 [ 1880.122128] get_connections+0x1af/0x590 21:35:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1880.123076] ? do_raw_read_unlock+0x3b/0x70 [ 1880.124207] ? pairing_complete+0x570/0x570 [ 1880.125207] hci_sock_sendmsg+0x1b34/0x2090 [ 1880.126211] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.127297] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.128351] sock_sendmsg+0x154/0x190 [ 1880.129232] sock_write_iter+0x291/0x3d0 [ 1880.130168] ? sock_sendmsg+0x190/0x190 [ 1880.131091] ? perf_trace_lock+0xac/0x490 [ 1880.132064] ? inode_has_perm+0x171/0x1d0 [ 1880.133042] new_sync_write+0x42c/0x660 [ 1880.133963] ? new_sync_read+0x6f0/0x6f0 [ 1880.134909] ? _cond_resched+0x12/0x80 [ 1880.135823] ? selinux_file_permission+0x36/0x510 [ 1880.136944] ? __fget_files+0x296/0x480 [ 1880.137882] vfs_write+0x747/0xa30 [ 1880.138736] ksys_write+0x1f6/0x260 [ 1880.139577] ? __ia32_sys_read+0xb0/0xb0 [ 1880.140519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.141731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.142943] do_syscall_64+0x33/0x40 [ 1880.143805] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.144992] RIP: 0033:0x7f7085901b19 [ 1880.145847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.150042] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.151780] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1880.153420] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.155051] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.156675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.158291] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 10) 21:35:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 2) 21:35:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 10) [ 1880.247227] FAULT_INJECTION: forcing a failure. [ 1880.247227] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.250073] CPU: 0 PID: 11097 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1880.251656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.253499] Call Trace: [ 1880.254098] dump_stack+0x107/0x167 [ 1880.254933] should_fail.cold+0x5/0xa [ 1880.255796] ? __alloc_skb+0x6d/0x5b0 [ 1880.256653] should_failslab+0x5/0x20 [ 1880.257506] kmem_cache_alloc_node+0x55/0x370 [ 1880.258520] ? mark_held_locks+0x9e/0xe0 [ 1880.259435] __alloc_skb+0x6d/0x5b0 [ 1880.260266] mgmt_cmd_complete+0x3d/0x470 [ 1880.261209] get_connections+0x434/0x590 [ 1880.262126] ? do_raw_read_unlock+0x3b/0x70 [ 1880.263111] ? pairing_complete+0x570/0x570 [ 1880.264079] hci_sock_sendmsg+0x1b34/0x2090 [ 1880.265058] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.266094] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.267128] sock_sendmsg+0x154/0x190 [ 1880.267987] sock_write_iter+0x291/0x3d0 [ 1880.268901] ? sock_sendmsg+0x190/0x190 [ 1880.269791] ? perf_trace_lock+0xac/0x490 [ 1880.270753] ? inode_has_perm+0x171/0x1d0 [ 1880.271702] new_sync_write+0x42c/0x660 [ 1880.272602] ? new_sync_read+0x6f0/0x6f0 [ 1880.273506] ? _cond_resched+0x12/0x80 [ 1880.274388] ? selinux_file_permission+0x36/0x510 [ 1880.275480] ? __fget_files+0x296/0x480 [ 1880.276381] vfs_write+0x747/0xa30 [ 1880.277186] ksys_write+0x1f6/0x260 [ 1880.277997] ? __ia32_sys_read+0xb0/0xb0 [ 1880.278917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.280080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.281231] do_syscall_64+0x33/0x40 [ 1880.282060] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.283201] RIP: 0033:0x7f808a7d9b19 [ 1880.284031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.288095] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.289785] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1880.291366] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.292947] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.294535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.296107] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:35:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1880.347452] FAULT_INJECTION: forcing a failure. [ 1880.347452] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.350069] CPU: 0 PID: 11104 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1880.350639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1880.351567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.351575] Call Trace: [ 1880.351599] dump_stack+0x107/0x167 [ 1880.351627] should_fail.cold+0x5/0xa [ 1880.351646] ? __alloc_skb+0x6d/0x5b0 [ 1880.351674] should_failslab+0x5/0x20 [ 1880.358861] kmem_cache_alloc_node+0x55/0x370 [ 1880.359824] ? mark_held_locks+0x9e/0xe0 [ 1880.360691] __alloc_skb+0x6d/0x5b0 [ 1880.361480] mgmt_cmd_complete+0x3d/0x470 [ 1880.362387] get_connections+0x434/0x590 21:35:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 1880.363288] ? do_raw_read_unlock+0x3b/0x70 [ 1880.364354] ? pairing_complete+0x570/0x570 [ 1880.365279] hci_sock_sendmsg+0x1b34/0x2090 [ 1880.366206] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.367205] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.368190] sock_sendmsg+0x154/0x190 [ 1880.369008] sock_write_iter+0x291/0x3d0 [ 1880.369869] ? sock_sendmsg+0x190/0x190 [ 1880.370730] ? perf_trace_lock+0xac/0x490 [ 1880.371629] ? inode_has_perm+0x171/0x1d0 [ 1880.372532] new_sync_write+0x42c/0x660 [ 1880.373373] ? new_sync_read+0x6f0/0x6f0 [ 1880.374233] ? _cond_resched+0x12/0x80 [ 1880.375091] ? selinux_file_permission+0x36/0x510 [ 1880.376116] ? __fget_files+0x296/0x480 [ 1880.376976] vfs_write+0x747/0xa30 [ 1880.377746] ksys_write+0x1f6/0x260 [ 1880.378543] ? __ia32_sys_read+0xb0/0xb0 [ 1880.379407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.380514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.381610] do_syscall_64+0x33/0x40 [ 1880.382401] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.383487] RIP: 0033:0x7f7085901b19 [ 1880.384272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.388124] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.389716] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1880.391223] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.392705] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.394199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.395690] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1880.414998] FAULT_INJECTION: forcing a failure. [ 1880.414998] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.417440] CPU: 1 PID: 11108 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1880.418891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.420581] Call Trace: [ 1880.421131] dump_stack+0x107/0x167 [ 1880.421886] should_fail.cold+0x5/0xa [ 1880.422682] ? create_object.isra.0+0x3a/0xa20 [ 1880.423624] should_failslab+0x5/0x20 [ 1880.424403] kmem_cache_alloc+0x5b/0x360 [ 1880.425236] ? lock_downgrade+0x6d0/0x6d0 [ 1880.426093] create_object.isra.0+0x3a/0xa20 [ 1880.427016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.428062] __kmalloc+0x16e/0x3f0 [ 1880.428804] hci_sock_sendmsg+0x8f6/0x2090 [ 1880.429681] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.430640] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.431577] sock_sendmsg+0x154/0x190 [ 1880.432381] sock_write_iter+0x291/0x3d0 [ 1880.433222] ? sock_sendmsg+0x190/0x190 [ 1880.434040] ? perf_trace_lock+0xac/0x490 [ 1880.434922] ? inode_has_perm+0x171/0x1d0 [ 1880.435791] new_sync_write+0x42c/0x660 [ 1880.436610] ? new_sync_read+0x6f0/0x6f0 [ 1880.437444] ? _cond_resched+0x12/0x80 [ 1880.438254] ? selinux_file_permission+0x36/0x510 [ 1880.439270] ? __fget_files+0x296/0x480 [ 1880.440106] vfs_write+0x747/0xa30 [ 1880.440846] ksys_write+0x1f6/0x260 [ 1880.441595] ? __ia32_sys_read+0xb0/0xb0 [ 1880.442430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.443516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.444583] do_syscall_64+0x33/0x40 [ 1880.445349] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.446403] RIP: 0033:0x7fc92b32cb19 [ 1880.447182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.450955] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.452519] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1880.453978] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.455450] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.456909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.458363] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:35:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 11) [ 1880.518244] FAULT_INJECTION: forcing a failure. [ 1880.518244] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.520827] CPU: 1 PID: 11112 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1880.522232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.523961] Call Trace: [ 1880.524508] dump_stack+0x107/0x167 [ 1880.525260] should_fail.cold+0x5/0xa [ 1880.526044] ? create_object.isra.0+0x3a/0xa20 [ 1880.526995] should_failslab+0x5/0x20 [ 1880.527766] kmem_cache_alloc+0x5b/0x360 [ 1880.528598] create_object.isra.0+0x3a/0xa20 [ 1880.529488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.530536] kmem_cache_alloc_node+0x169/0x370 [ 1880.531471] __alloc_skb+0x6d/0x5b0 [ 1880.532230] mgmt_cmd_complete+0x3d/0x470 [ 1880.533098] get_connections+0x434/0x590 [ 1880.533926] ? do_raw_read_unlock+0x3b/0x70 [ 1880.534821] ? pairing_complete+0x570/0x570 [ 1880.535726] hci_sock_sendmsg+0x1b34/0x2090 [ 1880.536612] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.537548] ? hci_sock_compat_ioctl+0x80/0x80 [ 1880.538479] sock_sendmsg+0x154/0x190 [ 1880.539253] sock_write_iter+0x291/0x3d0 [ 1880.540079] ? sock_sendmsg+0x190/0x190 [ 1880.540880] ? perf_trace_lock+0xac/0x490 [ 1880.541742] ? inode_has_perm+0x171/0x1d0 [ 1880.542609] new_sync_write+0x42c/0x660 [ 1880.543434] ? new_sync_read+0x6f0/0x6f0 [ 1880.544266] ? _cond_resched+0x12/0x80 [ 1880.545070] ? selinux_file_permission+0x36/0x510 [ 1880.546066] ? __fget_files+0x296/0x480 [ 1880.546914] vfs_write+0x747/0xa30 [ 1880.547653] ksys_write+0x1f6/0x260 [ 1880.548400] ? __ia32_sys_read+0xb0/0xb0 [ 1880.549236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.550308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.551374] do_syscall_64+0x33/0x40 [ 1880.552172] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.553228] RIP: 0033:0x7f808a7d9b19 [ 1880.553993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.557765] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.559333] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1880.560791] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1880.562254] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.563736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.565192] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:35:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 11) 21:35:20 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) (fail_nth: 2) 21:35:20 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0xfeffffff00000000}) 21:35:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 3) 21:35:20 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:35:20 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 12) [ 1896.665319] FAULT_INJECTION: forcing a failure. [ 1896.665319] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.667728] CPU: 1 PID: 11131 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1896.669117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.670791] Call Trace: [ 1896.671332] dump_stack+0x107/0x167 [ 1896.672074] should_fail.cold+0x5/0xa [ 1896.672847] ? create_object.isra.0+0x3a/0xa20 [ 1896.673774] should_failslab+0x5/0x20 [ 1896.674543] kmem_cache_alloc+0x5b/0x360 [ 1896.675378] create_object.isra.0+0x3a/0xa20 [ 1896.676265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.677305] kmem_cache_alloc_node+0x169/0x370 [ 1896.678237] __alloc_skb+0x6d/0x5b0 [ 1896.679003] mgmt_cmd_complete+0x3d/0x470 [ 1896.679851] get_connections+0x434/0x590 [ 1896.680684] ? do_raw_read_unlock+0x3b/0x70 [ 1896.681553] ? pairing_complete+0x570/0x570 [ 1896.682434] hci_sock_sendmsg+0x1b34/0x2090 [ 1896.683322] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.684255] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.685175] sock_sendmsg+0x154/0x190 [ 1896.685946] sock_write_iter+0x291/0x3d0 [ 1896.686773] ? sock_sendmsg+0x190/0x190 [ 1896.687569] ? perf_trace_lock+0xac/0x490 [ 1896.688420] ? inode_has_perm+0x171/0x1d0 [ 1896.689276] new_sync_write+0x42c/0x660 [ 1896.690090] ? new_sync_read+0x6f0/0x6f0 [ 1896.690935] ? _cond_resched+0x12/0x80 [ 1896.691741] ? selinux_file_permission+0x36/0x510 [ 1896.692722] ? __fget_files+0x296/0x480 [ 1896.693551] vfs_write+0x747/0xa30 [ 1896.694281] ksys_write+0x1f6/0x260 [ 1896.695025] ? __ia32_sys_read+0xb0/0xb0 [ 1896.695854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.696915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.697961] do_syscall_64+0x33/0x40 [ 1896.698726] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1896.699759] RIP: 0033:0x7f7085901b19 [ 1896.700512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.704218] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.705770] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1896.707219] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1896.708658] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.710088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.711541] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:20 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1896.720245] FAULT_INJECTION: forcing a failure. [ 1896.720245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.722695] CPU: 1 PID: 11137 Comm: syz-executor.3 Not tainted 5.10.163 #1 [ 1896.724096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.725793] Call Trace: [ 1896.726343] dump_stack+0x107/0x167 [ 1896.727117] should_fail.cold+0x5/0xa [ 1896.727906] _copy_to_user+0x2e/0x180 [ 1896.728699] simple_read_from_buffer+0xcc/0x160 [ 1896.729664] proc_fail_nth_read+0x198/0x230 [ 1896.730551] ? proc_sessionid_read+0x230/0x230 [ 1896.731495] ? security_file_permission+0x24e/0x570 [ 1896.732524] ? perf_trace_initcall_start+0x101/0x380 [ 1896.733587] ? proc_sessionid_read+0x230/0x230 [ 1896.734520] vfs_read+0x228/0x580 [ 1896.735254] ksys_read+0x12d/0x260 [ 1896.735976] ? vfs_write+0xa30/0xa30 [ 1896.736744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.737816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.738892] do_syscall_64+0x33/0x40 [ 1896.739660] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1896.740702] RIP: 0033:0x7f4ae1ff669c [ 1896.741464] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1896.745201] RSP: 002b:00007f4adf598170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1896.746762] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4ae1ff669c [ 1896.748218] RDX: 000000000000000f RSI: 00007f4adf5981e0 RDI: 0000000000000003 [ 1896.749672] RBP: 00007f4adf5981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.751148] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 1896.752596] R13: 00007fff5545351f R14: 00007f4adf598300 R15: 0000000000022000 [ 1896.764620] FAULT_INJECTION: forcing a failure. [ 1896.764620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.767044] CPU: 1 PID: 11132 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1896.768449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.770143] Call Trace: [ 1896.770709] dump_stack+0x107/0x167 [ 1896.771460] should_fail.cold+0x5/0xa [ 1896.772255] _copy_from_iter_full+0x201/0xa60 [ 1896.773176] ? __virt_addr_valid+0x128/0x350 [ 1896.774084] ? __check_object_size+0x319/0x440 [ 1896.775029] hci_sock_sendmsg+0x92c/0x2090 [ 1896.775894] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.776823] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.777743] sock_sendmsg+0x154/0x190 [ 1896.778510] sock_write_iter+0x291/0x3d0 [ 1896.779335] ? sock_sendmsg+0x190/0x190 [ 1896.780133] ? perf_trace_lock+0xac/0x490 [ 1896.780981] ? inode_has_perm+0x171/0x1d0 [ 1896.781831] new_sync_write+0x42c/0x660 [ 1896.782634] ? new_sync_read+0x6f0/0x6f0 [ 1896.783475] ? _cond_resched+0x12/0x80 [ 1896.784271] ? selinux_file_permission+0x36/0x510 [ 1896.785247] ? __fget_files+0x296/0x480 21:35:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 12) [ 1896.786068] vfs_write+0x747/0xa30 [ 1896.786974] ksys_write+0x1f6/0x260 [ 1896.787714] ? __ia32_sys_read+0xb0/0xb0 [ 1896.788544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.789607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.790700] do_syscall_64+0x33/0x40 [ 1896.791463] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1896.792499] RIP: 0033:0x7fc92b32cb19 [ 1896.793254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.797005] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.798546] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1896.799995] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1896.801432] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.802894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.804338] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 1896.808782] FAULT_INJECTION: forcing a failure. [ 1896.808782] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.811145] CPU: 0 PID: 11133 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1896.812546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.814238] Call Trace: [ 1896.814795] dump_stack+0x107/0x167 [ 1896.815542] should_fail.cold+0x5/0xa [ 1896.816343] should_failslab+0x5/0x20 [ 1896.817128] __kmalloc_node_track_caller+0x74/0x3f0 [ 1896.818153] ? mgmt_cmd_complete+0x3d/0x470 [ 1896.819061] __alloc_skb+0xb1/0x5b0 [ 1896.819814] mgmt_cmd_complete+0x3d/0x470 [ 1896.820677] get_connections+0x434/0x590 [ 1896.821508] ? do_raw_read_unlock+0x3b/0x70 [ 1896.822387] ? pairing_complete+0x570/0x570 [ 1896.823286] hci_sock_sendmsg+0x1b34/0x2090 [ 1896.824181] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.825126] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.826056] sock_sendmsg+0x154/0x190 [ 1896.826840] sock_write_iter+0x291/0x3d0 [ 1896.827668] ? sock_sendmsg+0x190/0x190 [ 1896.828474] ? perf_trace_lock+0xac/0x490 [ 1896.829333] ? inode_has_perm+0x171/0x1d0 [ 1896.830204] new_sync_write+0x42c/0x660 [ 1896.831039] ? new_sync_read+0x6f0/0x6f0 [ 1896.831892] ? _cond_resched+0x12/0x80 [ 1896.832704] ? selinux_file_permission+0x36/0x510 [ 1896.833694] ? __fget_files+0x296/0x480 [ 1896.834530] vfs_write+0x747/0xa30 [ 1896.835300] ksys_write+0x1f6/0x260 [ 1896.836055] ? __ia32_sys_read+0xb0/0xb0 [ 1896.836888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.837966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.839042] do_syscall_64+0x33/0x40 [ 1896.839809] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1896.840849] RIP: 0033:0x7f808a7d9b19 [ 1896.841608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.845329] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.846901] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1896.848344] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1896.849782] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.851237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.852677] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1896.873399] FAULT_INJECTION: forcing a failure. [ 1896.873399] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.875735] CPU: 0 PID: 11145 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1896.877134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.878822] Call Trace: [ 1896.879365] dump_stack+0x107/0x167 [ 1896.880114] should_fail.cold+0x5/0xa [ 1896.880893] should_failslab+0x5/0x20 [ 1896.881668] __kmalloc_node_track_caller+0x74/0x3f0 [ 1896.882694] ? mgmt_cmd_complete+0x3d/0x470 [ 1896.883581] __alloc_skb+0xb1/0x5b0 [ 1896.884331] mgmt_cmd_complete+0x3d/0x470 [ 1896.885186] get_connections+0x434/0x590 [ 1896.886012] ? do_raw_read_unlock+0x3b/0x70 [ 1896.886898] ? pairing_complete+0x570/0x570 [ 1896.887772] hci_sock_sendmsg+0x1b34/0x2090 [ 1896.888651] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.889584] ? hci_sock_compat_ioctl+0x80/0x80 [ 1896.890503] sock_sendmsg+0x154/0x190 [ 1896.891286] sock_write_iter+0x291/0x3d0 [ 1896.892110] ? sock_sendmsg+0x190/0x190 [ 1896.892912] ? perf_trace_lock+0xac/0x490 [ 1896.893764] ? inode_has_perm+0x171/0x1d0 [ 1896.894619] new_sync_write+0x42c/0x660 [ 1896.895471] ? new_sync_read+0x6f0/0x6f0 [ 1896.896296] ? _cond_resched+0x12/0x80 [ 1896.897099] ? selinux_file_permission+0x36/0x510 [ 1896.898082] ? __fget_files+0x296/0x480 [ 1896.898915] vfs_write+0x747/0xa30 [ 1896.899645] ksys_write+0x1f6/0x260 [ 1896.900403] ? __ia32_sys_read+0xb0/0xb0 [ 1896.901235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.902297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.903358] do_syscall_64+0x33/0x40 [ 1896.904114] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1896.905149] RIP: 0033:0x7f7085901b19 [ 1896.905903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.909624] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.911167] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1896.912604] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1896.914034] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.915486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.916925] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:20 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 4) [ 1896.949317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1897.012848] FAULT_INJECTION: forcing a failure. [ 1897.012848] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.015362] CPU: 1 PID: 11154 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1897.016776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.018477] Call Trace: [ 1897.019042] dump_stack+0x107/0x167 [ 1897.019798] should_fail.cold+0x5/0xa [ 1897.020577] ? __alloc_skb+0x6d/0x5b0 [ 1897.021359] should_failslab+0x5/0x20 [ 1897.022145] kmem_cache_alloc_node+0x55/0x370 [ 1897.023072] ? _copy_from_iter_full+0x27c/0xa60 [ 1897.024025] __alloc_skb+0x6d/0x5b0 [ 1897.024779] hci_sock_sendmsg+0x1714/0x2090 [ 1897.025677] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.026620] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.027562] sock_sendmsg+0x154/0x190 [ 1897.028337] sock_write_iter+0x291/0x3d0 [ 1897.029165] ? sock_sendmsg+0x190/0x190 [ 1897.029974] ? perf_trace_lock+0xac/0x490 [ 1897.030854] ? inode_has_perm+0x171/0x1d0 [ 1897.031712] new_sync_write+0x42c/0x660 [ 1897.032531] ? new_sync_read+0x6f0/0x6f0 [ 1897.033362] ? _cond_resched+0x12/0x80 [ 1897.034181] ? selinux_file_permission+0x36/0x510 [ 1897.035185] ? __fget_files+0x296/0x480 [ 1897.036027] vfs_write+0x747/0xa30 [ 1897.036772] ksys_write+0x1f6/0x260 [ 1897.037515] ? __ia32_sys_read+0xb0/0xb0 [ 1897.038350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.039424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.040484] do_syscall_64+0x33/0x40 [ 1897.041253] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1897.042306] RIP: 0033:0x7fc92b32cb19 [ 1897.043079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.046813] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.048361] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1897.049813] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1897.051271] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.052713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.054163] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:35:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 13) 21:35:20 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1897.101485] FAULT_INJECTION: forcing a failure. [ 1897.101485] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.103881] CPU: 0 PID: 11158 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1897.105286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.106979] Call Trace: [ 1897.107531] dump_stack+0x107/0x167 [ 1897.108278] should_fail.cold+0x5/0xa [ 1897.109062] ? create_object.isra.0+0x3a/0xa20 [ 1897.109995] should_failslab+0x5/0x20 [ 1897.110780] kmem_cache_alloc+0x5b/0x360 [ 1897.111615] create_object.isra.0+0x3a/0xa20 [ 1897.112504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1897.113538] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1897.114565] ? mgmt_cmd_complete+0x3d/0x470 [ 1897.115477] __alloc_skb+0xb1/0x5b0 [ 1897.116229] mgmt_cmd_complete+0x3d/0x470 [ 1897.117089] get_connections+0x434/0x590 [ 1897.117920] ? do_raw_read_unlock+0x3b/0x70 [ 1897.118803] ? pairing_complete+0x570/0x570 [ 1897.119680] hci_sock_sendmsg+0x1b34/0x2090 [ 1897.120566] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.121515] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.122440] sock_sendmsg+0x154/0x190 [ 1897.123233] sock_write_iter+0x291/0x3d0 [ 1897.124061] ? sock_sendmsg+0x190/0x190 [ 1897.124872] ? perf_trace_lock+0xac/0x490 [ 1897.125728] ? inode_has_perm+0x171/0x1d0 [ 1897.126598] new_sync_write+0x42c/0x660 [ 1897.127421] ? new_sync_read+0x6f0/0x6f0 [ 1897.128247] ? _cond_resched+0x12/0x80 [ 1897.129045] ? selinux_file_permission+0x36/0x510 [ 1897.130027] ? __fget_files+0x296/0x480 [ 1897.130857] vfs_write+0x747/0xa30 [ 1897.131588] ksys_write+0x1f6/0x260 [ 1897.132326] ? __ia32_sys_read+0xb0/0xb0 [ 1897.133151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.134219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.135299] do_syscall_64+0x33/0x40 [ 1897.136061] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1897.137108] RIP: 0033:0x7f7085901b19 [ 1897.137861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.141601] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.143160] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1897.144592] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1897.146022] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.147458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.148887] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 13) [ 1897.194563] FAULT_INJECTION: forcing a failure. [ 1897.194563] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.197146] CPU: 0 PID: 11165 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1897.198562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.200266] Call Trace: [ 1897.200809] dump_stack+0x107/0x167 [ 1897.201562] should_fail.cold+0x5/0xa [ 1897.202346] ? create_object.isra.0+0x3a/0xa20 [ 1897.203295] should_failslab+0x5/0x20 [ 1897.204073] kmem_cache_alloc+0x5b/0x360 [ 1897.204910] create_object.isra.0+0x3a/0xa20 [ 1897.205821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1897.206884] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1897.207929] ? mgmt_cmd_complete+0x3d/0x470 [ 1897.208820] __alloc_skb+0xb1/0x5b0 [ 1897.209581] mgmt_cmd_complete+0x3d/0x470 [ 1897.210438] get_connections+0x434/0x590 [ 1897.211283] ? do_raw_read_unlock+0x3b/0x70 [ 1897.212164] ? pairing_complete+0x570/0x570 [ 1897.213061] hci_sock_sendmsg+0x1b34/0x2090 [ 1897.213955] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.214911] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.215843] sock_sendmsg+0x154/0x190 [ 1897.216620] sock_write_iter+0x291/0x3d0 [ 1897.217452] ? sock_sendmsg+0x190/0x190 [ 1897.218267] ? perf_trace_lock+0xac/0x490 [ 1897.219157] ? inode_has_perm+0x171/0x1d0 [ 1897.220023] new_sync_write+0x42c/0x660 [ 1897.220835] ? new_sync_read+0x6f0/0x6f0 [ 1897.221672] ? _cond_resched+0x12/0x80 [ 1897.222496] ? selinux_file_permission+0x36/0x510 [ 1897.223500] ? __fget_files+0x296/0x480 [ 1897.224332] vfs_write+0x747/0xa30 [ 1897.225071] ksys_write+0x1f6/0x260 [ 1897.225820] ? __ia32_sys_read+0xb0/0xb0 [ 1897.226674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.227759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.228825] do_syscall_64+0x33/0x40 [ 1897.229588] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1897.230667] RIP: 0033:0x7f808a7d9b19 [ 1897.231430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.235188] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.236753] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1897.238221] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1897.239668] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.241106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.242549] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:35:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 14) [ 1897.315853] FAULT_INJECTION: forcing a failure. [ 1897.315853] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.318146] CPU: 0 PID: 11167 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1897.319546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.321205] Call Trace: [ 1897.321736] dump_stack+0x107/0x167 [ 1897.322467] should_fail.cold+0x5/0xa [ 1897.323258] ? __alloc_skb+0x6d/0x5b0 [ 1897.324031] should_failslab+0x5/0x20 [ 1897.324789] kmem_cache_alloc_node+0x55/0x370 [ 1897.325693] __alloc_skb+0x6d/0x5b0 [ 1897.326443] create_monitor_ctrl_event+0x3a/0x3b0 [ 1897.327435] mgmt_cmd_complete+0x2ba/0x470 [ 1897.328291] get_connections+0x434/0x590 [ 1897.329110] ? do_raw_read_unlock+0x3b/0x70 [ 1897.329998] ? pairing_complete+0x570/0x570 [ 1897.330886] hci_sock_sendmsg+0x1b34/0x2090 [ 1897.331792] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.332722] ? hci_sock_compat_ioctl+0x80/0x80 [ 1897.333636] sock_sendmsg+0x154/0x190 [ 1897.334414] sock_write_iter+0x291/0x3d0 [ 1897.335231] ? sock_sendmsg+0x190/0x190 [ 1897.336022] ? perf_trace_lock+0xac/0x490 [ 1897.336874] ? inode_has_perm+0x171/0x1d0 [ 1897.337720] new_sync_write+0x42c/0x660 [ 1897.338537] ? new_sync_read+0x6f0/0x6f0 [ 1897.339364] ? _cond_resched+0x12/0x80 [ 1897.340166] ? selinux_file_permission+0x36/0x510 [ 1897.341151] ? __fget_files+0x296/0x480 [ 1897.341966] vfs_write+0x747/0xa30 [ 1897.342709] ksys_write+0x1f6/0x260 [ 1897.343459] ? __ia32_sys_read+0xb0/0xb0 [ 1897.344297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.345368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.346423] do_syscall_64+0x33/0x40 [ 1897.347197] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1897.348237] RIP: 0033:0x7f7085901b19 [ 1897.348993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.352710] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.354243] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1897.355694] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1897.357121] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.358552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.360038] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 5) 21:35:39 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x3f00, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 14) 21:35:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:35:39 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 15) 21:35:39 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0xffffffff00000000}) [ 1915.791854] FAULT_INJECTION: forcing a failure. [ 1915.791854] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.794443] CPU: 1 PID: 11184 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1915.795714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.797172] Call Trace: [ 1915.797647] dump_stack+0x107/0x167 [ 1915.798295] should_fail.cold+0x5/0xa [ 1915.798985] ? create_object.isra.0+0x3a/0xa20 [ 1915.799795] should_failslab+0x5/0x20 [ 1915.800468] kmem_cache_alloc+0x5b/0x360 [ 1915.801195] create_object.isra.0+0x3a/0xa20 [ 1915.801972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1915.802908] kmem_cache_alloc_node+0x169/0x370 [ 1915.803710] ? _copy_from_iter_full+0x27c/0xa60 [ 1915.804576] __alloc_skb+0x6d/0x5b0 [ 1915.805219] hci_sock_sendmsg+0x1714/0x2090 [ 1915.805985] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.806793] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.807616] sock_sendmsg+0x154/0x190 [ 1915.808289] sock_write_iter+0x291/0x3d0 [ 1915.809007] ? sock_sendmsg+0x190/0x190 [ 1915.809709] ? perf_trace_lock+0xac/0x490 [ 1915.810443] ? inode_has_perm+0x171/0x1d0 [ 1915.811195] new_sync_write+0x42c/0x660 [ 1915.811885] ? new_sync_read+0x6f0/0x6f0 [ 1915.812588] ? _cond_resched+0x12/0x80 21:35:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1915.813269] ? selinux_file_permission+0x36/0x510 [ 1915.814296] ? __fget_files+0x296/0x480 [ 1915.815029] vfs_write+0x747/0xa30 [ 1915.815664] ksys_write+0x1f6/0x260 [ 1915.816292] ? __ia32_sys_read+0xb0/0xb0 [ 1915.817000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.817912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1915.818822] do_syscall_64+0x33/0x40 [ 1915.819482] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1915.820370] RIP: 0033:0x7fc92b32cb19 [ 1915.821011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.824458] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1915.826177] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1915.827665] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1915.829202] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1915.830726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.832307] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 1915.857655] FAULT_INJECTION: forcing a failure. [ 1915.857655] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.860655] CPU: 0 PID: 11188 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1915.862311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.864482] Call Trace: [ 1915.865182] dump_stack+0x107/0x167 [ 1915.866163] should_fail.cold+0x5/0xa [ 1915.867082] ? find_held_lock+0x2c/0x110 [ 1915.868036] ? create_object.isra.0+0x3a/0xa20 [ 1915.869107] should_failslab+0x5/0x20 [ 1915.869995] kmem_cache_alloc+0x5b/0x360 [ 1915.870952] ? __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1915.872281] create_object.isra.0+0x3a/0xa20 [ 1915.873324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1915.874514] kmem_cache_alloc_node+0x169/0x370 [ 1915.875620] __alloc_skb+0x6d/0x5b0 [ 1915.876505] create_monitor_ctrl_event+0x3a/0x3b0 [ 1915.877647] mgmt_cmd_complete+0x2ba/0x470 [ 1915.878658] get_connections+0x434/0x590 [ 1915.879683] ? do_raw_read_unlock+0x3b/0x70 [ 1915.880804] ? pairing_complete+0x570/0x570 [ 1915.881871] hci_sock_sendmsg+0x1b34/0x2090 [ 1915.882867] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.883976] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.885029] sock_sendmsg+0x154/0x190 [ 1915.885972] sock_write_iter+0x291/0x3d0 [ 1915.886947] ? sock_sendmsg+0x190/0x190 [ 1915.887923] ? perf_trace_lock+0xac/0x490 [ 1915.888961] ? inode_has_perm+0x171/0x1d0 [ 1915.889962] new_sync_write+0x42c/0x660 [ 1915.890923] ? new_sync_read+0x6f0/0x6f0 [ 1915.891864] ? _cond_resched+0x12/0x80 [ 1915.892831] ? selinux_file_permission+0x36/0x510 [ 1915.894023] ? __fget_files+0x296/0x480 [ 1915.895030] vfs_write+0x747/0xa30 [ 1915.895903] ksys_write+0x1f6/0x260 [ 1915.896767] ? __ia32_sys_read+0xb0/0xb0 [ 1915.897741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.899083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1915.900442] do_syscall_64+0x33/0x40 [ 1915.901418] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1915.902622] RIP: 0033:0x7f7085901b19 [ 1915.903534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.907898] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1915.909710] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1915.911436] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1915.913137] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1915.914849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1915.916587] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1915.939090] FAULT_INJECTION: forcing a failure. [ 1915.939090] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.941963] CPU: 0 PID: 11190 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1915.943621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.945525] Call Trace: [ 1915.946157] dump_stack+0x107/0x167 [ 1915.947010] should_fail.cold+0x5/0xa [ 1915.947901] ? __alloc_skb+0x6d/0x5b0 [ 1915.948802] should_failslab+0x5/0x20 [ 1915.949693] kmem_cache_alloc_node+0x55/0x370 [ 1915.950749] __alloc_skb+0x6d/0x5b0 [ 1915.951635] create_monitor_ctrl_event+0x3a/0x3b0 [ 1915.952763] mgmt_cmd_complete+0x2ba/0x470 [ 1915.953755] get_connections+0x434/0x590 [ 1915.954691] ? do_raw_read_unlock+0x3b/0x70 [ 1915.955759] ? pairing_complete+0x570/0x570 [ 1915.956775] hci_sock_sendmsg+0x1b34/0x2090 [ 1915.957798] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.958870] ? hci_sock_compat_ioctl+0x80/0x80 [ 1915.959974] sock_sendmsg+0x154/0x190 [ 1915.960842] sock_write_iter+0x291/0x3d0 [ 1915.961811] ? sock_sendmsg+0x190/0x190 [ 1915.962748] ? perf_trace_lock+0xac/0x490 [ 1915.963804] ? inode_has_perm+0x171/0x1d0 [ 1915.964830] new_sync_write+0x42c/0x660 [ 1915.965794] ? new_sync_read+0x6f0/0x6f0 [ 1915.966780] ? _cond_resched+0x12/0x80 [ 1915.967751] ? selinux_file_permission+0x36/0x510 [ 1915.968913] ? __fget_files+0x296/0x480 [ 1915.969884] vfs_write+0x747/0xa30 [ 1915.970729] ksys_write+0x1f6/0x260 [ 1915.971616] ? __ia32_sys_read+0xb0/0xb0 [ 1915.972582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.973819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1915.975097] do_syscall_64+0x33/0x40 [ 1915.975995] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1915.977201] RIP: 0033:0x7f808a7d9b19 [ 1915.978076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.982372] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1915.984203] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1915.985863] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1915.987564] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1915.989224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1915.990926] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1916.008145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:35:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 16) [ 1916.088018] FAULT_INJECTION: forcing a failure. [ 1916.088018] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.089988] CPU: 1 PID: 11206 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1916.091165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.092522] Call Trace: [ 1916.092978] dump_stack+0x107/0x167 [ 1916.093592] should_fail.cold+0x5/0xa [ 1916.094224] should_failslab+0x5/0x20 [ 1916.094863] __kmalloc_node_track_caller+0x74/0x3f0 [ 1916.095747] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 1916.096583] __alloc_skb+0xb1/0x5b0 [ 1916.097203] create_monitor_ctrl_event+0x3a/0x3b0 [ 1916.098008] mgmt_cmd_complete+0x2ba/0x470 [ 1916.098740] get_connections+0x434/0x590 [ 1916.099449] ? do_raw_read_unlock+0x3b/0x70 [ 1916.100147] ? pairing_complete+0x570/0x570 [ 1916.100849] hci_sock_sendmsg+0x1b34/0x2090 [ 1916.101559] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.102305] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.103059] sock_sendmsg+0x154/0x190 [ 1916.103681] sock_write_iter+0x291/0x3d0 [ 1916.104340] ? sock_sendmsg+0x190/0x190 [ 1916.104981] ? perf_trace_lock+0xac/0x490 [ 1916.105652] ? inode_has_perm+0x171/0x1d0 [ 1916.106319] new_sync_write+0x42c/0x660 [ 1916.107003] ? new_sync_read+0x6f0/0x6f0 [ 1916.107684] ? _cond_resched+0x12/0x80 [ 1916.108328] ? selinux_file_permission+0x36/0x510 [ 1916.109113] ? __fget_files+0x296/0x480 [ 1916.109761] vfs_write+0x747/0xa30 [ 1916.110340] ksys_write+0x1f6/0x260 [ 1916.110944] ? __ia32_sys_read+0xb0/0xb0 [ 1916.111633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1916.112484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1916.113333] do_syscall_64+0x33/0x40 [ 1916.113946] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1916.114756] RIP: 0033:0x7f7085901b19 [ 1916.115376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.118290] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1916.119565] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1916.120714] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1916.121793] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.123011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.124146] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 6) 21:35:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:35:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1916.268013] FAULT_INJECTION: forcing a failure. [ 1916.268013] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.269771] CPU: 1 PID: 11212 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1916.270781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.272007] Call Trace: [ 1916.272395] dump_stack+0x107/0x167 [ 1916.272954] should_fail.cold+0x5/0xa [ 1916.273536] should_failslab+0x5/0x20 [ 1916.274100] __kmalloc_node_track_caller+0x74/0x3f0 [ 1916.274840] ? hci_sock_sendmsg+0x1714/0x2090 [ 1916.275510] ? _copy_from_iter_full+0x27c/0xa60 [ 1916.276243] __alloc_skb+0xb1/0x5b0 [ 1916.276793] hci_sock_sendmsg+0x1714/0x2090 [ 1916.277438] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.278128] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.278812] sock_sendmsg+0x154/0x190 [ 1916.279406] sock_write_iter+0x291/0x3d0 [ 1916.280009] ? sock_sendmsg+0x190/0x190 [ 1916.280604] ? perf_trace_lock+0xac/0x490 [ 1916.281238] ? inode_has_perm+0x171/0x1d0 [ 1916.281880] new_sync_write+0x42c/0x660 [ 1916.282477] ? new_sync_read+0x6f0/0x6f0 [ 1916.283122] ? _cond_resched+0x12/0x80 [ 1916.283706] ? selinux_file_permission+0x36/0x510 [ 1916.284431] ? __fget_files+0x296/0x480 [ 1916.285036] vfs_write+0x747/0xa30 [ 1916.285577] ksys_write+0x1f6/0x260 [ 1916.286121] ? __ia32_sys_read+0xb0/0xb0 [ 1916.286716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1916.287513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1916.288270] do_syscall_64+0x33/0x40 [ 1916.288827] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1916.289577] RIP: 0033:0x7fc92b32cb19 [ 1916.290135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.292807] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1916.293902] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1916.294944] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1916.295990] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.297017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1916.298044] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:35:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 17) 21:35:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 15) 21:35:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1916.430320] FAULT_INJECTION: forcing a failure. [ 1916.430320] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.431933] CPU: 1 PID: 11219 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1916.432803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.433860] Call Trace: [ 1916.434219] dump_stack+0x107/0x167 [ 1916.434704] should_fail.cold+0x5/0xa [ 1916.435228] ? find_held_lock+0x2c/0x110 [ 1916.435774] ? create_object.isra.0+0x3a/0xa20 [ 1916.436381] should_failslab+0x5/0x20 [ 1916.436888] kmem_cache_alloc+0x5b/0x360 [ 1916.437421] ? __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1916.438116] create_object.isra.0+0x3a/0xa20 [ 1916.438665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1916.439362] kmem_cache_alloc_node+0x169/0x370 [ 1916.439970] __alloc_skb+0x6d/0x5b0 [ 1916.440463] create_monitor_ctrl_event+0x3a/0x3b0 [ 1916.441093] mgmt_cmd_complete+0x2ba/0x470 [ 1916.441653] get_connections+0x434/0x590 [ 1916.442188] ? do_raw_read_unlock+0x3b/0x70 [ 1916.442757] ? pairing_complete+0x570/0x570 [ 1916.443356] hci_sock_sendmsg+0x1b34/0x2090 [ 1916.443938] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.444549] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.445155] sock_sendmsg+0x154/0x190 [ 1916.445666] sock_write_iter+0x291/0x3d0 [ 1916.446206] ? sock_sendmsg+0x190/0x190 [ 1916.446730] ? perf_trace_lock+0xac/0x490 [ 1916.447320] ? inode_has_perm+0x171/0x1d0 [ 1916.447868] new_sync_write+0x42c/0x660 [ 1916.448397] ? new_sync_read+0x6f0/0x6f0 [ 1916.448930] ? _cond_resched+0x12/0x80 [ 1916.449450] ? selinux_file_permission+0x36/0x510 [ 1916.450074] ? __fget_files+0x296/0x480 [ 1916.450597] vfs_write+0x747/0xa30 [ 1916.451073] ksys_write+0x1f6/0x260 [ 1916.451558] ? __ia32_sys_read+0xb0/0xb0 [ 1916.452098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1916.452775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1916.453443] do_syscall_64+0x33/0x40 [ 1916.453945] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1916.454606] RIP: 0033:0x7f808a7d9b19 [ 1916.455124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.457462] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1916.458453] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1916.459408] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1916.460314] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.461226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.462123] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1916.523708] FAULT_INJECTION: forcing a failure. [ 1916.523708] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.526819] CPU: 0 PID: 11221 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1916.528645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.530792] Call Trace: [ 1916.531542] dump_stack+0x107/0x167 [ 1916.532533] should_fail.cold+0x5/0xa [ 1916.533550] ? create_object.isra.0+0x3a/0xa20 [ 1916.534765] should_failslab+0x5/0x20 [ 1916.535831] kmem_cache_alloc+0x5b/0x360 [ 1916.536930] create_object.isra.0+0x3a/0xa20 [ 1916.538089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1916.539466] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1916.540801] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 1916.542117] __alloc_skb+0xb1/0x5b0 [ 1916.543137] create_monitor_ctrl_event+0x3a/0x3b0 [ 1916.544399] mgmt_cmd_complete+0x2ba/0x470 [ 1916.545537] get_connections+0x434/0x590 [ 1916.546603] ? do_raw_read_unlock+0x3b/0x70 [ 1916.547733] ? pairing_complete+0x570/0x570 [ 1916.548861] hci_sock_sendmsg+0x1b34/0x2090 [ 1916.550007] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.551309] ? hci_sock_compat_ioctl+0x80/0x80 [ 1916.552498] sock_sendmsg+0x154/0x190 [ 1916.553507] sock_write_iter+0x291/0x3d0 [ 1916.554574] ? sock_sendmsg+0x190/0x190 [ 1916.559715] ? perf_trace_lock+0xac/0x490 [ 1916.560819] ? inode_has_perm+0x171/0x1d0 [ 1916.561920] new_sync_write+0x42c/0x660 [ 1916.562966] ? new_sync_read+0x6f0/0x6f0 [ 1916.564025] ? _cond_resched+0x12/0x80 [ 1916.564997] ? selinux_file_permission+0x36/0x510 [ 1916.566232] ? __fget_files+0x296/0x480 [ 1916.567307] vfs_write+0x747/0xa30 [ 1916.568263] ksys_write+0x1f6/0x260 [ 1916.569219] ? __ia32_sys_read+0xb0/0xb0 [ 1916.570280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1916.571682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1916.573033] do_syscall_64+0x33/0x40 [ 1916.574010] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1916.579420] RIP: 0033:0x7f7085901b19 [ 1916.580331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.584713] RSP: 002b:00007f7082e77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1916.586627] RAX: ffffffffffffffda RBX: 00007f7085a14f60 RCX: 00007f7085901b19 [ 1916.588465] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1916.590238] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.592095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.593912] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 21:35:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 7) 21:35:58 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x1000000, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 18) 21:35:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:58 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0xfeffffff}) 21:35:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 16) 21:35:58 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:35:58 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 1935.212372] FAULT_INJECTION: forcing a failure. [ 1935.212372] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.214652] CPU: 1 PID: 11231 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1935.215992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.217002] Call Trace: [ 1935.217340] dump_stack+0x107/0x167 [ 1935.217820] should_fail.cold+0x5/0xa [ 1935.218312] ? create_object.isra.0+0x3a/0xa20 [ 1935.218894] should_failslab+0x5/0x20 [ 1935.219640] kmem_cache_alloc+0x5b/0x360 [ 1935.220168] create_object.isra.0+0x3a/0xa20 [ 1935.220712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.221381] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1935.222044] ? hci_sock_sendmsg+0x1714/0x2090 [ 1935.222642] ? _copy_from_iter_full+0x27c/0xa60 [ 1935.223289] __alloc_skb+0xb1/0x5b0 [ 1935.223773] hci_sock_sendmsg+0x1714/0x2090 [ 1935.224324] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.224918] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.225532] sock_sendmsg+0x154/0x190 [ 1935.226045] sock_write_iter+0x291/0x3d0 [ 1935.226587] ? sock_sendmsg+0x190/0x190 [ 1935.227102] ? perf_trace_lock+0xac/0x490 [ 1935.227656] ? inode_has_perm+0x171/0x1d0 [ 1935.228206] new_sync_write+0x42c/0x660 [ 1935.228719] ? new_sync_read+0x6f0/0x6f0 [ 1935.229258] ? _cond_resched+0x12/0x80 [ 1935.229759] ? selinux_file_permission+0x36/0x510 [ 1935.230381] ? __fget_files+0x296/0x480 [ 1935.230896] vfs_write+0x747/0xa30 [ 1935.231412] ksys_write+0x1f6/0x260 [ 1935.231895] ? __ia32_sys_read+0xb0/0xb0 [ 1935.232447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.233134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.233815] do_syscall_64+0x33/0x40 [ 1935.234304] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1935.234969] RIP: 0033:0x7fc92b32cb19 [ 1935.235483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.237767] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1935.238758] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1935.239709] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1935.240628] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.241550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.242468] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 1935.249957] FAULT_INJECTION: forcing a failure. [ 1935.249957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.251537] CPU: 0 PID: 11245 Comm: syz-executor.4 Not tainted 5.10.163 #1 [ 1935.252440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.253530] Call Trace: [ 1935.253905] dump_stack+0x107/0x167 [ 1935.254396] should_fail.cold+0x5/0xa [ 1935.254897] _copy_to_user+0x2e/0x180 [ 1935.255465] simple_read_from_buffer+0xcc/0x160 [ 1935.256071] proc_fail_nth_read+0x198/0x230 [ 1935.256629] ? proc_sessionid_read+0x230/0x230 [ 1935.257210] ? security_file_permission+0x24e/0x570 [ 1935.257855] ? perf_trace_initcall_start+0x101/0x380 [ 1935.258529] ? proc_sessionid_read+0x230/0x230 [ 1935.259114] vfs_read+0x228/0x580 [ 1935.259624] ksys_read+0x12d/0x260 [ 1935.260101] ? vfs_write+0xa30/0xa30 [ 1935.260599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.261327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.262181] do_syscall_64+0x33/0x40 [ 1935.263158] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1935.263834] RIP: 0033:0x7f70858b469c [ 1935.264322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1935.266669] RSP: 002b:00007f7082e77170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1935.268281] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f70858b469c [ 1935.270424] RDX: 000000000000000f RSI: 00007f7082e771e0 RDI: 0000000000000003 [ 1935.272550] RBP: 00007f7082e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.274661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.276781] R13: 00007ffed378526f R14: 00007f7082e77300 R15: 0000000000022000 [ 1935.290144] FAULT_INJECTION: forcing a failure. [ 1935.290144] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.293260] CPU: 0 PID: 11238 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1935.295021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.297345] Call Trace: [ 1935.297977] dump_stack+0x107/0x167 [ 1935.298825] should_fail.cold+0x5/0xa [ 1935.299347] should_failslab+0x5/0x20 [ 1935.299833] __kmalloc_node_track_caller+0x74/0x3f0 [ 1935.300469] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 1935.301098] __alloc_skb+0xb1/0x5b0 [ 1935.301563] create_monitor_ctrl_event+0x3a/0x3b0 [ 1935.302169] mgmt_cmd_complete+0x2ba/0x470 [ 1935.302706] get_connections+0x434/0x590 [ 1935.303244] ? do_raw_read_unlock+0x3b/0x70 [ 1935.303909] ? pairing_complete+0x570/0x570 [ 1935.304457] hci_sock_sendmsg+0x1b34/0x2090 [ 1935.305015] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.305644] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.306239] sock_sendmsg+0x154/0x190 [ 1935.306729] sock_write_iter+0x291/0x3d0 [ 1935.307264] ? sock_sendmsg+0x190/0x190 [ 1935.307816] ? perf_trace_lock+0xac/0x490 21:35:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1935.308357] ? inode_has_perm+0x171/0x1d0 [ 1935.309111] new_sync_write+0x42c/0x660 [ 1935.309633] ? new_sync_read+0x6f0/0x6f0 [ 1935.310157] ? _cond_resched+0x12/0x80 [ 1935.310719] ? selinux_file_permission+0x36/0x510 [ 1935.311392] ? __fget_files+0x296/0x480 [ 1935.311924] vfs_write+0x747/0xa30 [ 1935.312394] ksys_write+0x1f6/0x260 [ 1935.312869] ? __ia32_sys_read+0xb0/0xb0 [ 1935.313401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.314156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.314901] do_syscall_64+0x33/0x40 [ 1935.315622] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1935.316312] RIP: 0033:0x7f808a7d9b19 [ 1935.316866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.319525] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1935.320581] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1935.321615] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1935.322640] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.323691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.324717] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:35:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 8) 21:35:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 17) [ 1935.415354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1935.451457] FAULT_INJECTION: forcing a failure. [ 1935.451457] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.453076] CPU: 0 PID: 11259 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1935.453977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.455173] Call Trace: [ 1935.455566] dump_stack+0x107/0x167 [ 1935.456111] should_fail.cold+0x5/0xa [ 1935.456661] ? get_connections+0x1af/0x590 [ 1935.457284] should_failslab+0x5/0x20 [ 1935.457837] __kmalloc+0x72/0x3f0 [ 1935.458354] ? kmem_cache_free+0x257/0x310 [ 1935.458982] get_connections+0x1af/0x590 [ 1935.459570] ? do_raw_read_unlock+0x3b/0x70 [ 1935.460141] ? pairing_complete+0x570/0x570 [ 1935.460710] hci_sock_sendmsg+0x1b34/0x2090 [ 1935.461291] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.461899] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.462498] sock_sendmsg+0x154/0x190 [ 1935.463007] sock_write_iter+0x291/0x3d0 [ 1935.463571] ? sock_sendmsg+0x190/0x190 [ 1935.464091] ? perf_trace_lock+0xac/0x490 [ 1935.464658] ? inode_has_perm+0x171/0x1d0 [ 1935.465217] new_sync_write+0x42c/0x660 [ 1935.465749] ? new_sync_read+0x6f0/0x6f0 [ 1935.466285] ? _cond_resched+0x12/0x80 [ 1935.466808] ? selinux_file_permission+0x36/0x510 [ 1935.467453] ? __fget_files+0x296/0x480 [ 1935.468003] vfs_write+0x747/0xa30 [ 1935.468485] ksys_write+0x1f6/0x260 [ 1935.468969] ? __ia32_sys_read+0xb0/0xb0 [ 1935.469508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.470204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.470885] do_syscall_64+0x33/0x40 [ 1935.471396] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1935.472064] RIP: 0033:0x7fc92b32cb19 [ 1935.472555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.474940] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1935.475958] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1935.476896] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1935.477823] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.478747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.479688] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:35:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:35:59 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:35:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 1935.530200] FAULT_INJECTION: forcing a failure. [ 1935.530200] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.531952] CPU: 0 PID: 11260 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1935.532857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.533931] Call Trace: [ 1935.534297] dump_stack+0x107/0x167 [ 1935.534786] should_fail.cold+0x5/0xa [ 1935.535430] ? ___slab_alloc+0x360/0x700 [ 1935.535978] ? create_object.isra.0+0x3a/0xa20 [ 1935.536584] should_failslab+0x5/0x20 [ 1935.537088] kmem_cache_alloc+0x5b/0x360 [ 1935.537629] create_object.isra.0+0x3a/0xa20 [ 1935.538220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.538903] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1935.539698] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 1935.540363] __alloc_skb+0xb1/0x5b0 [ 1935.540867] create_monitor_ctrl_event+0x3a/0x3b0 [ 1935.541513] mgmt_cmd_complete+0x2ba/0x470 [ 1935.542086] get_connections+0x434/0x590 [ 1935.542620] ? do_raw_read_unlock+0x3b/0x70 [ 1935.543221] ? pairing_complete+0x570/0x570 [ 1935.543795] hci_sock_sendmsg+0x1b34/0x2090 [ 1935.544372] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.544996] ? hci_sock_compat_ioctl+0x80/0x80 [ 1935.545603] sock_sendmsg+0x154/0x190 [ 1935.546110] sock_write_iter+0x291/0x3d0 [ 1935.546649] ? sock_sendmsg+0x190/0x190 [ 1935.547184] ? perf_trace_lock+0xac/0x490 [ 1935.547746] ? inode_has_perm+0x171/0x1d0 [ 1935.548306] new_sync_write+0x42c/0x660 [ 1935.548840] ? new_sync_read+0x6f0/0x6f0 [ 1935.549380] ? _cond_resched+0x12/0x80 [ 1935.549909] ? selinux_file_permission+0x36/0x510 [ 1935.550551] ? __fget_files+0x296/0x480 [ 1935.551094] vfs_write+0x747/0xa30 [ 1935.551604] ksys_write+0x1f6/0x260 [ 1935.552083] ? __ia32_sys_read+0xb0/0xb0 [ 1935.552627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.553329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.554017] do_syscall_64+0x33/0x40 [ 1935.554503] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1935.555187] RIP: 0033:0x7f808a7d9b19 [ 1935.555679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.558268] RSP: 002b:00007f8087d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1935.559363] RAX: ffffffffffffffda RBX: 00007f808a8ecf60 RCX: 00007f808a7d9b19 [ 1935.560312] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1935.561347] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.562251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.563264] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 21:36:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 9) 21:36:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x3f000000, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:36:25 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0xfffffffe}) 21:36:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:36:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x5) 21:36:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:36:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 18) 21:36:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, 0x0) [ 1961.678455] FAULT_INJECTION: forcing a failure. [ 1961.678455] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.680205] CPU: 0 PID: 11279 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1961.681116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.682167] Call Trace: [ 1961.682537] dump_stack+0x107/0x167 [ 1961.683032] should_fail.cold+0x5/0xa [ 1961.683568] ? create_object.isra.0+0x3a/0xa20 [ 1961.684191] should_failslab+0x5/0x20 [ 1961.684708] kmem_cache_alloc+0x5b/0x360 [ 1961.685251] ? find_held_lock+0x2c/0x110 [ 1961.685803] create_object.isra.0+0x3a/0xa20 [ 1961.686396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1961.687069] __kmalloc+0x16e/0x3f0 [ 1961.687569] get_connections+0x1af/0x590 [ 1961.688109] ? do_raw_read_unlock+0x3b/0x70 [ 1961.688689] ? pairing_complete+0x570/0x570 [ 1961.689271] hci_sock_sendmsg+0x1b34/0x2090 [ 1961.689860] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.690489] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.691105] sock_sendmsg+0x154/0x190 [ 1961.691654] sock_write_iter+0x291/0x3d0 [ 1961.692200] ? sock_sendmsg+0x190/0x190 [ 1961.692744] ? perf_trace_lock+0xac/0x490 [ 1961.693314] ? inode_has_perm+0x171/0x1d0 [ 1961.693879] new_sync_write+0x42c/0x660 [ 1961.694418] ? new_sync_read+0x6f0/0x6f0 [ 1961.694957] ? _cond_resched+0x12/0x80 [ 1961.695513] ? selinux_file_permission+0x36/0x510 [ 1961.696185] ? __fget_files+0x296/0x480 [ 1961.696727] vfs_write+0x747/0xa30 [ 1961.697217] ksys_write+0x1f6/0x260 [ 1961.697697] ? __ia32_sys_read+0xb0/0xb0 [ 1961.698232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.698917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.699662] do_syscall_64+0x33/0x40 [ 1961.700191] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1961.700865] RIP: 0033:0x7fc92b32cb19 [ 1961.701362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.703831] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1961.704871] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1961.705828] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1961.706776] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.707712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.708655] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 1961.726564] FAULT_INJECTION: forcing a failure. [ 1961.726564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.728393] CPU: 1 PID: 11289 Comm: syz-executor.0 Not tainted 5.10.163 #1 [ 1961.729377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.730577] Call Trace: [ 1961.730924] dump_stack+0x107/0x167 [ 1961.731562] should_fail.cold+0x5/0xa [ 1961.732125] _copy_to_user+0x2e/0x180 [ 1961.732709] simple_read_from_buffer+0xcc/0x160 [ 1961.733402] proc_fail_nth_read+0x198/0x230 [ 1961.734098] ? proc_sessionid_read+0x230/0x230 [ 1961.734868] ? security_file_permission+0x24e/0x570 [ 1961.735673] ? perf_trace_initcall_start+0x101/0x380 [ 1961.736399] ? proc_sessionid_read+0x230/0x230 21:36:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1961.737109] vfs_read+0x228/0x580 [ 1961.739686] ksys_read+0x12d/0x260 [ 1961.740188] ? vfs_write+0xa30/0xa30 [ 1961.740752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.741437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.742156] do_syscall_64+0x33/0x40 [ 1961.742715] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1961.743439] RIP: 0033:0x7f808a78c69c [ 1961.744113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1961.746979] RSP: 002b:00007f8087d4f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1961.748158] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f808a78c69c 21:36:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 10) [ 1961.749345] RDX: 000000000000000f RSI: 00007f8087d4f1e0 RDI: 0000000000000003 [ 1961.751377] RBP: 00007f8087d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.752502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1961.753584] R13: 00007fff3608a87f R14: 00007f8087d4f300 R15: 0000000000022000 [ 1961.806425] FAULT_INJECTION: forcing a failure. [ 1961.806425] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.808042] CPU: 0 PID: 11298 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1961.808937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.809981] Call Trace: [ 1961.810335] dump_stack+0x107/0x167 [ 1961.810826] should_fail.cold+0x5/0xa [ 1961.811336] ? __alloc_skb+0x6d/0x5b0 [ 1961.811919] should_failslab+0x5/0x20 [ 1961.812485] kmem_cache_alloc_node+0x55/0x370 [ 1961.813093] ? mark_held_locks+0x9e/0xe0 [ 1961.813640] __alloc_skb+0x6d/0x5b0 [ 1961.814206] mgmt_cmd_complete+0x3d/0x470 [ 1961.814803] get_connections+0x434/0x590 [ 1961.815391] ? do_raw_read_unlock+0x3b/0x70 [ 1961.816076] ? pairing_complete+0x570/0x570 [ 1961.816691] hci_sock_sendmsg+0x1b34/0x2090 [ 1961.817286] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.817925] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.818537] sock_sendmsg+0x154/0x190 [ 1961.819057] sock_write_iter+0x291/0x3d0 [ 1961.819628] ? sock_sendmsg+0x190/0x190 [ 1961.820155] ? perf_trace_lock+0xac/0x490 [ 1961.820740] ? inode_has_perm+0x171/0x1d0 [ 1961.821314] new_sync_write+0x42c/0x660 [ 1961.821855] ? new_sync_read+0x6f0/0x6f0 [ 1961.822409] ? _cond_resched+0x12/0x80 [ 1961.822944] ? selinux_file_permission+0x36/0x510 [ 1961.823626] ? __fget_files+0x296/0x480 [ 1961.824168] vfs_write+0x747/0xa30 [ 1961.824649] ksys_write+0x1f6/0x260 [ 1961.825143] ? __ia32_sys_read+0xb0/0xb0 [ 1961.825698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.826411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.827117] do_syscall_64+0x33/0x40 [ 1961.827649] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1961.828339] RIP: 0033:0x7fc92b32cb19 [ 1961.828842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.831247] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1961.832283] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1961.833222] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1961.834235] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.835218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1961.836207] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:36:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xc0) 21:36:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:36:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 11) 21:36:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1961.958177] FAULT_INJECTION: forcing a failure. [ 1961.958177] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.959754] CPU: 0 PID: 11308 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1961.960659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.961770] Call Trace: [ 1961.962142] dump_stack+0x107/0x167 [ 1961.962648] should_fail.cold+0x5/0xa [ 1961.963156] ? create_object.isra.0+0x3a/0xa20 [ 1961.963755] should_failslab+0x5/0x20 [ 1961.964235] kmem_cache_alloc+0x5b/0x360 [ 1961.964739] create_object.isra.0+0x3a/0xa20 [ 1961.965283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1961.965915] kmem_cache_alloc_node+0x169/0x370 [ 1961.966510] __alloc_skb+0x6d/0x5b0 [ 1961.967005] mgmt_cmd_complete+0x3d/0x470 [ 1961.967641] get_connections+0x434/0x590 [ 1961.968203] ? do_raw_read_unlock+0x3b/0x70 [ 1961.968818] ? pairing_complete+0x570/0x570 [ 1961.969404] hci_sock_sendmsg+0x1b34/0x2090 [ 1961.969991] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.970636] ? hci_sock_compat_ioctl+0x80/0x80 [ 1961.971284] sock_sendmsg+0x154/0x190 [ 1961.971822] sock_write_iter+0x291/0x3d0 [ 1961.972372] ? sock_sendmsg+0x190/0x190 [ 1961.972908] ? perf_trace_lock+0xac/0x490 [ 1961.973466] ? inode_has_perm+0x171/0x1d0 [ 1961.974049] new_sync_write+0x42c/0x660 [ 1961.974589] ? new_sync_read+0x6f0/0x6f0 [ 1961.975277] ? _cond_resched+0x12/0x80 [ 1961.975828] ? selinux_file_permission+0x36/0x510 [ 1961.976449] ? __fget_files+0x296/0x480 [ 1961.977020] vfs_write+0x747/0xa30 [ 1961.977493] ksys_write+0x1f6/0x260 [ 1961.977973] ? __ia32_sys_read+0xb0/0xb0 [ 1961.978506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.979177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.979866] do_syscall_64+0x33/0x40 [ 1961.980341] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1961.981002] RIP: 0033:0x7fc92b32cb19 [ 1961.981484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.983790] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1961.984761] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1961.985670] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1961.986578] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.987502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1961.988404] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:36:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x5) 21:36:44 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x100000000000000, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:36:44 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, 0x0) 21:36:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:36:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfdef) 21:36:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 12) 21:36:44 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:36:44 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0xfeffffff00000000}) [ 1980.664261] FAULT_INJECTION: forcing a failure. [ 1980.664261] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.665917] CPU: 1 PID: 11320 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1980.666811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.667918] Call Trace: [ 1980.668269] dump_stack+0x107/0x167 [ 1980.668741] should_fail.cold+0x5/0xa [ 1980.669258] should_failslab+0x5/0x20 [ 1980.669774] __kmalloc_node_track_caller+0x74/0x3f0 [ 1980.670469] ? mgmt_cmd_complete+0x3d/0x470 [ 1980.671076] __alloc_skb+0xb1/0x5b0 [ 1980.671577] mgmt_cmd_complete+0x3d/0x470 [ 1980.672171] get_connections+0x434/0x590 [ 1980.672718] ? do_raw_read_unlock+0x3b/0x70 [ 1980.673299] ? pairing_complete+0x570/0x570 [ 1980.673884] hci_sock_sendmsg+0x1b34/0x2090 [ 1980.674473] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.675114] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.675727] sock_sendmsg+0x154/0x190 [ 1980.676251] sock_write_iter+0x291/0x3d0 [ 1980.676773] ? sock_sendmsg+0x190/0x190 [ 1980.677289] ? perf_trace_lock+0xac/0x490 [ 1980.677842] ? inode_has_perm+0x171/0x1d0 [ 1980.678384] new_sync_write+0x42c/0x660 [ 1980.678901] ? new_sync_read+0x6f0/0x6f0 [ 1980.679429] ? _cond_resched+0x12/0x80 [ 1980.680003] ? selinux_file_permission+0x36/0x510 [ 1980.680638] ? __fget_files+0x296/0x480 [ 1980.681161] vfs_write+0x747/0xa30 [ 1980.681643] ksys_write+0x1f6/0x260 [ 1980.682155] ? __ia32_sys_read+0xb0/0xb0 [ 1980.682702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.683419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.684727] do_syscall_64+0x33/0x40 [ 1980.685270] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1980.685953] RIP: 0033:0x7fc92b32cb19 [ 1980.686464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.690331] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1980.692639] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1980.694924] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1980.697128] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.699275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.701577] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:36:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xb6010000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:36:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 13) 21:36:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x20002d06) 21:36:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xc0) [ 1980.836784] FAULT_INJECTION: forcing a failure. [ 1980.836784] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.838524] CPU: 0 PID: 11345 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1980.839472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.840602] Call Trace: [ 1980.840964] dump_stack+0x107/0x167 [ 1980.841508] should_fail.cold+0x5/0xa [ 1980.842025] ? create_object.isra.0+0x3a/0xa20 [ 1980.842667] should_failslab+0x5/0x20 [ 1980.843172] kmem_cache_alloc+0x5b/0x360 [ 1980.843750] create_object.isra.0+0x3a/0xa20 [ 1980.844346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.845035] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1980.845710] ? mgmt_cmd_complete+0x3d/0x470 [ 1980.846335] __alloc_skb+0xb1/0x5b0 [ 1980.846841] mgmt_cmd_complete+0x3d/0x470 [ 1980.847425] get_connections+0x434/0x590 [ 1980.847977] ? do_raw_read_unlock+0x3b/0x70 [ 1980.848516] ? pairing_complete+0x570/0x570 [ 1980.849060] hci_sock_sendmsg+0x1b34/0x2090 [ 1980.849596] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.850147] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.850718] sock_sendmsg+0x154/0x190 [ 1980.851213] sock_write_iter+0x291/0x3d0 [ 1980.851719] ? sock_sendmsg+0x190/0x190 [ 1980.852192] ? perf_trace_lock+0xac/0x490 [ 1980.852706] ? inode_has_perm+0x171/0x1d0 [ 1980.853266] new_sync_write+0x42c/0x660 [ 1980.853810] ? new_sync_read+0x6f0/0x6f0 [ 1980.854348] ? _cond_resched+0x12/0x80 [ 1980.854872] ? selinux_file_permission+0x36/0x510 [ 1980.855532] ? __fget_files+0x296/0x480 [ 1980.856120] vfs_write+0x747/0xa30 [ 1980.856630] ksys_write+0x1f6/0x260 [ 1980.857120] ? __ia32_sys_read+0xb0/0xb0 [ 1980.857719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.858435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.859133] do_syscall_64+0x33/0x40 [ 1980.859638] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1980.860364] RIP: 0033:0x7fc92b32cb19 [ 1980.860861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.863236] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1980.864167] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1980.865035] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1980.865947] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.866851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.867805] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:36:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:36:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfdef) 21:36:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 14) 21:36:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffdef) [ 1980.942862] FAULT_INJECTION: forcing a failure. [ 1980.942862] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.945794] CPU: 0 PID: 11356 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1980.947558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.949993] Call Trace: [ 1980.950616] dump_stack+0x107/0x167 [ 1980.951428] should_fail.cold+0x5/0xa [ 1980.952389] ? __alloc_skb+0x6d/0x5b0 [ 1980.953225] should_failslab+0x5/0x20 [ 1980.954099] kmem_cache_alloc_node+0x55/0x370 [ 1980.955192] __alloc_skb+0x6d/0x5b0 [ 1980.956238] create_monitor_ctrl_event+0x3a/0x3b0 [ 1980.957657] mgmt_cmd_complete+0x2ba/0x470 [ 1980.958736] get_connections+0x434/0x590 [ 1980.959782] ? do_raw_read_unlock+0x3b/0x70 [ 1980.961128] ? pairing_complete+0x570/0x570 [ 1980.962231] hci_sock_sendmsg+0x1b34/0x2090 [ 1980.963355] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.964727] ? hci_sock_compat_ioctl+0x80/0x80 [ 1980.966104] sock_sendmsg+0x154/0x190 [ 1980.967041] sock_write_iter+0x291/0x3d0 [ 1980.967932] ? sock_sendmsg+0x190/0x190 [ 1980.968446] ? perf_trace_lock+0xac/0x490 [ 1980.968994] ? inode_has_perm+0x171/0x1d0 [ 1980.969550] new_sync_write+0x42c/0x660 [ 1980.970074] ? new_sync_read+0x6f0/0x6f0 [ 1980.970611] ? _cond_resched+0x12/0x80 [ 1980.971140] ? selinux_file_permission+0x36/0x510 [ 1980.971940] ? __fget_files+0x296/0x480 [ 1980.972960] vfs_write+0x747/0xa30 [ 1980.973861] ksys_write+0x1f6/0x260 [ 1980.974778] ? __ia32_sys_read+0xb0/0xb0 [ 1980.975863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.977483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.978829] do_syscall_64+0x33/0x40 [ 1980.979769] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1980.981311] RIP: 0033:0x7fc92b32cb19 [ 1980.982199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.987542] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1980.989851] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1980.991683] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1980.992647] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.993575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.994512] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:36:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 15) [ 1981.103034] FAULT_INJECTION: forcing a failure. [ 1981.103034] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.104694] CPU: 0 PID: 11364 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 1981.105582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.106645] Call Trace: [ 1981.107032] dump_stack+0x107/0x167 [ 1981.107506] should_fail.cold+0x5/0xa [ 1981.108041] ? find_held_lock+0x2c/0x110 [ 1981.108564] ? create_object.isra.0+0x3a/0xa20 [ 1981.109169] should_failslab+0x5/0x20 [ 1981.109682] kmem_cache_alloc+0x5b/0x360 [ 1981.110241] ? __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1981.110929] create_object.isra.0+0x3a/0xa20 [ 1981.111506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1981.112216] kmem_cache_alloc_node+0x169/0x370 [ 1981.112837] __alloc_skb+0x6d/0x5b0 [ 1981.113320] create_monitor_ctrl_event+0x3a/0x3b0 [ 1981.113965] mgmt_cmd_complete+0x2ba/0x470 [ 1981.114533] get_connections+0x434/0x590 [ 1981.115068] ? do_raw_read_unlock+0x3b/0x70 [ 1981.115636] ? pairing_complete+0x570/0x570 [ 1981.116217] hci_sock_sendmsg+0x1b34/0x2090 [ 1981.116777] ? hci_sock_compat_ioctl+0x80/0x80 [ 1981.117383] ? hci_sock_compat_ioctl+0x80/0x80 [ 1981.117970] sock_sendmsg+0x154/0x190 [ 1981.118466] sock_write_iter+0x291/0x3d0 [ 1981.119008] ? sock_sendmsg+0x190/0x190 [ 1981.119536] ? perf_trace_lock+0xac/0x490 [ 1981.120135] ? inode_has_perm+0x171/0x1d0 [ 1981.120693] new_sync_write+0x42c/0x660 [ 1981.121209] ? new_sync_read+0x6f0/0x6f0 [ 1981.121770] ? _cond_resched+0x12/0x80 [ 1981.122321] ? selinux_file_permission+0x36/0x510 [ 1981.122987] ? __fget_files+0x296/0x480 [ 1981.123524] vfs_write+0x747/0xa30 [ 1981.124085] ksys_write+0x1f6/0x260 [ 1981.124573] ? __ia32_sys_read+0xb0/0xb0 [ 1981.125149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.125831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.126516] do_syscall_64+0x33/0x40 [ 1981.127021] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1981.127685] RIP: 0033:0x7fc92b32cb19 [ 1981.128196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.130515] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1981.131489] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 1981.132470] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 1981.133405] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.134363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.135296] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:37:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x20002d06) 21:37:03 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0xffffffff00000000}) 21:37:03 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x3f00000000000000, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:37:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffffffffffdef) 21:37:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 16) 21:37:03 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, 0x0) [ 2000.073751] FAULT_INJECTION: forcing a failure. [ 2000.073751] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.077100] CPU: 0 PID: 11389 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 2000.078170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2000.079275] Call Trace: [ 2000.079643] dump_stack+0x107/0x167 [ 2000.080181] should_fail.cold+0x5/0xa [ 2000.080727] should_failslab+0x5/0x20 [ 2000.081280] __kmalloc_node_track_caller+0x74/0x3f0 [ 2000.081960] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 2000.082657] __alloc_skb+0xb1/0x5b0 [ 2000.083198] create_monitor_ctrl_event+0x3a/0x3b0 [ 2000.083846] mgmt_cmd_complete+0x2ba/0x470 [ 2000.084487] get_connections+0x434/0x590 [ 2000.085097] ? do_raw_read_unlock+0x3b/0x70 [ 2000.085744] ? pairing_complete+0x570/0x570 [ 2000.086388] hci_sock_sendmsg+0x1b34/0x2090 [ 2000.087002] ? hci_sock_compat_ioctl+0x80/0x80 [ 2000.087652] ? hci_sock_compat_ioctl+0x80/0x80 [ 2000.088330] sock_sendmsg+0x154/0x190 [ 2000.088847] sock_write_iter+0x291/0x3d0 [ 2000.089378] ? sock_sendmsg+0x190/0x190 [ 2000.089936] ? perf_trace_lock+0xac/0x490 [ 2000.090516] ? inode_has_perm+0x171/0x1d0 [ 2000.091087] new_sync_write+0x42c/0x660 [ 2000.091655] ? new_sync_read+0x6f0/0x6f0 [ 2000.092239] ? _cond_resched+0x12/0x80 [ 2000.092816] ? selinux_file_permission+0x36/0x510 [ 2000.093515] ? __fget_files+0x296/0x480 [ 2000.094121] vfs_write+0x747/0xa30 [ 2000.094659] ksys_write+0x1f6/0x260 [ 2000.095196] ? __ia32_sys_read+0xb0/0xb0 [ 2000.095908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2000.096663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2000.097411] do_syscall_64+0x33/0x40 [ 2000.097952] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2000.098720] RIP: 0033:0x7fc92b32cb19 [ 2000.099277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2000.102059] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2000.103193] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 2000.104279] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 2000.105386] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2000.106484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.107567] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:37:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r2, &(0x7f0000000100)=""/211, 0xd3, 0x10020, &(0x7f0000000200)=@caif=@dbg={0x25, 0x2, 0xff}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="488eb6779355ef1e815597592f091db7b58cbd9d7fdad885b12d390cc178cdcae6d7f64bd032ea0feef30eb26f0903611caf8b250f205e7f37ad40") r4 = signalfd(r2, &(0x7f0000000080)={[0x5]}, 0x8) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x4, 0x2}, 0x6) fallocate(r0, 0xf, 0xb2, 0xff) 21:37:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffdef) 21:37:03 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffffffffffdef) 21:37:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 17) [ 2000.368439] FAULT_INJECTION: forcing a failure. [ 2000.368439] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.372098] CPU: 0 PID: 11414 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 2000.373051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2000.374207] Call Trace: [ 2000.374597] dump_stack+0x107/0x167 [ 2000.375740] should_fail.cold+0x5/0xa [ 2000.376300] ? create_object.isra.0+0x3a/0xa20 [ 2000.376902] should_failslab+0x5/0x20 [ 2000.377420] kmem_cache_alloc+0x5b/0x360 [ 2000.377963] create_object.isra.0+0x3a/0xa20 [ 2000.378556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2000.379251] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2000.379932] ? create_monitor_ctrl_event+0x3a/0x3b0 [ 2000.380649] __alloc_skb+0xb1/0x5b0 [ 2000.381246] create_monitor_ctrl_event+0x3a/0x3b0 [ 2000.382019] mgmt_cmd_complete+0x2ba/0x470 [ 2000.382711] get_connections+0x434/0x590 [ 2000.383351] ? do_raw_read_unlock+0x3b/0x70 [ 2000.384004] ? pairing_complete+0x570/0x570 [ 2000.384658] hci_sock_sendmsg+0x1b34/0x2090 [ 2000.385317] ? hci_sock_compat_ioctl+0x80/0x80 [ 2000.386029] ? hci_sock_compat_ioctl+0x80/0x80 [ 2000.386725] sock_sendmsg+0x154/0x190 [ 2000.387346] sock_write_iter+0x291/0x3d0 [ 2000.388010] ? sock_sendmsg+0x190/0x190 [ 2000.388629] ? perf_trace_lock+0xac/0x490 [ 2000.389304] ? inode_has_perm+0x171/0x1d0 [ 2000.389962] new_sync_write+0x42c/0x660 [ 2000.390564] ? new_sync_read+0x6f0/0x6f0 [ 2000.391171] ? _cond_resched+0x12/0x80 [ 2000.391774] ? selinux_file_permission+0x36/0x510 [ 2000.392535] ? __fget_files+0x296/0x480 [ 2000.393120] vfs_write+0x747/0xa30 [ 2000.393611] ksys_write+0x1f6/0x260 [ 2000.394109] ? __ia32_sys_read+0xb0/0xb0 [ 2000.394679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2000.395484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2000.396241] do_syscall_64+0x33/0x40 [ 2000.396789] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2000.397528] RIP: 0033:0x7fc92b32cb19 [ 2000.398090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2000.400836] RSP: 002b:00007fc9288a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2000.401936] RAX: ffffffffffffffda RBX: 00007fc92b43ff60 RCX: 00007fc92b32cb19 [ 2000.403041] RDX: 0000000000000006 RSI: 0000000020002d00 RDI: 0000000000000004 [ 2000.404144] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2000.405401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.406471] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 21:37:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) (fail_nth: 18) 21:37:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) 21:37:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:22 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:22 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:22 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0xfeffffff}) 21:37:22 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x2, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:37:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) [ 2018.638498] FAULT_INJECTION: forcing a failure. [ 2018.638498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.640880] CPU: 0 PID: 11427 Comm: syz-executor.7 Not tainted 5.10.163 #1 [ 2018.642303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2018.643988] Call Trace: [ 2018.644573] dump_stack+0x107/0x167 [ 2018.645317] should_fail.cold+0x5/0xa [ 2018.646183] _copy_to_user+0x2e/0x180 [ 2018.646978] simple_read_from_buffer+0xcc/0x160 [ 2018.647920] proc_fail_nth_read+0x198/0x230 [ 2018.648811] ? proc_sessionid_read+0x230/0x230 [ 2018.649736] ? security_file_permission+0x24e/0x570 [ 2018.650747] ? perf_trace_initcall_start+0x101/0x380 [ 2018.651788] ? proc_sessionid_read+0x230/0x230 [ 2018.652724] vfs_read+0x228/0x580 [ 2018.653436] ksys_read+0x12d/0x260 [ 2018.654158] ? vfs_write+0xa30/0xa30 [ 2018.654923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2018.655986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2018.657060] do_syscall_64+0x33/0x40 [ 2018.657819] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2018.658862] RIP: 0033:0x7fc92b2df69c [ 2018.659617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2018.663337] RSP: 002b:00007fc9288a2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2018.664886] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc92b2df69c [ 2018.666329] RDX: 000000000000000f RSI: 00007fc9288a21e0 RDI: 0000000000000003 [ 2018.667770] RBP: 00007fc9288a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2018.669260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2018.670701] R13: 00007ffdf7d9ea2f R14: 00007fc9288a2300 R15: 0000000000022000 [ 2018.697995] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 21:37:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/pps', 0x200, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) 21:37:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@mcast1, 0x51, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@mcast1, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x23, r7}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r5}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@local, 0x57, r5}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:37:22 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 2018.952391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:37:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:37:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:22 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) 21:37:22 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffffb}}}, 0xe) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:37:40 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x3, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:37:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:40 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0xfffffffe}) 21:37:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x34}}, 0x24000000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x6) 21:37:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x5) 21:37:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x88, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x506f0778}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cfb6982}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f3f2ad8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9cd88ad}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xffffff7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa1ace}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c65b06}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21a63c32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e84d6f7}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000011}, 0x804c815) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:37:40 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) 21:37:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) read(r6, &(0x7f0000000100)=""/213, 0xd5) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x0, @multicast2}}) 21:37:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xc0) 21:37:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x827, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x4, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x188) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140), 0x0, 0x4}]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rcutree', 0x0, 0x11a) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) r8 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) io_submit(r7, 0x4, &(0x7f0000000540)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x78, r4, &(0x7f0000000180)="55313803afe71e28da658ae82a00092dd75795fbc27aa9071f487865dd0df0461bc7479d79fad5eceac967af4d8228034d6995bfbe2b332af6a38ba4629a689f8c720910f43e6de75cc9347bbc2420f1389f868b3208cd43d9a23b4b7a68711a143183a3909ab7d7948f8ed8688852595e621e58e546beff88b3fb512cdfe1bff0ba1ccad00b1e55c428e62a3afd9726c1b121dc5f", 0x95, 0xffff}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="55fbb57e158b3c0ead566f1ea9fb5afcb6548b9ee80b190c12248500edd49860fe7f73fb568e1381a83c95e892f83f675d78bc10ea894ba415840de0d5d9948419be1de33a37fcc04aaafdeaff04b31e1aa2531d499c19aac2cefddc217e49a5de552469b52023001bf1837f86c399756867198b5f0bafb521cecd387bbc32592419c8fc3fdba725df7e3c03caa07f1f37ae584647e07e4319e8660f432179c85d901ff783ebfbb50b0eb1645a7d4d8f8dcc26435c764cc18a8d1933938bfca7d8cc3c7f28c24ca6dc6eedc8b80406601f415bc51f15043b401dcaa160d41bbb5ce3fc6db3746b149c45024a024d21eaeff57a60ebc140506a76b1d702fff6d2c2b24172154b8bb51a5beddbfbf60a1f43f69fc4118ac2660f24b9af47a01a5259c7b763d42088d0d350764b2b8d9dbf3a0c6a09d041f22bc7e6a3045b01502320929aad1f0af4b5b70df541c5fc076bfb37d511b2f110248f65428b0d1a8ddfb1bcff9c1628681f412a3c18b85b7cd6a4333f5dfda42195a4d820c54b9640912b63b542de0bdd8e2a5d99026bc7adb5713e6152e6db1810a1072b5d35daf287badeb42fa74c75d37452eb16f66249532ee7794af78c18d30da00973de03846cd8063104514cbc6889d22b922d6878e770407c890150c59a0f712dabf3eb2ffc04abe5be6087b491ad492dbfdfcdbc7784905fb892d365a3b423d13453d090fa8c2a41f5c85cdb5482ee194171b9d78a62508ba9fb67a5e91839b3d222baf592d33e47cca3f24ab2202bef89ba66f5df7a40f2f1606b464a81f52dd55289832fd19bcebabf087e096fd82be43f0b9e926a52746f868aa8e9143e5404c5e4e75c66b1b6ea9deeffbe7afe83eb86671743333d5be8a730347b44c72a29ed51bb7b55172e95ec1025cad23ac0b3bd8afe9e0ae774a0cb2aaff213373e6fdc004cc6748f219b8ae39c63bb9ef12b62e9f90d2a0dfcfeccc1f638a2722e0d943f0728a853512f6b1b8c33c5902090377879ecd3f291910f0001dd37560ba64f60c19c00393cbb65a975a5184c74f84b720b66aa5cf12c9edecace79145871e058961907a487e2a38e8970b165882bb1a15f1ec6b36e9d6c151d66e29b22accd6d61b0579ed0b36c480e815805016bd7281b15d42f0466e1a82d8ad0eacd4f5ed52152c276ada665cc80e390833f2f22737373254cfcb97bff58e97f20af2de336dd6144acc489ba1240c344011950facf042a530676c8745f540fe334adcb8ba1b9700beba02f08300107ccba1255b78a11f687bf20fed7df3cedb0753e1cb40eae1f31a49493aabfdf67ff0979036be36b48fe49a0d48d9a072bc8fd2afe46efc8aaca29a9122634e13862df8ae6681016ab5be8b04ed38db1300be5566c27780aa5508934709cec8f2b3bd059766efd1533da628b22977eb917ac44aaaad23efac5455f8b997814b23e20652a4fd32aacc40180ee7f6fbb619611bbd9672f360d3725f8b7c0ea287ea7390d2e4f144554d2f0d328d10431e21ef386b0f55606251fc0b9ee64ed963adbd4fea9ac1d1a4ca5e3222f407acb6f340762b893ffb36d009d6642c5165754dad8986220e7bac040b2d055c0f15ffc58fcf8d43c0af061d7699ad219babe12753bd2be6731818034b0fedc019a4f7b82fcf99064df3ab9e292567ae00755e8abc5dc597e2753a01971a5141b1e53a9f4a5540e3ee7523fd2f9b4333ec38d5882294be8b1665d33fce7251251435aaf25ff8d087738248b6bc3897e9d5ff958836bcc9914f62516158cc52aff9a4cdfa3637a3f3576bac38ac2fcfe160633e174b69d700c94cb4c24d2415d575a6f4c55b04e72bf8fdb52551752b0599bfbef2626314b10e0a923e129b78ac6c0eb06b5fd44b47eb0d5e2550b2c8f8e7a7ad7fb6a677ffc68616dd07cb2e68c43b865b3f02c708a05b33354496b05d2ce033b21998f8d6a345fd234b30c04aedb34be3676fa442f8e486a18de8283c208ffe1555efd64ac65250535066d01b4c2e849e35f08221c3d53d343ab5ea542cd1a330c063c29b3d852addf2e8f0ff5e05f3f67cc75093cb405b4e4c5362ece2d5e16edf6bfa4080dec7d92d86f7ca89e189d3cb7d717745220cd3fe888541b8244627ce011e3c001491b132be488557c9be609f8a9e84e22a54547ba2159d5bf79b3dfacdc7eaa19e202c1d363d08bb00e5ea972e09cb6fb5c76164e7c54848c3ca7af343b35dbcfa587ae3ec8a083e64c2cfa0c7d9e7289ea4e736b5e2726b35017418657bb237bc609bdb7974f270c349183401412513b6227b230084b5fa1f6f685191b7c43b5b17834d538eb748e2f994ddd72f7bda04297f72d6bcceed65adbf844a54a5975e31b5aec075388f4ea1ed4db0ff3bbb38a45c5eff4d2ef4afcc31de209b4403689f8b765db9f1f0d3d4f3a6ebecf296646534b467055264d343a17ff2e95f1f7754566b51bf6202e2ab712e6cbfbaef96fc3e62daa893767b18dd80e753f49f5d3557e3dc48aef6afec75f757076c2fabb2bae69a5c490ab6446abe5512710a1c2bfb6ecce3d7728686e5933ba1a66fd59b4fc7606a29319099188f55a9103132f595d3c60ce97df3c61a73c3db26e005b114a38bc65ff7c3ed097c7a5919598a000db38955ec17393f47bbcc58c32dd3f50cbb9b5ad565aeea94820b020a61d8887f9f38e60a6ceee4ba7d48cda0b1f08078f87859186707d56c07f2883d767c324c1aeb7328ddadc10d93cf824fa2e573826877b95ce03cbe6883c5b0b5b1d205bc177d58115a7afb0b34a5293b9f36ade42226aad6d23495fe8cafc280488387a07574a1e305a0c6bb112445e243a618d24e939ddfe200f7f15104a7760d4fea5c9532f5e4c1fb094ece130917c9cc91601dce307570a9e0acd9c9f234e15a89a593d799ba5f0ebcb1320ef8edc1656a784ec1b9c6bd63e566418d7c328527aeb8c6cf3af40abb645485f0dcee423e16e41e6917c50db41b841b820fdb4b71b6e3c2ec012e29b6347c841aff3b43adde8bafc916a1d3b2772a0573a70a514e001232f89415d64b9981b28bc661c03939fd6764712ece2769d80e20a67a9b1a6b64558280978d39c78623e1d9b0dc1b537901fd6dee5def21e9630f81b9fc13815efbdd7a2a103954e269d4ead47be44d28bc9c334220b9e35c9cfc695496b6c9fb37a0ddf3c9dbc963c5bc1bac9472030a8722439f58b3604af565c9dd40755bc7a2b3dc1d1e93ee45a2403052aeb1ac494be251ea948e3ce76f69671c80695807cdc7b02159559d8798c6cc88a9468f3e0ca939fe9d92a03cb42b6e085515cbd5ca0e23ccb958d513c2f1386bc9815601936f52b16f1398f54bd9f56c4b7795fac067081e64fa3a12eb22fe2f870e3c9d8e2f351bd46e20e2d1a68c09576f994d4883a099386a980a55b72a06dfec8dd772ad11c5a67f5428d76babf7a4b5df1db3744def128431ddabd95786705c2f1ee01bd2885b7a3343f07cfb234adc19170257e975179d26dda5bbd2af9df1104cea56b2dfd90acdd6ed6bdf5cacf463ec6192969031057450955a9d2b55173fc26390c944fb9f37d1665df98218c6be1df5fa4b113d19b0f41a87a57cc2c3f7c44f5c00cc49ccfc720b6305e224b46db3c6a3f3bc659f99719c88a506433e4d8a3e78ae9255ef442a275b57051c30f6f4b2be8c4faf545db150fa1db1be7df80a6957de15ddb14a36186a7735bbb3ddfb44895424bc7862571854f1bf28ecd7b3b8f0ec88b8459703dcdd57ef7a00b3d07517d9841a912f52f1ca845d6ec1e7e81f025a5dfd1dc0e987d1f9bf3e7ea55496bd911c811ac3da29a459ee35bba9fd76db394ba32e185d6fabb4a2f8374ff20af149fc3e8ff6c75effb84ed11957c8d01909cd278eb73c514cc623edae0353357e6c891b728c7052b3ddaf85e6f1cb40d2b164b79aed72814bd52835c08b8544e428568ec3156bb3300ec5ad7c3fb00b53d8a9006f0313f39c41a1804412f391b98620f5aeaf5646e63781c671ed1a5ff9f6246648ec266e05ed3bcd1d29852b0c6c686e2f5309d64307eb871f3b7e16f64dd4f30faf53272ad75e270a35aace4574fca9bbf6fc7648cd25e757fd29dda673e8b2e96fc1c07f61721870f4a57b792235de55dd3fda9955f136094ec079af166726bacde38e6fc2e9733aa7b1e642df13a6d22193eac04dc330848048b3f97f00301a001fb41f00a555dba67a647ee9ae35ed40f3705ddb3ba124c4ce11300d2e6a5f72c87deaf91fae7a66a04c80b24227cf991cf38b5396107b7585f0574403087f9b53ebfebb725564f4b54f8ec1c3e8f978894bd8c2558464df6ba1276c83c0c21705e8be534991c6834217e4c8f036273ca8dfc64bef92a080fd4a44896f2bb3759cc21642e4862a5e4ebce69a2739eaa98180fb214252fcdf8d25f4516807a600b957cfc510b2352d217862178afea403b9dacca79a122ece7506df01ceb9a63df25f8c3ae1da551bb3cdd152e9784c6afc5a6575b4a0660b231e2a0b88252270049b31ae72222cfdf17f05eec5cb747c1eed9c1171577b351109c458acc4e10849fe5205f9771e8fc4d2181e2b7892711864a5ce39823d8f6f7b40f7a1f3dcf12dc0d83d454c550549e5eab417bf89b27482f24867e1965275b2a6debf6ff8a910eeed3a8214c5c00c439173d52ddc59c50835dce13e0f527b8088da74f20156d835007bca8cc456ea6ceb239b13b789760590fd3462f98f636b21a1f08eed538df595fa398d95f3c66ba6dda4e1a833c8409fb5d8cb77f59f117e5b41c2275d2acd66236702de7214614e4ad02b2d01b3f96695628cf1f53885510b17fa01c807562c6e27de2512603e8d0ff76d68fc74e8870e0153c77f6bbdc405c9326472c8f2479132c1d9fb263f8a9279b7882c5647932d25816dab14f7cceae1d56ac79349b4ea388b9d1603568eb10268bbdd8e92cb87fd4174386d6b55f0c104e8643197c627e6ba86d30ad89d86d5f7c11ccbb726c9635e8b157ef90c51dad27d7d30d455ebbb92894848b881ba7581918c83e12ca07b16951e83f5b291a3ef2dec0dd418db32bce479b6ea6a27105242f4c736003c2cff5192681a7a098dfa967ff760feb0abaec999dbe41d63d9c0180a4719592c1aa4f32be41dbfb9e6147d0c1fc6fc121b3dc02d352dd332444b3ab0a9039fbba7cbe23a234bddd20b923232ea625cb0372910341d2d5e41414f26ba97dd920c00d86f226cb4b7fc3bbad305ce9b3b6b842bb2062c5247eb4fa3dbe603c42399e43f9157112a80e29a1fb84184260ca3df6abe9f23871f57e985d924a26fe14f0c675a121cd2584d7aa896be3d1acdad62426d38063ebe3f790d7fd4cea71d7ad85cb5a9f124e425bbf877c5a7fd6598fb904c8c9474e7d22d5f5e8c5acce5d74326d79a520d013e7f6699db8ae5e71627899659e0ac13de1a46604640b3a2425d604c53e507e21c1afd4360c59f73557881f49b7852de91b917ad0af2f9a9669231f14f4c72b2ccc3c27938e93443eb40e0750f6f859184d7b26e421455a3ed501a903badbe085834459212e5a98f5a487c22cca70e6f78e5c32bb8388b6f812320b8739f4edf5ed03e92b4a03dd7cb99a6cc259e13925cdde3eeab565e5104370c2151179aad99bd66f106b369e78a9cb2a1b5c85f75611dc7117c3afabb7f30d16fe71474923741eb5de07adede092d3179ca40a9d24fbae3a50ba6b418cf0129b1c8e5ca448771dd7038d71638504ca247ebe97bc75ddd3424ce1d3b2a9b1a594b61846", 0x1000, 0xffffffffffffffff, 0x0, 0xa00c30fb0be42e73}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x40, 0xffffffffffffffff, &(0x7f0000000400)="5369cd4e2f2aaa1de06db990ce443473c828eb803ec0a0f27ec68e6a403a7639484b4a9642684dddf48d555091b8a49f7ce2d385e555efd1a15e4ceff1fc87f8e46e698795f08340015ede7f008cc4b529dde4d213c06f71a79766b8811221e11e4aac2f59c2235d4c2a52adf9d0454163fc086d222d72487431137770b0d4399ad7e0b794ba3d3610f17341f0822874e08de1350c4a4cbd3b19602192d462385d87475adb1e1fa116573e1e9393fc1f7d656b91c144788d8c762fb2c5476fde4953cef21a3c1b87bdb7c288f01c0a3af991fdb75bffce37acafb24ad6137981fb08be50f8743000"/245, 0xf5, 0x100000001, 0x0, 0x0, r9}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f00000016c0)="31319273c0b2ffcba8457acb2a91ee838e9ce0969e2709cc2b0434dcd78715ae00e7252706c41f729667efadce1e4e817aa1a43259f567efcc501962170f35ffa0bee87bae2a841058d0462c5d3767895e5be0cdaded19c53e68f08960dfa8de96396d22facfac32fee2b3db5842b5dc383fd0aa02c8fedf959067a6e616d8585a8e419eefa05c8e87ee893b9395f80bcc941b75eb385bcf259bd392e38cc2df971332bf3d016d4c3c832737615e252d76948eb81a3e5b28e447c10a84aa07bb1b20c9", 0xc3, 0x9, 0x0, 0x2, r4}]) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x6) 21:37:40 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfdef) 21:37:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xffffffffffffff5e, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6038430}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1801dd50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x777a8d17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a380b01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x678c92cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d002acf}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce9b15d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378a1263}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41637090}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16035840}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a16baf3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ae2217}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13f3c573}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbefb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6026385d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7355e700}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6029448}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x830e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb1f}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) [ 2037.181899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2037.213542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:37:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20402, 0x20) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000100)={'wlan0\x00', {0x2, 0x0, @initdev}}) 21:37:58 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x20002d06) 21:37:58 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:37:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x8001, 0x3}, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x9, 0x5, 0x4c, @remote, @loopback, 0x8, 0x1, 0x503, 0x20}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="40022cbd7000fbdbdf2509000000180001801400020076657468305f766972745f77696669002800018008000300030000000800030003000000140002007665746830000000000000000000000038000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYBLOB="d233cbdd96875ff48203093b72d5e1d197d612509a785c5b1dcb99a5d3b4d6dfd4951aceb6c92631b3a9a53bcddf0958e470de2e429c3ff7bd73544cc619f360ee38", @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRESDEC, @ANYBLOB="1400020076657468315f6d6169767461700000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300030000001400020076657468305f6d61637674617000000008000100", @ANYRESHEX, @ANYBLOB="3c00018008000300010000001400020067656e65766531000000000000000000080003000300000014000200766c616e3100000000000000000000001400018008000300000000000800030001000000200001800800030001000000140002007465616d5f736c6176655f30000000001c000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="2c000180140002006272696477655f736c6176655f300000140002006c6f0000000000000000000024418987b711a10d16ca00000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x200000c8}, 0x40008a1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x6) 21:37:58 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xb, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:37:58 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 21:37:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffdef) 21:37:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:37:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:37:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:37:58 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 2054.834986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:37:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0xfffffffffffffdef) 21:37:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:37:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:38:15 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xc, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:38:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:15 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0xffffffff00000000}) 21:38:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x81, 0x64, 0x0, 0x0, 0xe24a, 0x2100, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x8c4, 0x1, 0xac, 0x7, 0x9, 0x9, 0x5, 0x0, 0x1cc, 0x0, 0x5}, r2, 0x10, r3, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) recvfrom$unix(r4, &(0x7f00000001c0)=""/178, 0xb2, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) write$bt_hci(r0, &(0x7f0000000300)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x7}}}, 0x6) 21:38:15 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) (fail_nth: 1) 21:38:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:38:15 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:38:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1e8, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x1ac, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeafc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2987063a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc97f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbe5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e9f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x554c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d5815f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2262}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10bb68c4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394a1971}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a593e72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46430b7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46cd6d65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6688}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd07b775}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd0b6da2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48db008b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299d5f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e523596}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeb2d414}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c9edd12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75c7cde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x489e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cea3b2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41399bde}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f38839}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9a50f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b80}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55130a34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d1b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3908}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5eeab}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9faf}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 2071.935325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2072.027094] FAULT_INJECTION: forcing a failure. [ 2072.027094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.030396] CPU: 1 PID: 11629 Comm: syz-executor.2 Not tainted 5.10.163 #1 [ 2072.032218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2072.034383] Call Trace: [ 2072.035108] dump_stack+0x107/0x167 [ 2072.036104] should_fail.cold+0x5/0xa [ 2072.037120] _copy_from_user+0x2e/0x1b0 [ 2072.038137] semctl_main+0xda5/0x2800 [ 2072.039067] ? semctl_setval+0x16c0/0x16c0 [ 2072.039942] ? lock_downgrade+0x6d0/0x6d0 [ 2072.040779] ? perf_trace_lock+0xac/0x490 [ 2072.041638] ? SOFTIRQ_verbose+0x10/0x10 [ 2072.042466] ? perf_trace_lock+0xac/0x490 [ 2072.043323] ? __lockdep_reset_lock+0x180/0x180 [ 2072.044251] ? perf_trace_lock+0xac/0x490 [ 2072.045110] ? find_held_lock+0x2c/0x110 [ 2072.045930] ? ksys_write+0x21a/0x260 [ 2072.046693] ? lock_downgrade+0x6d0/0x6d0 [ 2072.047516] ? find_held_lock+0x2c/0x110 [ 2072.048333] ? ksys_write+0x12d/0x260 [ 2072.049164] ksys_semctl.constprop.0+0x2b4/0x320 [ 2072.050129] ? wait_for_completion_io+0x270/0x270 [ 2072.051098] ? compat_ksys_semctl+0x380/0x380 [ 2072.051987] ? rcu_read_lock_any_held+0x75/0xa0 [ 2072.052933] ? vfs_write+0x354/0xa30 [ 2072.053678] ? fput_many+0x2f/0x1a0 [ 2072.054430] ? ksys_write+0x1a9/0x260 [ 2072.055220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2072.056266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2072.057312] do_syscall_64+0x33/0x40 [ 2072.058068] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2072.059096] RIP: 0033:0x7f102d85ab19 [ 2072.059849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2072.063549] RSP: 002b:00007f102adaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 2072.065120] RAX: ffffffffffffffda RBX: 00007f102d96e020 RCX: 00007f102d85ab19 [ 2072.066582] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000021 [ 2072.068057] RBP: 00007f102adaf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2072.069512] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 2072.070930] R13: 00007ffdaf42f7af R14: 00007f102adaf300 R15: 0000000000022000 21:38:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r3, &(0x7f0000000080)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x3, "d581a5bcd6e2976fe0082b43c05cd339cf96de3c5494b4730be2128f4b6252"}}}, 0x24) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/174, 0xae}, {&(0x7f00000001c0)=""/168, 0xa8}], 0x2) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:38:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x9, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x9, 0x4, 0x2, 0x6, "844b4b44c7690d7c80276c9cb97d151945cbaad4830e164c009c8de128576e"}}}, 0x27) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100008000300000700"/18, @ANYRES32=r8, @ANYBLOB="0c0006000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x6ee737e760645377) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x100, 0x70bd29, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x5c}}, 0x90) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:38:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC], 0xffffffffffffff10) 21:38:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) [ 2072.502233] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2072.506233] EXT4-fs (loop1): get root inode failed [ 2072.508055] EXT4-fs (loop1): mount failed 21:38:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="020026bd7000ffdbdf250f00000005000f000300000024ab6364cb9e198c94451b21322c760c466936217af47ad59d91ce93afd20abd8dfc9468b0029b321303be"], 0x1c}}, 0x1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x40}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x20}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000084}, 0x20040884) 21:38:36 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:38:36 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xe, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:38:36 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) (fail_nth: 2) 21:38:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000210}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64048080}, 0x20000000) 21:38:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x410000, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="50b5e4b4c8ff2cf6c365452dd88d9a1948d84235b7fcc8f682e867b50c6b16a38964d2fe6bd2e103f58a2cc69e", 0x2d, 0x7}]) io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000140)}]) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000100000018000000", @ANYRES32=r10, @ANYBLOB="0486739d0700"/16]) io_submit(r2, 0x6, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xff, r3, &(0x7f0000000040)="66907a6bde6b08f2b35ea388f77a0290351abfb681cd01dade49f3ca768e21fc9b8bf801978afc3ffec14702e1ed77eabd4608dee4", 0x35, 0xffffffffffff7953, 0x0, 0x3, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, r6, &(0x7f0000000180)="12df0b814f7fe44f90c6fe0a90025080e792202537a8890e62b34950fa8398fc4e6a3b1d3dbbd5c8d3354f51d9daa0493867cfe89ce7c93d894a22c96516ea69d50bad5a4be1b438ecbe38974e76770c80055e7fd7c4602b93511adf346592550d825a8720e4a96c7c6ec91e150021d8442a006540396eba275a8290d225e2e31cdfd676e2d3f97eb11585ea59aed54563af1dbe4925033c939725cd2d127e31323186112b904051d1eeb4727d9c1b4a211ee373ff17de45b0e00228a208a3623d33a224441a87ead27557e3a389d4c380d6681f41e96f09a8bfb66c63bbad29c2b3c8fd45eeeb82100aaea60415f73c4a05a15216593c", 0xf7, 0x8000}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x65b, r7, &(0x7f0000000300)="5792f53a5cb3b0ecd62db077e7b051a211342fc63bb943f80fb84898f2aeb7baba6065", 0x23, 0x4, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="7b62b6ae52596e96d8ce6c7b5818617c61c9e33b975a99e5bf4f8bed9c9787b2c82a3aa742cd2ed599d60fac59a22338428c36233621313f1b2b60d992b9f3fe9f1ebb161318599899ada003d69cd5", 0x4f, 0x19, 0x0, 0x2, r11}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000480)="92a03ab8fc99d66de04480cad72338de4d87", 0x12, 0xbf, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000500)="2535573f736f945465cd87a399888af0bb234b23c330a377fb1bbaa293d754fdeeca63e3e2f1bf4ff39d98530dc05ddd0ead91f5fa2596f7bc94562c070287ae84774c8e66b2ad4777d2e049fffbb3fdbd958bd394a3344e8e68b3563b6a2c74fe298281a719c876e6b95118df14a37d", 0x70, 0xfffffffffffffffc, 0x0, 0x2}]) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r12) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r13], 0x6) 21:38:36 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) [ 2092.836058] FAULT_INJECTION: forcing a failure. [ 2092.836058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2092.837779] CPU: 1 PID: 11688 Comm: syz-executor.2 Not tainted 5.10.163 #1 [ 2092.838723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.839821] Call Trace: [ 2092.840195] dump_stack+0x107/0x167 [ 2092.840716] should_fail.cold+0x5/0xa [ 2092.841287] _copy_to_user+0x2e/0x180 [ 2092.841958] simple_read_from_buffer+0xcc/0x160 [ 2092.842622] proc_fail_nth_read+0x198/0x230 [ 2092.843198] ? proc_sessionid_read+0x230/0x230 [ 2092.843810] ? security_file_permission+0x24e/0x570 [ 2092.844465] ? perf_trace_initcall_start+0x101/0x380 [ 2092.845164] ? proc_sessionid_read+0x230/0x230 [ 2092.845760] vfs_read+0x228/0x580 [ 2092.846216] ksys_read+0x12d/0x260 [ 2092.846683] ? vfs_write+0xa30/0xa30 [ 2092.847179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.847854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.848539] do_syscall_64+0x33/0x40 [ 2092.849029] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2092.849716] RIP: 0033:0x7f102d80d69c [ 2092.850200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2092.852544] RSP: 002b:00007f102adaf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2092.853625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f102d80d69c [ 2092.854526] RDX: 000000000000000f RSI: 00007f102adaf1e0 RDI: 0000000000000003 [ 2092.855432] RBP: 00007f102adaf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2092.856356] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 2092.857288] R13: 00007ffdaf42f7af R14: 00007f102adaf300 R15: 0000000000022000 21:38:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESOCT=r2], 0x6) 21:38:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x1b6, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:38:36 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 2092.976932] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2092.996126] EXT4-fs (loop1): get root inode failed [ 2092.997383] EXT4-fs (loop1): mount failed 21:38:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0x800) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRESDEC=r3], 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000001c0)={0x8, 'sit0\x00', {'veth0_to_bond\x00'}, 0x9}) 21:38:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x800, r2, &(0x7f0000000140), 0x0, 0x6}]) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/145, 0x91}, {&(0x7f00000011c0)=""/243, 0xf3}], 0x3) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008f00), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000009040)={0x0, 0x0, &(0x7f0000009000)={&(0x7f0000008f40)={0x44, r10, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x118, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x8004}, 0x4044) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:38:36 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:38:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r6, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:38:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, 0x1}, 0x6) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040008) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:38:52 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x1000000, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:38:52 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xf, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:38:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:38:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xfffff93c}}, './file0\x00'}) write$bt_hci(r3, &(0x7f0000000140)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@none, 0x7}}}, 0xb) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) 21:38:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x600, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:52 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:38:52 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 21:38:52 executing program 7: ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000080)={0x20, 0x7, 0x7, 0x69}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x6}, 0x6) clone3(&(0x7f0000000340)={0x68800100, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/110, 0x6e, &(0x7f0000000240)=""/181, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x3f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@any, 0x40}}}, 0xb) 21:38:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x700, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:38:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:38:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1, &(0x7f00000001c0)=""/182, 0xb6}, 0x140) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2109.493310] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2109.506463] EXT4-fs (loop1): get root inode failed [ 2109.507523] EXT4-fs (loop1): mount failed 21:38:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x900, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:09 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x10, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:09 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 21:39:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x6cef, 0x80, 0x200006, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000240)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x8}}}, 0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x633322f92cdd0053}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000080) 21:39:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc9, 0x2d2, 0x77ff, 0x8001, 0x1, 0x4, 0x9}}}, 0x12) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:39:09 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:39:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:09 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x100000000000000, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="073c677c12f2eae6c1334ef6e898f1c050da7ebde0ac64881a27681b96a7c4589ad4919b8abf7b2e2e9c8e3807eb7f16783436ad30108f8d7ccf10c5545551cb46e559304bb5c0f8a49f75072ca9c7c1b5bb90885a6657cd0a3b38e331750013391ff2adc1f256ed5a65d300899a33dacc0bb5576653d0e606b9545052b6c5d47f02c36cd9d32aa5c983464956b8586d712dfa7e4e7820647ddda9", 0x9b, 0x101, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x88, r0, &(0x7f0000000380)="dd6de75d3b0ee71bfdc695087c5888add5abab24097017a3a41cd9789c253194592cc9c967c8a5a931b835cd61867ec3e47ac1201d7851aa1507a447433721a49077fc14523c653ce8faa81819c4bb9423e6ebbe40dda0c9f5dae31a020bace75a6eb4632891079a039cd303eb7b3cb7308ed74fb65e46bb90169c04b5bba179688f586d9cea49d20e2c824f07451972f99bdf1e618a41c95f4216", 0x9b, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000480)="7a1fb2051a1325405cd486723cf90911481a0fd62c16d393f4d38a8f375425b487a83e54d753c825202468507238ad249a435ac06e2e7878f98c864cb32ba7d1ed7a8c994fd80a151ffb6db26682412d29ea5f4e1ff756eb2096c91ad323d638097837b872d8fa1f5e1f8076e31705fe414511097c5b8c617358c0305a0c63cc80be12bdb1e881b422fb3a7e071a9633fed471435047b51ad631ac42479932b475aa12da3104ffc1ed80a517eb2b282880ff545965710554d7e9c74923c5c5b715765efa0adf0e516b6d164d", 0xcc, 0x6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f00000005c0)="e8f9d28cc75dd0d34f8c286b7c8c31b5d8ba3848", 0x14, 0xe4, 0x0, 0x1, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0xd458, r5, &(0x7f0000000680)="0337582f10ecc020fc9d8f7d365262293f1815a75a720fcaca81e8b8a1256291008e3d2f4fe2d051c27488410f1552322d5b698569feea506dbd48", 0x3b, 0x3, 0x0, 0x3, r6}]) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$bt_hci(r10, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x6) 21:39:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xb601, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2125.887882] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated 21:39:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='gid_map\x00') bind$bt_hci(r1, &(0x7f00000006c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x0) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:39:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r5, 0x1) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2125.898220] audit: type=1400 audit(1673905149.474:123): avc: denied { relabelto } for pid=11821 comm="syz-executor.7" name="HCI" dev="sockfs" ino=38891 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=bluetooth_socket permissive=1 [ 2125.902170] EXT4-fs (loop1): get root inode failed [ 2125.903353] EXT4-fs (loop1): mount failed 21:39:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000100)="9b98fd7883246b288891c5c2f19282bcc1b37d6217137bc57367bb136e7e7a1476fb2411af91b383db1f761fe3b399b42a4d7b41dfef449b93dad0f760bc50e2f4ea2bd8b7893040c0bef0419b7e13b36ac8066953fcffe5e428b4652be8d56d1abc3561a2419c06716f58e4147805a605a5dcea45fb3b74a14a") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x0, 0x10) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) write$bt_hci(r1, &(0x7f0000000180)={0x1, @reject_conn_req={{0x40a, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}}}, 0xb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) io_uring_enter(r5, 0xec3, 0x10ae, 0x3, &(0x7f0000000280)={[0x10001]}, 0x8) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0xffffffffffffffb8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) bind$bt_hci(r7, &(0x7f00000002c0)={0x1f, 0x2, 0x4}, 0x6) 21:39:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1e8, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa461}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8201}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59b189c1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1742}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5999272e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6275efb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64d3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc04f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc763b8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x117593de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d02f88a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b34a875}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf7c884}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5e0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17a5aabf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36af16af}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43901dc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60ce47ca}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aa9f51b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca97045}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41d59619}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x380af5c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ba0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1914}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40fc9201}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bb829d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24900708}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd61c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6027a3c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37b3832e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1841cf52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19af9669}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYBLOB="ce8c7c2e858d216148d60c07b5f5445c04e727d0", @ANYRESHEX=r3, @ANYBLOB="e42fe4b3d2f800f718cc513f9af66ae63e0fd01f5fa1185241188ac7204cc747f2a61b339986e21db27de5a1c6debebe90e62010159a4691139f779304d3458fac12553ece8a72cdb38576ff70411e29cadac3df535d447cdf319c6d4abf8fc101fdd88c3089583571bea9f2f604f8a8de04f39973b238da9d9bb3f6", @ANYRES64=r2], 0x6) [ 2126.060177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2126.082372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 21:39:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x34000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:27 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x2, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:27 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:27 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:39:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) 21:39:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:39:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI, @NLBL_MGMT_A_CV4DOI={0x0, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0xc1) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) 21:39:27 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 2144.210104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2144.249888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2144.267137] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2144.283487] EXT4-fs (loop1): get root inode failed [ 2144.285357] EXT4-fs (loop1): mount failed 21:39:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:27 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:39:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r3}, "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"}) io_setup(0x2, &(0x7f0000000040)) 21:39:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x400300, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = fsmount(0xffffffffffffffff, 0x4ff8fcbc40ccbf29, 0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x3c, 0x410, 0x70bd27, 0x25dfdbfb, {0x19}, [@typed={0x11, 0x31, 0x0, 0x0, @str='NLBL_CIPSOv4\x00'}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="ce3eeb66d0631afb3bcf1b863cdfd35ba30742fecd851faad9542f10dcddaf8228615884ab5d1de9e98223c9db600fdbcc63fd5ca96c32ecb89fb999947c828e9cf5487ef344d7f6f24015977e65196b889073832af2cc575729e620035e94d32d958224dfe6c7fafecc26bb61e3b5c9d4f780c2bb19cc4b1d978f9e290ade78ab6120b0216511e842241c1be839c2f01f8822a2ca7046af05aa2b0ae8aad71f49d4e740e8da07a9376fd0d7f5f6cfcbd632119f0e5d0f2b6b876a6582dfde86c2ca80a2ee5a4c1423afacddb3ee5132b497e7939b556c47fb8dd94bf8546ea72462a7923a0d0f9fe939c3bf", @typed={0x8, 0x15, 0x0, 0x0, @pid=r3}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x88c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:39:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4c8400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000100000000009e17f3d5788cdf387bea6fbca7cdc20000e5cf8df6000005000000000000000c00008008000d00ac1414007c1a8ca3aee5ff0219acb87ab2876e1deaa910ffc384d10f5d60bd19ad512c5dd4c53f449d0f387a40f7e18eeb6b0a6c183495cf1b85f35c5fce1061ca7f43bd87b96c87b0b233611517bd2d346017ba6ad6baa9822e66603bd7770214b783efcf85c6611a9fa974efa4e7bcb60f86"], 0x28}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x40, 0x0, 0x9, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x40800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfd9, 0x4, 0x7fffffff, 0x8001}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r6) write$bt_hci(r5, &(0x7f0000002d00)=ANY=[@ANYRES64=r7], 0x6) [ 2144.556201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:39:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2144.578263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.582088] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated 21:39:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = io_uring_setup(0x7846, &(0x7f0000000040)={0x0, 0xd21a, 0x4, 0x1, 0x325}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="93399c0a212e205493402825cfd3539995a7fe3331325f6b1601e5f32c97609697e9134938daf71bebfd2bb6833fd507ab87a5bb937d0ff17bd6563e59eb2e0125958beb96801c9256f59610d970e73a27977b4dd9b055c6e1a36e6c77ab0a9bd536cb35e25cc3168c83e122ae80a6cb9c4ead393ff7a7921e3a79391c9ecfb0f225be731d29cf9a0c342441961eb8c45bd2dfbf691882aeb5dfde"], 0x6) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = syz_open_dev$rtc(&(0x7f0000003ac0), 0x8, 0x200) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) r9 = inotify_init() r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r10, &(0x7f0000000140)}]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="fcfe363c2484660e2dad4ed2e5ab9347c1debc3ad8e2ebdea8dfdb76f0819266a4f46c8a9cb44e1f17c4e9cfc9db3792084d32de6150ff618d272ec393bf1a5a17a5d41f98001db293f263177dac3f734f1ae44910aa7f03aa59e2a09c34cc85bbc1fa09f2da9253dd138fc9a0439b4ed23bf4413f22f7e238c129754003bee08ed609606ce4191a3bfb495d7c8ed1b3e1c7eb1b56f86e71f8848f12625ebf4cb04038ea56fbe3489fc6252e7da369c5f178c33e98fcac0eb7d4a865916a12a7a775fd424eedc8df8950aa07aa576b40adaf58afd22dc4f6c4368dea6017343b98442f1e7a3728dc547921ea3cbb0c140023fb1220", 0xf5}, {&(0x7f0000000340)="6a36365a9e8800f86757111a1d15dfe3691b95bf970a085fe906bf9763e2a84ea12078484ac9a8dc321de6949cd17bee7c5edae46b188f311b4626d9d19c04b43ea8b6456e115be948865b3f127d2fb7348331937ca06795b0a42a76cb589bb1ec2ffd84469d01d2b47840b31c634415aba88d14d2fb9fe287a0b427a052712a3cf15cc8a4975e864cfdf17780152aa26ade7cbcf250f43ab7e414624c9be63fafc6e7dfdd992027a977d8c58b3e32960873d169c3b824a0ef1fadaf956097b87f6afb", 0xc3}, {&(0x7f0000000440)="baf549d29a72bf3ec8495d650ee85c38fc31e120ae1ae11e9eba0448c3c7317af27875d2f1efce8af11fc8a4f6f703e2c6ea1a77d86809ecae3b82045574bb73", 0x40}, {&(0x7f0000000480)="431ac0c5ac276cdca316ccbc9d489e88df30b008a579b537f3a239f23b0526d8c0465199d367efaba8b56abe186a293f098b12586408a2095e082317b5e44c89dedd8a85fd8c8a1c7f85f9feb0ee448b6c8ff7163091002a6c1bd75157966394e6e04efb3266c85e3b02e230dae5c2b071b219960842ecf4861f7d95646243d7f42b51dbee7288ee25c026a4dc2a66d47edc53c88077b7ca99a20f7b0dab0bdf8c03ad626a4d793113de648b1d0c70", 0xaf}, {&(0x7f0000000540)="e86f0a42dcf0ea146d9d8f3ee061ea289f8a27b474cc0f349c4b268f8c313d14d994b621010a86da4eec1b198a08eb801bfefb38d9b64da53f56022ed34060ed48e73dfbe9a358b65955c22f762b53612e64ec344d02a733d2182439fb017282b2bd71bbdf408409a737ce45ef1386227f9ed1840305e2fb4d905e7cb3d63170197e5dc92b2639921681f354036d6e27054981405c1c2b4845df24c9e56f84f1fe1ac6c0f6c052d92382ffa8569c9c87ad0cf613fa1cc02cb2e259b6806a537d", 0xc0}, {&(0x7f0000000600)="8008e9d6834dabd8b617e097054feb11f7be4acf6b8a9524967d89fdcefcede0a2b130a46b2f37ffc572ed30beeed0f837ab3bfc2c1eb0e2a35bb00902cf06fe1b39a92f9825028cf0c0e88241dd4cb31fed857dfee6693c71c6801611c8f2fb52f06628d7d834a9addb8a22b594efbe598cdf8642cd9ee155d16f1c4dcdb6e53be8a09e2d83d8772ad74a182579861ad3035d75c179117a631f95d803f78ffba5b4b8", 0xa3}, {&(0x7f00000006c0)="13d21a82ce9be441f185bb18444e6d65e033ff260fc2a1049e3c8c884bc9aa2cc783d7f186c8203ea46f7d91cf1c3096f848dd6e7a46d731f2f7bcc26171a003b8e9ad79288945b6aa41329c99d61f95c0ca9e3135cc4d905285ab4beebef91feee87f8f41b1a5171799932cb19e4042661602f5206ba95db3f3b4011c53f383407a701f5c678854f9796abf30b69e6adf264350df7d27d51f61f8611756d37d75474637419158fd026dc77975ab11c8ffe74fa0319b9cd7e68fa01474a4", 0xbe}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x90}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)="1093910d6f6539e00e19f554f3bbe9c1831ff55ad17ec18c826c898f69539f4be2b62f64d3f514948bd498428aa4a03a061fbf1857aae2a6f97f700aad5b7bb81246928948779475", 0x48}], 0x2, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r4, r6, r0, r1, r7, r0, r1, r9, r10, r1]}}], 0x128, 0x40084}}, {{&(0x7f0000003c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003cc0)="f05ec4bccc8427130a45a981dcf410b91bd7106cf2ea069b7d2b2a2eb93686439a6aa4477177e7f113a1610024bd0bc759cf943651f8388c82ef1eee9d91272c2c5ba8d4ec02996ab95fc5195a15bd623bec77f61ec81cd96f43f427600f2b3893dab5e60a6cb0792097", 0x6a}], 0x1, 0x0, 0x0, 0x800}}], 0x3, 0x0) 21:39:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000100)="c2faf2f6079974dec3d732e02c1d30366cce6c3e9a2a440d7925e1d7df4b967a5c9866585309ade3a11b4c1455172a38fcb3fab2d439da913f7b3f18897b0e73dfea4b231d0c0c214867a945e744246e6ee308550efb4d3c6b2ae5edb642f2bb29cd968a92219e2f3a4ea8751cfb5963146df46da86e33e8702567cec16a7e6d5a6b49da0d686ba7924419d8a318d6f0b64f6247148e69c061d7a3961d1150e99c0317f097706a773f1f3fbf23b2935576aa03bc68d04f8a55fbd5de65ee057995649d1cc05b3d21933d2a6a6346ca0557c5505c59a9d563f0cdccb782f5c4") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2144.608480] EXT4-fs (loop1): get root inode failed [ 2144.610962] EXT4-fs (loop1): mount failed 21:39:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:46 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 21:39:46 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x12, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:39:46 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']&\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ',&!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:39:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r3, &(0x7f0000000040)={0x1, @write_sc_support={{0xc7a, 0x1}, {0xf7}}}, 0x5) 21:39:46 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:39:46 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x3, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:39:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc901, 0x0) write$bt_hci(r3, &(0x7f0000000080)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000180)=0x1) r4 = dup(r0) write$bt_hci(r4, &(0x7f0000000340)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x9e, 0x38}}}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) write$bt_hci(r2, &(0x7f0000000100)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "9b0e9b5f71423457b3c2ad094f846979", "a2ab73c9736c80b16334af7523b87163", "61dcc6762316f17f4b5714663cdb1c10"}}}, 0x4a) 21:39:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@none}}}, 0xb) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000140)) write$bt_hci(r3, &(0x7f0000000100)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) [ 2163.470046] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2163.480338] EXT4-fs (loop1): get root inode failed [ 2163.481471] EXT4-fs (loop1): mount failed 21:39:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r3, &(0x7f0000000500)={0x1, @le_accept_cis={{0x2066, 0x2}, {0x1}}}, 0x6) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x39, 0x1f, 0x40, 0x6, 0x0, 0x3f, 0x20008, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000280)}, 0x822, 0x9435, 0x74fc, 0x9, 0x81, 0x4, 0x9, 0x0, 0x7f, 0x0, 0x8}, r2, 0x8, 0xffffffffffffffff, 0x9) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x4, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f0000000540)=""/21, &(0x7f00000005c0)=0x15) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYRES64], 0x48}}, 0x0) 21:39:47 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:39:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:39:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, r4}]) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB="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", @ANYRES64=r6], 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r4, 0xdc5f, 0x8, 0x7c3ac163}) 21:39:47 executing program 7: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:06 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:06 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xb, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r0, 0x400448cf, &(0x7f0000000600)="c02ef068cc96ee76eea9d03178f9a1609277a10686f0c9ad646b9b6f5c32aa6918fda962297e47060115524c6823b979baf201c46844def0db82f762020af598cf") r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000740)="aa24c81b6d8da650c88053ee98b904430eb51714befb563a5461d197e4ff3c09ff62f077ead63a", 0x27}]) sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c01000042000c002dbd7000fcdbdf2509000000ed008280733347587631407347997ab8169375ccfabf5820f8d90573f702215f397652b2a1eb5df8841f645bba1ca673f11c1b279b3a9f868b460885d528280c580d4da34ca94e4e990962f353f2df7ce8905d6049eedb3089b60ba017c28ed3b1d51733ca9029ac6ff51292418da557c5d0f46efa3e701a8ccbcb4e2d99534e90a4fb9d6129c80b09994a16cafd1ce110ebc59d5d35d467db4ca6845fc2c3f873a2d986228d7c49e6720f4fdf71192d25d5ddaeb8d55c3ba952b43b847b746cda4ee3a1269ac157b6edae3f0fbfaa3c5275a01be0f3ea7809e3da2c98ab187b0c00090001000000000000000000000c006d80080016001f000000040094000c00640007000000000000001400698008005a000083a45316b41de3e41b2de30f54897be8671c86265a41215d784bb2007cbe821acec600dbcceaf40820437f2a81bbb347ff91430671bf3184b463597b05b966834a4825b16f04445e6ebc05b3f4188db340fd5e0f9d544b8d8e29f4b260dd20367e513c3f947b805b046f6ad09bbf5d50145f9d4f7ca1356b1b798a90918b6550c3cbad98800ea3840ef210e884c0b83ee85e2612f63349bc206d81b60e7eea6f6bfcdda9e2e26466b52b88e0a567235d4d", @ANYRES32=r0, @ANYBLOB='\b\x00a\x00', @ANYRES32=r0, @ANYBLOB="0800900064010101"], 0x13c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008005) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip_tables_matches\x00') bind$bt_hci(r5, &(0x7f0000000500)={0x1f, 0x2, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000005c0)=0x1ff, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x33c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d18e835}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ab8c142}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50502cdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1969b446}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fae8cf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3423f52d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f958bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d52f21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4415e82a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x160e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62fc2455}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc48f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b4b3af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53314ca9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x262db694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dd85824}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41169213}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f0bf972}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4186d9f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12efdd5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x638961ef}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4588}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57bd517c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8051}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60641012}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe325cf9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b582a83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50964893}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa2bd8b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c56ad1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2521883e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cdee8c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf96a0b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e764ddd}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75dc7317}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38dbdecb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62cac69f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44c9028}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1667c045}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c98e818}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x615b6e0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aa5b043}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x118c303f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x604dd280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7778f057}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x33c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) 21:40:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x820, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6) 21:40:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:06 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:40:06 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 2182.553422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2182.562778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2182.626973] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2182.636382] EXT4-fs (loop1): get root inode failed [ 2182.637516] EXT4-fs (loop1): mount failed 21:40:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) 21:40:06 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) fork() mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r3, 0x1000891a6, &(0x7f0000000100)="bce0168c96c887609f9550f9e9232b0b814107fb938ac0f7377dfa50da1034b4b5d89aa0aa05b70ab34b3574979e68749fb5a7e08b4b1ceff2289fdf3521663a07bbd545f361c94f9b98d1182f5cb35df2a9fd81d1ada06d81b145f6e312790184c4d2eac1ce13301a3beff7523e4253249558c792de4aa03a20767bd0c48dabe22c77a8bb0e181d26d78fade51af39e45c485be8d7eec1927bb6dee224b3127f08ccb90d2b5b90fca9683253ad5ea45e1656809b1fcd8ee1bd98e8376d7c16ae2") write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:06 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:40:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) 21:40:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) [ 2182.905024] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2182.909976] EXT4-fs (loop1): get root inode failed [ 2182.911107] EXT4-fs (loop1): mount failed 21:40:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="56593d71a83fa3d17a3f892b261fbf794cf35b2136cbb6b8fc98be8d07c065606323e186c7c220005e40d1bab112763d721b729917d410b831aaf2ccae740b09115b4e8418d52f5e765202e3e3ed216d8a129aae0b3b3ae8da950e48fc638b8fe61c006431485bbd172aa5991ddf5cdb1f2aeefcea45d0227a803d78045f9ee037795920c45f86b71f1b142cf7b3229457c71a63b4c42ed467e0f76474195bc44a3144f10594fa60112bed0118abe2d79074f51167a9647d19206aecb8a0b3c6c639a8") bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4, 0x7a}}}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000200)="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") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:40:25 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x14, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:25 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xc, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:40:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000300)="f1815d35aeaf8a36070b5af23cde9bd159b882d6dc727a8e8dbc1cc438d5016fc187908a9dd35122642be45e7e5a03ab625b955007c8420e21812463e3f05b23122d7873d81de9ffa0b4e2879dc7c57af2fca708f2ffadaedd1567bb45fcbc3f9a359ed60b7d94827b9fdd4df53856235f19e81bce5becd6963511996552c071803d439d312966f0fa763c87dc37babce103fdf84a1f39e822891af0007090d4a9a8bf02e0621a35c3f548c145305833aae482bc9d09c9e285a5326c1a98a93ca50a794ca065d522271334c9fb16c64c1b03a1f8875d3ce7cc8279b690b07c78a98294") sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf2501000000c80008801c000780080006007a0000000800050038e7fc1c0800050022b53f241400078008000600b5000000080006000000000034000780080006005c000000080005001cccd52908000600bf00000008000500b2d2ba3408000500d26cea59080005002773600a34000780080005009ab50900080005009bbf2d1308000600f600000008000500d668101108000500333dbb05085d2900be5ab4252c00078008000600b80000000800050094991d7408000600b6000000080006fff800000008000500521ca94108000c8004000b80080002000100000008000100030000000800020001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40810}, 0x20000001) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc64c0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x1}, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04007228bd7000fcdbdf25010000000c000480050003000600000008000100030000"], 0x28}, 0x1, 0x0, 0x0, 0x55}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r8 = openat$cgroup_ro(r3, &(0x7f0000000540)='pids.events\x00', 0x0, 0x0) bind$bt_hci(r8, &(0x7f0000000580)={0x1f, 0x1}, 0x6) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x4, 0x70bd2d, 0x4, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) write$bt_hci(r3, &(0x7f0000000080)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x20, 0x6, 0x5}}}, 0xe) 21:40:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:25 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 21:40:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000001240)={0x10ac, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1098, 0x7, 0x1, 0x0, "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"}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x333e41, 0x0) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f00000011c0)="d4d1c8ba36e29aa71cfe461ea096b5143f31e33594215a42220f139516736fc01f7bb55fca27aa24ab8204419643f1aa1cff7ab055147ca80468be311d1b303d74b03d") bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240)={0x8, [0xf0000000, 0x3], 0x6}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004850) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:40:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="01e6ffffffffffffff000500", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:40:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000600)={0x1f, 0x2, 0x1}, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4ec, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e9434f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fcf7ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47ee8c3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3c4e10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b7e221e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a643471}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16309de7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742856be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bc8cd6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fefa689}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c6e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28ab56c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7008}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf232}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaf8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61dc9dc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27b4660e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf603}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d60}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9635}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c3586ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5316}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24a1}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3da2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x194, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2874a36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a1ed621}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1115bb34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x608fcc07}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dcf008}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6afcd582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe54479a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb409ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b1cd3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54280f1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x535b7993}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eefe7f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44cb9251}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9670c57}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24cdc60b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbec10b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3457186f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cd45a4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e5f1e86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2598901}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19c042d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71f21d2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x458f8574}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9467}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4091c15a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd7397b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7812d560}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ad03f20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d91}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d4f3ebd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe28b136}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x461240ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1744229}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x727184c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa84c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x725f092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3afb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x447aacd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5632}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab0aab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79300b97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x966a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf85c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe307}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ce91f9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb704}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x645b97f4}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc922}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45da8f73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7273}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f68fe1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18b242de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52cc6594}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x929b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5922}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e58b786}]}]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x4840}, 0x4008014) [ 2202.030039] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2202.046129] EXT4-fs (loop1): get root inode failed [ 2202.047418] EXT4-fs (loop1): mount failed 21:40:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r3, 0x17, &(0x7f0000000040)="f3e6aa0b80648e00a57c7738972b526ff06988a6a641e71de9c4bc164fe040f92560c0e01a8947bf141d83b300dfafe0d8ff0e898693d04a7fefad8e2400cb54bf49d779d1bf4a48c0a74c601a33afba7e061b97a7ceb9e7fb2e4f2971db1a1e1f151fba667a7df592ace7f83360a7cf810ae8") write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xb6010000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:40:25 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) [ 2202.281035] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2202.287332] EXT4-fs (loop1): get root inode failed [ 2202.289318] EXT4-fs (loop1): mount failed 21:40:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) sync_file_range(r1, 0x2, 0x100, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:40:44 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:44 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 21:40:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000140)}]) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x11) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r10, &(0x7f0000000140)}]) write$bt_hci(r8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r10], 0x6) 21:40:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0x1, 0x7, "31ab49", 0x2, 0x7}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7020fbdbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060007000000000000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000300)={0x3, 0x5, "7782d6", 0x80, 0x1}) write$bt_hci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="c771c82e4607c17f1cf99d1742b093d6aa7c74750175d955c4e1eddb64e2a6296bffe035b5b8807ed118113dffdb823eff92bb92ae1345f0ae1e9b1224cd3cb17af43277ebfee28d3b21cbb7d7a86c821399a104a24c38d3c2384acb7369bfa3027c76a5668a0368869a24936c31d3d51f"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sky2', 0x1a1541, 0x40) 21:40:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:44 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:40:44 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:40:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) io_submit(r4, 0x2000000000000192, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:40:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000040)="3d444df6e5d47849b58e642446be3b19225326af0e68010dd95d6980b9da0d3b4d43569a1ba9bd4f5b4e21f2f3e88c928ee32b52076557893daf6a9beaa21f2a0cc7520fee4f02b2e915d4885a801980") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) [ 2221.085187] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2221.102126] EXT4-fs (loop1): get root inode failed [ 2221.104034] EXT4-fs (loop1): mount failed 21:40:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x7, "67f339", 0x3f, 0x1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:40:44 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:40:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:40:44 executing program 4: flistxattr(0xffffffffffffffff, &(0x7f0000000100)=""/174, 0xae) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x25, 0x800, 0xf4) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0xf9}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:40:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYBLOB="19a69cd0d909ce3c2dbe2e7f53d2c98c1e65b4b82a1d177d95c5eccc92081a78b8e5fc438b8be9eabd4911eb1b1050adecd03975c8faa1efef3360320782658de891583df61446232371972052e5a55067f119d282031b6a0ff16497f57f954667a6ba4ae54d463eef9651954dfb158a427ba722b127da2e4f9f284e09e983b99c2efd5177d63e5d434e1129c4e1b5021f28", @ANYRESHEX=0x0], 0x6) 21:40:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x20004004) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:41:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r5 = open(&(0x7f0000000040)='./file0\x00', 0x14000, 0x130) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x4, 0x2}, 0x6) 21:41:03 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:41:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x7) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='\\!(\x00', &(0x7f0000000200)='y\x00', &(0x7f0000000280)='bridge_slave_0\x00', &(0x7f00000002c0)='NLBL_CIPSOv4\x00', &(0x7f0000000300)='\x10;{\x00', &(0x7f0000000340)='y\x00', &(0x7f0000000380)='bridge_slave_0\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='$\x00', &(0x7f0000000480)='}::!\xd6:)!\x00', &(0x7f00000004c0)='NLBL_CIPSOv4\x00'], 0x100) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000100)={0x8, 'bridge_slave_0\x00', {'ip6erspan0\x00'}, 0x1}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 21:41:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x108) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:41:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xe, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:41:03 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x3f00}}) 21:41:03 executing program 5: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) r3 = getegid() setresgid(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xee01, r3}}, './file0\x00'}) fchown(0xffffffffffffffff, r0, r3) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000200)=""/214) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:41:03 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) 21:41:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[], 0x6) 21:41:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 21:41:03 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) [ 2240.321476] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2240.340009] EXT4-fs (loop1): get root inode failed [ 2240.341347] EXT4-fs (loop1): mount failed 21:41:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 21:41:23 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:41:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x2e2) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, r1, 0x0, 0xee01, 0xee00, 0x0, 0xffff}, 0x8000000000}) 21:41:23 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x1000000}}) 21:41:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r3, &(0x7f0000000040)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x4, 0x3f, 0x37a5, 0xff}}}, 0xb) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:41:23 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0xf, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:41:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x111480, 0x194) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f0000000440)=[0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="64108d9679db9cd025a440d7a5cd3d3aec6c7100e79f826fce15166cbec951ee52ed64057b3e7ed17432793ca9d2242e4384815cdfe7fc1ce9f11a8385349ff2e44857416cc60bf29406412a8607650e5f1d35fd7c0997736e45b7460762638264fb19fea5d9b8027addddb749e768c59c0834a9e3", 0x75, 0x0, 0x0, 0x0, r3}]) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00008000000000000040e7"], 0x15, 0x0) lseek(r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 21:41:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x3, 0x0, 0xa, 0x6ced, 0x1000, "6e6cb0b07b41cbd758d56eba2f339472836fd802b81650a34af7b4940ca593a5bc272cfbd33eacdfd519d0fb2833cebfd0e35847054e95c1319e5916e2815342e186538e87a11e83d6a74cda3622a4a7d3e585933be16c3a5a857c07a7387905137c76a7ed9d09e891287a5bbbf9106231f14be526fe57eedf613da00be92ce32051be760f62dfa5f3a5af25888ed4ffcccb1e4393bffaa71ab3c719f21e2fd91e05d2cf5bc7322f269c94df037dd673957c9ac25d8a186784036e0b08262588a6c74e6f13b723d773c99e3fc34defa4d105db399eea74dcefe40fc271f11463b128310b1c51c5e87c58f4748a50685af04ebf416253924634c6f50e92693dcfb7fe7eb118119da00f4ef6be3b72f45eab6a64326710017e3526911074814e97b98b2cf40b13df5b0c704a1650e11a09f7e742f4a901d9949c777f08b3f1bcfb7464a5b4eca69e91c111d36a513bbd6c6f3cf26aeab8247ebfdd0fcc7a0e079e31f691e42414aedf73dbe52825e61c0da0fb184dc5f9e23ef5c4a6680c224fbb24195bf5432c8eb47e6a29f4eef538e700d935a7f0c3981636c975f5d324349bd8eb71d8f6c9b00f4ece37c34a5cef3255d804c7131e2908d13583b0b0de567c51d021d66275ea4efdce73382e4fd243126f3fdc349b0447a62fdf36fb26418b0c3c5191f923972287d317939dc4b8ca333fed912618c3f9a945d8d8c79d14ba01f7fdb47eba2c26ef21e7bbbb1a08f55c136ea1ce00874bfe48cddbb69844a2042de5bfca44d760f165b447d703a3cfebd9b59bb743c427689f2d0fb8de078f90bb8dd4b0519a7184d283e2cf616b9e112c888a433863339f2c98e888578d2bd81fec6dacb68f7c532d983f000e808b0e0af849fb75b8f8d62870f2cdb88bd934ccf6eb8c72d9b758c5bfcf9bdbe11f9f7d616144d8eebf52d8800b764137196e5467bd480f466ebe82a4ac1877cb07805e7facba62030a94cbd5defbc46203afcc80f1641c06bb314b903ea9c141876d9cb647d4b964c9af3a6f7e215b32f294d1e64f3f1340f8ec565467c5d0250d572a7fe451f4cab1d64fec0ab2cc9dd6d0060f48585847ea963e25dc569e11aa369bba5b3e9722b0295d2cf0e1e1a2aebdab838259f1d7fb149c879128a63d16a7e06783a93e21c64400272638ec6654f81de4d1ec7d2b41805c13b75f2139f8de50fcef284398ce3879e0154c0d31239d8fdea19ce1d8728296ead45a7db639953d52547ead35c5a3e53d0dc14ea639163afe045cdad1c569213fc1d4e8c282c077c1a0ec6506752fd7cd73c158d6568344314e07e36aafd12642d14633ada75661be52766d8e064cce4e1eba2016fdfe1143a4c1684277e67af3fac418d102ffc71a45eb475bfc7fd8b39d60f87d66a1c992f974636ee234d82f5d73594233ccca78d612d72a76c1624b278bfa6bfef9c80276ad020319800d123766a1fff3afd4cd22678161182019eed6bbac1a627b57721dd028e51f7e9c965b3fb324b51efc88b81d5d387e2af4d283b769314952f97161a74060a9995c94c5eaf1b69a94e6af0aeab077d5875835db5574db3bf0db047baa546987ef20359c2f54028e360c31aca1232cd7ba4f71a16c9f1fba677bfc1c98550e262a572c1510641e9212ccd6b64721023a649730f7a0dc78533e4d4c72f187d78b48b2ba9dd52cf6e7830bcf74876a1609db6a0eca29d35e86c742cf6a0906eae234e40d4f2d3bab2407f65b3e1a796018a0576dc1b34ff206cff6b3a6b7c4ffb4c13fa74f7942181ce3032ad6d26223c0bbb4e4a59fab73b0873387c1e65945e9f9650e649f5702ec5d7975bcd8b10c97e455eb0efbc8a5afc02fc6323f6e3c9364b1589897fc3387fe319e46d635f2955aed1ab7b672a6b986044cc7cc5e5525d47e5b9853dd778873d2ddc35571f236f88667469187c786a0a32e0763319b0e14ac358b79661f11d6ab364212cd0492e51c10167ed203c039b98e8a9e791e417342e19a47aab5c79aceffa55ab91c5327527d650176b917b0f79ec23373638297784f8f19d9d457a33a3d74b589560f0528c806ab064f947761ac6b5560dc99a0c63e6947df0cf4c319964d183ecb8dc771f2cf9dd475c25e05fbb819eb3fca39df1841aa76d2b27d9196a00bbe3a2e8b8fb268a84f989c60145231b93c11f4e7fd862ad84d53c9114686fd2e745f92b74783c984b55500fea01d37251b29f212d750af27cccba477da75b1799b6abc6b184eb8911462d551912b12a94418266e894b8e11f9a67283ffdb5e9ef6d5168820a6e692bedb705176488bc5598b73440bbdcde7917b775b6dc69589c54abb270283f03793c89a6848c8076bf8ed832e7b784fcaa28822bcc271ace7d7f7483546c5980479f307c00c30a6e6bb62b6afbb176856b8104efd5f018873ab48eadbcc53a403f414c532a7b6e8c81e10462f3ac5f85bae9586a0a80e4e8e823797e81168ab0867997370bf352fa22764f6e4f3860233bc66878e35bb42da1b26a3626ad7b81d22c91000c9038728e34982e0462d87959f371ca83089d99cd046ed5ef5c8affe37d31a0ce0b18f0318569477c597b1042fd95cf759df37b18633c94a7f9904ff19d39a9a2a802d75784f2bfc1267c8fba93046d87b68fe75cc05d3db522eeb3a85aa2ea60bc1c2b8e4dfce7b9784463e94aa38e9c733213cd2f06fc82f19b9968d403ba621a00604c658ae6c7f9b1aed6b1bc6cc078f9e3c5d8e477149332fc2705c0f2608893d0b3dfdccc790de18757b0267d99ecf8517d9f25b3d1701a9f01d3eb1f12c6765ba0fb95c961058cc0a2305eb7069eac9b5cdb1f562405043ca5e6ecf402f33acc7acc4abd9c9acb055bd2e34426f658fe9bf7a8b4862588878edd3167f2cf7efb53d9ebd1bb1f9f091f2796c4b3e3db9107ef24eaba84cd88ee433ae7d549bdf3a7869e6b39d5f108f0b2c9633a32ec9cdcfa61d056994348579f23862f212f823f0506da862c1437ad1cb502c31cb8cebb0a6dbbbae7b0f179446915b2aad213a86c1ecd0617c07388d4fbb742c08ef3618769716ff6009fb9394a9d907fe583c66c5034719df40866231b8151cd319a16e83c4c6bb382c2f4f406c58f81a39e35484fcd1bdd8452868e3df0e02672734e05385ed6e7771d751ec54de212a95dea34c3666fae5e93a6b949a1fb7c2f12a04cae15f19008f60d2bd6e34387155c2a251e071db901ae552802a91b1db1b84bff5f9f29f62b02949c4ef4072154b4b4c752a475fcbae40893bd07681b56b9afe27798a6f55fde4a6b8ac14012606d821c4228870a0a786236ad4578ca32961711052f81c486777297e9c5668d2d0f132c58b118c6bc8f1ec01806d1e34ec134993b2d7801ade6543e2cc1930b8f36f35328722e93610ae4fb0eec1e40449f2817320e299117a3e0ca85b9c25bb0c088dacee5cadb16539d5f08b02b83fafde6f2f0f83e11edf5959fccce396494992f19a7fd62e8334d6609619e8c0f68f06e8285f4e00a813cad2968aeacfc41f0b14aecf1c72b4b6058289d61b11426768cf1215667fb47b767ba63bbcbfbec6b783b33760fa34edfb7b998a76c3d7aeb350eac329a40b528b4261a7331aefe658818bbc8ad1b8d82b2cb19e8d10f82d253da7b2414808bbcc7f3b2dfcdde66f7a545abe89e23b6020ea912816ffcbdcd489172763d9b36b06f4f2aa048b396ad6261dea1ca4cc9e24a65dc10bbbf8bc906bbd0ded6915e4b6c40281ac650dea29b207ae64d070abd1dfb02d0a57e9c9716284dd306ec1c5f5e2fe2e435cc33ec25c6827bd41aaa0856aa2dbffcaef89dbafabb257f1e236df2b0e527e15b1629f2fddd871442498b125a928fdae2234f939cd552e523e9bc81cf1f14495e23116c7d5f9c1ca08e1a01a8e0bb6f3bffb3782abc5cf7d7bb049992b63dd196a7ecd2dd35a2f45c03adda834bc578fd95f343a477af39927633d3be8f18290fdbb02374cbc8002e934bb6f2170aa9b4124c7ab07792a02428f2917808fc0b8a6d6d071730dad2631432661195ae5bece11744535bad88a729c33de59c66187558d7f26698802f3f499be871f845ce0a6bd2acb1f10897f55f5e8e9959d34210744080595046db918556ef195790262d1a8e8512b911dbace5552898cc52f315ec2eb35850d4dd01648e860b755bae68625b0d2ae604305a821ca0407f944d29be1bba13abc3ec3b9d322e1ab7c70b301c5ac32e2b4588b228adc93f1c359b6a2926a2bc0ef3e6563edea790bb3d548ded4b389e7b892d24546ed48762b317200c889e470077280e3b4853a252e1b1cc949eefc3d563b4d251a93da751752a0d96c51ceba1ea877cdfec4d355d0b1792003a42a979abc2915b40652f90c406fba4d38767b23ebdfb84711b3ee9ba1021f0ea6e386d98d61a1a8bfcd9cd51aa3858695277d96b50d786d17cc68cf8a393508dd69e9932d0e457fdb202e539e4cc7fe3fb688aae141578022998723ae2c4e2d81b0b8d64d7674e4d4a91e9256e8d14cfc430fb573591aef40e3b1a2c5fa0d334c025de8e6013c1c3ddb0bbbe1f3515c4bcebccb050fa3cdc827c613b53d8e2b4c79ae282653a76f98256258e27e9d2b77b3e14685c937f3698dc0fc1b427f14f5ee08f05e002a58cfe8a74e109987a0301bb1a4fa3c73cbb1902475f521fbdb773496c7f954b6c2e0948ca443cc7f6978cbd4ae9a60e6d63f3d0372c575d5d2a51e24e871e712961bb5c5996594ab36ca7a245965c40ab6cf955db000006af2cfe43b4aa1668f02e13d17cbb50c81ec3c793eb51f4e9c7f50f38af465f302b9c1dda1702fdd71b6a900beeb5f87f4384029256996164201effd90d8eee0718eaa462fb3ad24d18198a22947dc54031f9ef5be65fc7eba9b46ee04035125fa459231fde840e6f54dcd99aa13291a878d59b58a60dbda9afaa45d5f689b87b17b286bde464a5a058bb75ec5fa34bd819731e17d1ce13ea916612e9e64bab427857ca245ff00531e897df653ef2d7a056a4a7afb56c1744913b9863e623496bf3872df7cf4aaa35e3ecfb88968479102b77cb2f0d58bb228d9a48b10fd5744912c9c5b802c3abdeac36931015c2968083ffe650d634dd4d4fd0f26699ae144685ec0b232b62caa0bf7fe45c08f2200c8f4d740ecadca841b153c076b33e87f5570e879d079034468305ac50bdd953e5f53877bfc4ae7fddb358afed070657f8a9963d8c4e292abcb4953e80ad147a92daa04256a1a92666ce235863ecb4afb63a90225cf4bc79e267a68e2c31ea6d6ab8f6d0fc7b3f5b8530d1a3668344d5f2364f64249b86e215a761ad2b0feb56286f131b116bf87a1db27253e82732682ea0247e9b8cb9255237dc07fc1f54d8c0023c88c58b8591a435e6d2f9819e93bad516da763e157fd9186eec4421f5685f30b062faa81044e70266596cb3fa6d6bc4e302bda16293222c1ff07e4f37cf47009df7da105f572b054512a2d1c9fa97cfd2d07566c64772da4e6b674793469e4997971572cf39f76bd8723bab6b01edc40286d08e5028147fba9c9abae0068e8ce3cbd286adae91aa86e5d38d0526b110472ac636d31fa93f6ea4f97350410b65413873129a79d619adeb1980ad1b29cfd8e3f700b8121684d204c52f4d7cce79f2340dbee9a631e776df2d72911a98f6c6d0e80f790666efc0dd922c7bb4297648e1cacdfcfb0224973abab9fde26f030376064c3e4582374c94e865ec82aa189f7054eb5494df0696bc483121a47d19355c675989e4f6810f81742c2"}, 0x1009, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x51}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r1) read(r0, &(0x7f0000000100)=""/201, 0xc9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0), 0x290942, 0x0) write$bt_hci(r3, &(0x7f0000001440)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x6, 0x8, 0x3696, 0xba}}}, 0xe) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:41:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2259.732089] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2259.741995] EXT4-fs (loop1): get root inode failed [ 2259.744190] EXT4-fs (loop1): mount failed 21:41:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r1, &(0x7f0000000100)=""/119, 0x77) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:41:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x10000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:41:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xb7f, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffc77) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 21:41:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:23 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:41:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000040)="aaf4feafc47a6249147eaaa6e4316cd73b9c14a06873d905620629abab09f0af4a70c28872d4dcebbe2dea83511743620d65b3870aae39ffa547a50372760749df4bb282169c3cc5d17934946b258340864d2c77d2f8d0e5e70c03f030f1ec74ff040e70552f17a0d3dbd6f1") r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000340)="6a1d9bd164553d2c8b9458f51491c88816b9f611ba400f87989e0b59009baaea7fca64") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000180)="bef26580bc9e03bb30a2aa9acdd12375593e8b369e08c1dcaeafd96661b215a10afdbc5dbe4329172b414bda174e62799e73c7afb7dd8a5c6e93e8991dcdeb56eab63e0661b1b8c027070a881d9d8adbab461b839edbac30eb600b973d1305dc87446bee2f57298ebfe610453f111bd910b5ba0612b42252994c77e3f5ee8e16c0a68661bcee78578896ed1ad1515687b7e56a34d67427bd121d32906abf2dbc62e080bef77ae098939e12fbb12cb17ad5990c10bd309ef6d31d0727fa9fdf129e633f3b8d424841eb2bf76be2b4745b") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 21:41:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2260.020840] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2260.032973] EXT4-fs (loop1): get root inode failed [ 2260.034163] EXT4-fs (loop1): mount failed 21:41:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:42 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x3f000000}}) 21:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:41:42 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x10, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:41:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000100)="4a874745dbfb3d52ff3f8b9af976327e7cf3480cd0f556a17bf729503b58fa081ad1592bd3a4aec751165470c7594c2fe22ae9c5d73fa21d796a50f25c8347604b902157d5bf4950b0756116681208944ce13f2df832cd8da4fd97b7310066079eb783e72ab5d7e979da1178500903b093b92ba8c6427904ded7bc9c73695ce2bd039644f5816ddc0ab515723379aa6d456e2f03ffa78624776a50407843dc415032d905020584cd2f6cc6baeb5af26cad43f6639b7402cbc3dfd4d818feae078c590bb458d817c1ec73296eabde5992cc1ee25e07e8e85e7231fd4b70") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x20}}, './file0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r10, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r9, &(0x7f0000000140)}]) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) write$bt_hci(r7, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES16=r11, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES64=r2, @ANYBLOB="2853214a31002279ae9c84d8215af1fe052a93112757c6a03684f9fe95b4f0aa44ef5cafc5fed458f7251e01595eb36f0e788489ba480a9031ba"], 0x6) 21:41:42 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:41:42 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3, 0x1000}, {0x0, 0xfd14, 0x800}], 0x2) 21:41:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) 21:41:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:41:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000001100)="d137e23c37299f650299b4dcf07d8afd8f8de9bf0b4fd147bce543d5f90c1a2523f721c2ec85181b37778b1f017bbaea088df881ad392e8c198395c0a7552915e5b66151db70b7eccb81aac779b8ad574d70d04ee9f6f4b1f2e2569e7b68eacd95e78a87beac3cc813be63c7ef9a57952725576684229416579ee6b899e47c4a6d7b736f693851e692bed5be20bea0ed2eef53feb4a9e990face6bb6267422e745413af438f0") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x6) 21:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x4, 0x2, 0x4, 0x0, 0x7f, 0xd89}}}, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x428000, 0x0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 21:41:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x6) 21:41:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff498db64091c473938a52cde813ffcfa640788827c195b25bd844b612c698300fabededd55f111a8010a9da9fb4a400c399e85aed30895b56f0d43d2dc55327f8a78398b6177fa3de09005b07bebf04787e696ac4c3d0c3a1326bf95b997d52a46aa40f0ee2e22af3598e54efd572a59bac0aed573c07189c738bc4a1af12f58fa6c670b3f167c07a292c56d6f0daaecc1dc7fe16664a11351044b251e2c3f0e9936417ea0b6674e05110878fb94259fc58b52f1813a5ac6697939e5f271bcb5984d76db506eb1bfd60e9af80f30f5abed1fb2c4ee49314"], 0x6) 21:41:42 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) r3 = getegid() setresgid(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xee01, r3}}, './file0\x00'}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, r3, 0x1ac}}) [ 2278.802115] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2278.813016] EXT4-fs (loop1): mount failed 21:41:42 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:41:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:41:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:42:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 21:42:01 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$IPC_RMID(r1, 0x0, 0x0) 21:42:01 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x5, 0x3}, 0xfffffee1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:42:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:01 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x12, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:01 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:42:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000100)="41bc8ef17cb0cda2c52c93a9711f25ccf2e2ff862e758ac3e8d1743fcde700c6bad0544a08ffde514f6f7e553138135cb4a326fb30cb57e96a501540d07e8f7c14b6b6b3a15e41b2f4288574eef0cb3e0099bc63bc2068c126042340affe0888d1526747dd41ed40b71e3b014ef6f2e4b42d5a365f94a3a2b18656c7ff1b51494c8cf40775a8c11f4b889427cbd09c408a71690d952d010419b7d1e7e518c17f") 21:42:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x105600, 0x4c) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000040)="e819cc82c0c14659a80887e3e7d9ad1436a54efd6e48b5302181cd030f02e0fa727d878f9a9d3e0500d041aa72a262c2fb0a25cc01a867013b38c321674f824e085207e30cf20c8b2c2a88ca341f86fe0c447dfc1d14b7c24f9dd5174c") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140), 0x0, 0x2, 0x0, 0x3}]) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2600}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x80}, {r4, 0x10}, {0xffffffffffffffff, 0x23ea}, {r5, 0x8040}, {r4}], 0x57, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280), 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) r9 = epoll_create(0x7fffffff) dup3(r7, r9, 0x80000) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r8], 0x6) 21:42:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x9d, 0xfe, 0xfd}}}, 0x7) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2297.941968] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2297.945126] EXT4-fs (loop1): mount failed 21:42:20 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x0, 0x3f00}}) 21:42:20 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x13, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) [ 2316.854261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:42:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x4f, 0x9, 0x2, 0x0, 0xe58e, 0x80408, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7}, 0x2018, 0x8, 0x0, 0x6, 0x8, 0x1, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)="75dca81e2433eb24b90dc2a4ad474a8082890e7b15751b8a00590f9fbe5698d1daa83b689741daaddccfd4a48a6a9a1f45ddffe53f5c076e64acaba8673cb2ce28100cf90840b9763e5fda032c36d4dcd07ba613a0b7b230d04a074684585581db71f05fcc") mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r0, 0x20) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:20 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="01432021091f02aaaaaaaaaa1205d301d85d1e4ca27b5daf133bf7e371043ac83e40d56854"], 0x25) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi', 0x20041, 0x4a) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/net', 0x20200, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f00000002c0)="fa5281f6810e3a6261481ff4ce9e0000009be8dd19376c7d0dfb054153a18777f7f28e05ed644f62b5b2d567bcf7a56b36dd7419b37d7ce14a281974e385f71b415aa98cd0b79a47ea", 0x49}]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_pgetevents(r8, 0x7fff, 0x1, &(0x7f0000000440)=[{}], &(0x7f00000004c0)={r9, r10+10000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000005c0)={0x1, 0x2, 0x1000, 0x9, &(0x7f0000000400)="cbc80fafa1c1a98147", 0xfd, 0x0, &(0x7f0000000640)="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000040)={0x8, 'ip6gre0\x00', {'dummy0\x00'}, 0x6}) 21:42:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000100000000009e17f3d5788cdf387bea6fbca7cdc20000e5cf8df6000005000000000000000c00008008000d00ac1414007c1a8ca3aee5ff0219acb87ab2876e1deaa910ffc384d10f5d60bd19ad512c5dd4c53f449d0f387a40f7e18eeb6b0a6c183495cf1b85f35c5fce1061ca7f43bd87b96c87b0b233611517bd2d346017ba6ad6baa9822e66603bd7770214b783efcf85c6611a9fa974efa4e7bcb60f86"], 0x28}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) accept$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x40, 0x0, 0x9, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) write$binfmt_elf64(r4, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xc, 0x2, 0x3, 0x8, 0x1, 0x3e, 0x0, 0x2c6, 0x40, 0x2c6, 0x80, 0x9, 0x38, 0x2, 0xffff, 0x8000, 0x7}, [{0x4, 0x7fff, 0x9, 0xffffffffffffff80, 0x2, 0x4, 0x5, 0xf030}, {0x2, 0x2, 0x4, 0x170e, 0x100000001, 0x0, 0x2, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x40800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffc28b47e4ff1d86}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r5, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000040}, 0x8080) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:20 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'erspan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000002c0)="8f23060ff533a17a41b3f36ea87ea6e3e13ab1f3ba97849205111a9206aa7daf4fc5605aed2a34c9c49e28118b58eb23b1cd575182772ca6dfd16b1e292c12b568aaf48685ee369c8a5041d580904621d1f204bc3c00970cc8560a64a8c16c7b3415cc09374cdf984f63f14c6fbe40c9bb815c49cf5399e5d2360b8695d30a6155f23bfbcd5165fbe2039cd281ab6ff58110") r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) write$bt_hci(r8, &(0x7f0000000980)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0xd5d, 0x3}}}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x424, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e56}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d40}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x393a8fc9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b13c280}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe341}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4409}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ca8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa1fc52}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11cd63e9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x140, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x418b7d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bf9489e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4747bfe0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a728416}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd504}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5577becb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f842de4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32158da4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9f9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc677}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1911e417}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x608d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8288}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0d2fa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9715}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x542}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9894}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33798926}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b73b4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c60}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfc7413f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f302c70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5afc528f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58303e14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x816b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaa1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcedb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x758b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48b3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x669bb37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cf2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1839}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72d3cb3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ca3b07}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111d0d25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa363fca}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf31c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c7f120e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4552}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42ca}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76a70e0}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x188, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x261810dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb906d25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790d4ce4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bb67289}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7f9dbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3de450e3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e493d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dabd790}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x767c018a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d1148ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a77118}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a0e157b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64008bd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x586cf8c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91e66af}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482fb4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c3c2e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3119e3ee}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bce5f70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa152439}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x147e7a33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67454e76}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e0970fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c102255}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbd5b3a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c41a1b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x424}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) [ 2316.909094] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2316.915071] EXT4-fs (loop1): mount failed 21:42:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x82800, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x3fd) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000080)="c141f7ddd97b439f47df2ee4e823c83875fd3159ddb964675cb36ae70e5204f9505e1ad8c77aa262ee2a7776be7b5cc055268a44c8c16f", 0x37, 0x3ff, 0x0, 0x0, r1}]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:42:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:20 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) bind$bt_hci(r4, &(0x7f00000011c0)={0x1f, 0x4, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000001c0)="51ae53fa334f04512efad105f6a3a49b876218244939e56db900660d70180d6e38bc5665ded8c38d0e79443cdd2e99bed3a39f53e3b16c5486542f36ab199a9df79d1ad5265400da540fc769630daeddfa814606c76f2ce3eba8e0251e77ff1dee6a7e43c680dbf67460279fca469e2fd0e869c7b4dd0e43326b9f238bd57025595814869544fa0131b23a5342175886b09399ad37a12945b7212d0ecc7c05b23e0b34ce1b77c43e14bce19e04a7711ff71717b42409790c01182fba9c6af4a185b033655a97c25c724a2850d4249183b92df8cbee237726bb8497952755c41a3a368b186bbee27bb66f2c2a6c3d903c88fc31de7d373b3233d1541791b2617d4a56a76300d2e479dd4422ea097ebc013731ce7d7c8162e5c1d572884e151d08e93d143a0a36058118a9e50926605d702ad75902f538b769f77df3fe0cdc2d719b34699be7d5375f937eeb030d82a8be3c53a77da7949324edaabacda0dea39d30f0b6f5f8eee946d0afc092efac1fa5446f054d8cce73688c982801f092f149bd3ebc701ed32567b4cae3fb93e702ae55411e38a57f5bb8c34183f8a50663fd05e3f44339acb6e5aee1ff7315853c55c08f70ca3218075601b71bf1494475a7f55309840cb17b6423b507ff56b6915d07f5cbc25d9c49205769e54a30063e727af5f846771e01346dfb790732c33ccf29c6c81f9eed99106cee66a08f18da990564a7b48d1ca62e156dae5fe94c7704c60e3c7db79a8f6e40999ee50fc8a98a3c427a4624fcdd9c0253d72c700e59471f66248c5a75f880317da28b9b8cca65ea46c6dec1895112fc0d2816a257830df39444964e0e06f2d9bd550d5ad327fa6c8f4ddbcdace5c11fbfafb170457a2bff4914ff2ede5ba34636bc30abfc1a58629bd5e425505c82e1d1d406308a50c5ec5d919f218b28abbbe4008e142d85fa4b6f16458da55aafc88aaae60554e35d7e4ce9bbb26690a18e8f061eeb14a32bc03fd3364a0d0e7cb62956e537e77345905e1bbd621af4aed0c2d892d4c7dbebb51c7c6106579d7bd292bc2862888cef0513a32fe7a164b9569b09458438757bda5d95e496622baecd4d8d6a470138d2b11c19ccbe0729a84744284ac9deedfdb4f974961479f701b869e9730aa14c62b8350e68699b2299219ae9ff823429947daa7f8f4a3df0afef5ea70ec82bc852621b244415fdbb84e45025bac903d5ce649bf745693288e436fca75e8c16d55e2b3b0dca5d3091a7969147fec78d4d636913831e363460744c2c40e391086d452fbb9dca1dddb953ffd4d0e1e35dfbecfa56f9787559ebbb29a7e80e11bdecc24df3edbdd921ca485983574bc5a9f1144d3541e2a99bac60504f22f6ca0bbae89ac58d6005be759b15df2b4777293031844dce3a908781a979b3be6c7ad675312cd45522e1611060bc558a622fc58592d2fa56dcdc9d87139a550e1ecac18d360b4b28c7fd9eb82d65e83fd6afbda82e25baa1257d396b4c5d4e447e015b3cf5f380bcd1335e994f6b9eb31a794814c658b07b85876bd08f949aa11cc2bf03535b45c91d7de44e5d9e55fe3727a2c5ceb709d0b261bc2bd1f192b00e0641089bdda018afe0f8a0c87dd5e2b72735a112a0a58132c63bcc94fb6ebeb70d20d56cca8da0dd942eb591f1eeb7db6f5c6e578bf69a5f536ef0b66028eb7239676bef803eed47877c4bc5797eb442e239b759519acfba6abfe3e9070934c8903fd4f05d623470c1053ef2970c7fcdf2e5631c8370aab3b06140576deae65bd1c8ef1d8e15ecf0c5b8323d8e7a42d29a00d1c1a14219e3c83b11d8eb673c90b6132204debcb608426c3e15a2a174fa336eec4d76de8273d40c1b6f57bccd77be2202398c4078034072e83b0f36e01845dc46f21170e1c229d1d96be128c715a206381adafbdf6326eb24262b9ee02654383bdeb1f02a5f80a8931bab2bc04638607577ead0d58eb98a65731619dd79edf43ebc9551372d28d7fa59316748ec5873985947ae0eeacde8d4ee2ee46d41ec36b452164a1ceb1a85dea4ef99fd800738afd073b03bb05c0ff2d40785e2b4760e35cf8b7883567a106081c221dd4159b797e3945e652cebfc66797a4e07fb56dda33d04e0816ba421798b1fd7ef11d6602a93d8203bc7906ab4402b3dcbc9b8cdb4e974888e6249b1745be57688549086c21eb58e00f20492846a5b42b2013aa72770391f9f5fa4efcc8f64c5973f05ed568713033f87314aa8304f820445a0ef5486865b7b088bc21b61efcda25befbb0e73c66692c223393296c16c8af6da28980b1431d8bb01adfebf7c3abdabe8e26e4729d9b727fe38d6f804ea026f03e18e9a318cf653c825d6c2c15a97ded529e9323c51226b8cc12666f7e481c1356c3af00ac23496569e786988d0013001ef891098df6799cf68e37cfaeed12423cc0666da43629c6c88e0e366b794e8f57eaa1370a328634f1ad8dd56a4d80476fbc9388915912b68b79161e83906151c2b496dcba4be159a5ab26b79d6b35f6d45b8b68a72808f358020146816b0043023bd352861d015de9476eeda9ab96a8d48df13b984496bb1e77b8b74900b42410e9885d26e8f6065e3e2649be4938a24690ad9f8bdb6efe872a1151a35ddd50d900de29c734c41c1bdffaadb31a03c5bc07cafb6df4a5bfe34121dfdfdfd4109fd2c77c8ca3a1b283fc2a160f034f119d530e425ac4d8c3419a82db5d261c092061a1adbaa9036c5b061e5f9a272ddbb1c1bfaa21e144b3c662d078ebffa23c76e8615ebe9265a817ac4a40768f755683dce3a00c23fe74263848ea8bb3409849844f136b0d21b27d1fbf6fd443082dd343b3f64a7d1503b4a730a449e9131780e5411e798ff5f143ca5c046567bf34bd07d60b7e78fd99b78fea2057656bb971d162b66c522dc9e2855279a4acb271366f348aeacb84a253f15380fb7db1222252c73721eb135671861f6da7b8b6120e44c9d6653d93481de6e013c8bf66aea4ffce3f93385475a9cb3cd53e6fe96a3c279816b2ad595f23619e420638630c31dde323eb7d24eed829f6d60b0ff37e8316d6597672ade0af5cf2767f73039df6f5c43e764337ed6dc49f7b0b91702b0e68da07656b31bf8e11150b39bfd6298ca8fe26135e038856efcee7419b5d54c607a9a46c3a52708803940dec514df37d684f814b7ea3e20185b8878aa2a38eb1233757d2d039a41fe94bd51952306abc666789187125e1261b06befc65fc79db3fe5ed41b2e55fd8da52e9047867ce3d5e015401f815f427ef4f990d69b7a889d83f16fc8628f657f0cbbde2e33c0a6bd7963ecd6100864fe1d6cdde8bc510eec5db588034919edf8794930e191a78c6a5218422469738f3449e8d8efea63afa20586567ac2bbc77bb11be303eb2fba61f7a2e33b40b42a6824f47edace1379a33197b688228436690d13fe6bf3404681b640d326c88fc2ec596a0bfa8255a3e94854019e541cf178f1642d8e8e2492bdc92913c29874d9f88bec8253d85923157945c2ab90de6d978bfaec715abed278d7436580dece67cb229a3113b62db468bbaaa461431e57c946105ada6bbc3e052d0e200e63c84aa2e48d5fc372de22c7c10996a6d34fc440693e2ae9e9273524c8ea48fa75b0d0c131ad97889defb9b110e1d88007c4c2c60c9db4c4e02012cc8fbaa141e48a61617609000fb010f5e1fcde0bbe264b52d809610a6e19346062fd444e88625e5693b8c0a0abd4dc7809ca0900d2fe04eb8dd64e5f2fab8181c6ce6b4c795760e31ca24b66af2bfe95ada9a64e9c8566f440a133ac59edf039a516a4b668bd899c9860e78f89cc1325931e1c94ac5b4a6d31ee95f602656ca49fcc428886e5aeb8a445444a2c2432e60c3f3454e9588aaaf2dcab5008849c760247b8fd94fa7e610c05ebaaeba943ef40de6eab8f5fe9c336f28992614d959c11aba30fd8e01afba1c1f7c971dc1ca3cba5a465d3295caa5cf297295d260ba8b2a9233f77de59bdc12edd58e0bf3687b0bf0faeee217d300a021073ab67d5c63da92498c2be27dd1e4f8548dffccb3345420de7a5db2588f51ec79e23165cd75c5a8e661e1c39ac0344f9276a36b7e85fc1d1607cde60ecfcc149082727b7b1591e0b2881324082e0876724fba9331f04b73d34af08bce0efd8817a9a6fd1bb0f11967c5ea4e96411ac7e1b68abfbdd965b9fa80082ab8216e190c82031587e77ab6141fd20ea7fb619c685e066140faa2623bc4a41ad2a6ac02948355bde93deae226f949d83f3cfe75b861e1cfd3fa899fe411f1931e86e2003569e2cefc4a680b195731e22d61ca1fe8414b7f07fe566ad4163f4d193ec05ee8558966fd96cf5b966fd470254354975ea02b6492022f86bced0564bf149bb1b4fb29e91ae5ff324908dbc894853a4332329d81c3d82e74e85dce116f1242fa95fb39c3bd06054621b4b6e26c86c837e8b110239249865f134396de17916426ee311926bdbb0490accd52caf211ea959d1a516e169c13af68b3046f4078f7e3b2b041bbbffaebf597e1939691e56f8d9912bab65b2b8ed1c54a3a9f7c26e72b7ed359d0b5edadba9280b5ed83e3ad7823b9dfda9614980ab333f010c78550579f53062e7dbdd15739c13ab25caccb627d87333f18c3d84fcbff5fa92c4940393b5730f55a3564c5067ffa8b5c94956b08d22b25182e3c2145ef1be8b53c4b29700e9815b8f4c27ee342712ac76d9314f1aa98b7d7b18a149a2bf88f2f531e1997e6e9e2d4b67dbf500c94fb758f6346606f8f58ed28ccd9eb3ef7680bf3bdd379570bf752de825f62665f7dcb7b21bf91b3ccf3f077605b93545a71883bb04addbb11cabebcdbca56813932aa2a8f39a4fa247191c9ac0f7f9ed535db9242e1c04397add1e13e6d3b9495723135614c61a28cf4e0141bba6fe5a3fc25f3c1d97fca78882c10d47533a71dc56fa06679a2223ec856a1fac3c25076b4bd5ff83dfa96354af038054a92d657f84ecffbd29749e6381eb931a4a22a4d08b14a24e30c14844ef019dd4015b63df5fa371131ffb616eececfef5f550e9aa2bccabd91fd1be7b30c82e4403127edb3d426d8a387766fe9005b66fe43976d43c1736027a8576881f5c2a3b11de40437cc2dc8c67b89a6cded5e5661c1419fa372678fa8b0532e8ba34523e6312d2124c9c603a614b4c603e5a9496675a1a378ac9bca0a052b2aba9abfc2f6cb77d47fb4dcc30eeb092fb3ccde3398a75be5f84735ec3434ced33f6790fbf5084b6769cb05e575246dd55b75f06616bb09b5f494742007479b664a0af55a4d6f16d80072ee3bba9a8fee1ac1b27fe7b8da752566c3d754aacb48fc736b42a781152b68d697e595585bf44be713d77dfda735a86136b3be92e8f5a6330aaec98635c0eeee20d7be05c6dadf7a7efb928a4055ba1ce15280054986cccc7c8a81e00aec2e865a32d15bdce68dc7949d97843148b549347e67f68da4dda6d1b290bf7e49b9e09cd5ddbeeb868145de027fa06d8d20710c57042dac8f00f342235cd1bbdcfc3807c2987aeb7836b9ef7679d54d05e65104ff83a4bcca8f08b8282ca8e6dc7ad63fa0bbb4add2f27c24d46d12b406f3d2c2e65ae5d4ebf46a4a9d93a54c476b77aa8c4ca3c427c058346ae7340fb3636d88d95edc3055383a084fd88d1a77717fb633c1bb049f66b16b40fd91b988503c23290965ac4a9cc7ad7cc668f20d2f4fe60d7c4ecf4ceab62f6ac246665af70b1989b5d8fff9c63d15711302931966ddd27315511fede5ba5eb51eb") sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000c1) 21:42:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES64], 0x6) [ 2317.211075] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2317.225966] EXT4-fs (loop1): get root inode failed [ 2317.227193] EXT4-fs (loop1): mount failed [ 2317.683497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:42:39 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) r2 = semget(0x3, 0x0, 0x408) semctl$IPC_RMID(r2, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:39 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x3f00}) 21:42:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x7}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x3f244b605067d274}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:42:39 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x200) syz_io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x2e3b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = dup2(r7, r6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) r9 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r10) syz_io_uring_setup(0x4fb0, &(0x7f0000000300)={0x0, 0x785f, 0x10, 0x0, 0xeb, 0x0, r7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r11, r3, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 21:42:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:39 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x14, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="894c4c9e0155c4921677ad684e2d45c4370a7ef94797ca8da7131ce706da73395b6be5827937c0ea51f15a07b3d1b32e24b202a87b8b5df800a42eacc6ae6075dbc7cbe1097115da9e0cdd80de77f15881d13ca946582ee59fe9d5cea7a95764bccee516ffb770d528a7ec1aa51b1bbe506c3dbff9", @ANYRES16=r7, @ANYBLOB="200025bd7000fedbdf251900000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4008114) accept4(r0, &(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000001400)=0x80, 0x800) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000001440)={'veth1_virt_wifi\x00', {0x2, 0x0, @remote}}) [ 2336.186358] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2336.201082] EXT4-fs (loop1): get root inode failed [ 2336.202207] EXT4-fs (loop1): mount failed 21:42:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) preadv2(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/118, 0x76}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f00000005c0)=""/251, 0xfb}], 0x4, 0xe28, 0xa498, 0x2) getsockname(r1, &(0x7f0000000040)=@alg, &(0x7f0000000100)=0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:42:39 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc2200040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xf0}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xf7}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x48040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x80048) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:39 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000040)="76e0fdfc60ec79e08565d40daa6a13b26d3983c1839e442d6e9b9ad14e51f711464c61e610c4c25aa7f0a7132ebdff931d10c2b2000b84193ddf7f089eec5db1ad87d4b070b0c80ad411578c27a560409523") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) dup3(r0, r0, 0x80000) 21:42:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6a013605842a510154bf79fecaf759ee81ad04aaa679bf8f77dc9ee236aecdb69e49478ef57ade314eb249e835"], 0x6) 21:42:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:42:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xc, 0x1ff, "c09534", 0x44, 0x7}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r5 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x2) [ 2336.623879] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2336.633430] EXT4-fs (loop1): get root inode failed [ 2336.635070] EXT4-fs (loop1): mount failed 21:42:59 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000140)}]) pwrite64(r0, &(0x7f0000000100)="1aa6c8229240d5dc62045bad3462cfffbef90bd7ec689f813b84bc190bed5de3b267cd90cedf5647bc1831d6b27eed09027e8c85bb317a8cb588f1705ddbedfa4bcf0d9006e85be45f54b6d72c8576e0982b857c82220ef87bd07efc9685d07a21c68edc9416ab39f37c01a6151d9ad7c4cd6e90b7a94ef18a07594ec918a3d4a9b40898bfd9919592e1f420150fb168af0399d1d20eef46a578cb", 0x9b, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x0, 0x7, 0x3336, 0x5}}}, 0xa) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) write$bt_hci(r5, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:42:59 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:59 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x1000000}) 21:42:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:42:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000002e2f66696c65304a3c6a00505e1ac971050ac52d0e8a759d6221"]) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x4, 0x0, 0x8}, 0x568b}}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:42:59 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:59 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:42:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:42:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:42:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000140)}]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000100)={0x2c3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "a9e43bfc82fc38"}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r4, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000580)={r7, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001100)={r2, r6, "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", "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"}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r11) write$bt_hci(r10, &(0x7f0000002d00)=ANY=[@ANYRES64=r12], 0x6) 21:42:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2355.898229] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2355.901963] EXT4-fs (loop1): group descriptors corrupted! 21:42:59 executing program 4: r0 = io_uring_setup(0x7281, &(0x7f0000000040)={0x0, 0xed28, 0x2, 0x1, 0x28}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x9, 0xffffff81}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:42:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0xea2c, "0cce0e", 0x4, 0x7f}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) close_range(r0, r2, 0x2) 21:42:59 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:42:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fec4adb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19186c43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b34b144}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x132ca5b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79891799}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0xc000091) [ 2356.078329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:43:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x3ff) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:43:18 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x3f000000}) 21:43:18 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x1000000}}) 21:43:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}}, 0x24004090) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x54}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x20040814) 21:43:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xea) 21:43:18 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:18 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) semop(r0, &(0x7f0000000000)=[{0x0, 0xcb47}], 0x1) [ 2375.171328] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.172973] EXT4-fs (loop1): group descriptors corrupted! 21:43:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6) 21:43:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1}]) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[], 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "8955fc08a19bb6878c563c369403d982", "fd82f4b906e4072d8f83b77be3b51d9e"}}}, 0x2a) 21:43:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1d, 0x2, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@none, 0x2, 0x3f, 0x1, 0x6, 0xc0}}}, 0x11) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x308, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5213}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28f8bf64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3857cf86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18cb887c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aae83d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x239d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70c54744}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd0853dc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78eda5d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dc955d6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fbff724}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1b0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6778cda0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1809c3a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4277fd81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4310d263}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c2c8ab0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6bf21a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21e012ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3df9c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cc08162}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f465800}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d5a5f87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d90873}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x904fd6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43189285}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791845d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4311a6ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d4e6d41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2670384}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x391b9a61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afa8ab5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f390a3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130adf37}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d55c8c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb96176}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723d7294}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63141ecb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x612db30a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffd}]}, 0x308}, 0x1, 0x0, 0x0, 0x8042}, 0x55) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x75}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x10}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xab}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x800}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7b}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffb2}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4d}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x21}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r9], 0x6) 21:43:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000140)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc8}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "b127a02aaa46e167302dbb2b03d24a10"}}}, 0x16) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @inquiry={{0x401, 0x5}, {"b124a8", 0x0, 0x9}}}, 0x9) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:43:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x200, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13b6bcf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2220a95f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3942bd6f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0xfffffffffffffcb6, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x389aa550}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68d16b2c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14873d03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42987184}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3edb2bae}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb8f668}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd42658}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfa0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50ea211a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aa4d7a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b5c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f81}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3689}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cb9f5f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd166}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3426}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73bbe3a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93b0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6864c06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d701f27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x951e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aa4597e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34d35140}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3052a294}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf6e190}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2815}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7928d1d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71aee57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67a9632c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34cefe57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a940c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x641c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd49e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cfc8fe8}]}, {0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 21:43:19 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/176, 0xb0}, {&(0x7f00000013c0)=""/122, 0x7a}], 0x8, 0x5, 0x6) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:43:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) [ 2375.596959] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.598950] EXT4-fs (loop1): group descriptors corrupted! 21:43:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:43:37 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x100000000000000}) 21:43:37 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semop(r1, &(0x7f0000000000)=[{0x3, 0xff01, 0x1800}, {0x2, 0x7fff, 0x1800}, {0x4, 0x3c7, 0x1000}, {0x2, 0xaea7, 0x1800}, {0x3, 0x6}, {0x3, 0x400, 0x1000}], 0x6) 21:43:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1e31cfd2b068c4bc275db1ff", @ANYRES16=r4, @ANYBLOB="010000000000000000000400000008000700ac1414bb080002000300000008000800ffffffff"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 21:43:37 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fbdbdf2504000000080004000300000006000b00150000000f000100255b247b2c5e29242b3a0000080f04000300000008000200050000000800080000000000"], 0x4c}}, 0x4000) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:43:37 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:43:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000100)="55faf7ef7af9796d109a41051500c4569ccbb1029329e08631f12484341d7753e9f5045607ef0c5a8564c95e5c91a3d20d96ad7150013be46bfcb4ea86cee2e019205f93381ff614d546e593e5e6deefb5539a087cc368a5e8e886c797a6a22bca1344aae49e6aaf6734c7c216e8fdc03ad44c356489a5e2e0fc8a6fecce9ed36ce490ff364be6382c67f2599989f950b50ec2489ecfa776ab0a5fefbc2fc4d890b6e01abc3c260bd66dc49998e0512130f2765816") write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2394.503982] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2394.505942] EXT4-fs (loop1): group descriptors corrupted! 21:43:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:43:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x4}}}, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:43:38 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_io_uring_complete(0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000000140)}]) fchmod(r4, 0x97) 21:43:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000100)="b9c5af38f05cce1e69bba967c0b59fb4ced3460306d8c9595168dde056c7090ec0a8259d3ab7b542f66b400a1033e037f19f773a501b734f92e4048c47ecf8a37cbd1a76556642d58910786594c92fb6623123b090b938987470ab7cf543b090b0b4e5111ab9528d5d42b1a7304306fa1f05842568a7f95644517546d39a530f3ac48c976145d002d6e571ce9e0f9f21a970d5c62fb9ec4cb5d556dbd1") write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 21:43:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000008000700ac141407000004000000000008000800fff7ffff"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x210, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x34}}, 0x20000001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="1436909c00000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1d8, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1a0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bffee99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ad55e69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a22e6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406e185f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeb77bb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb1f539}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a849fb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38f52415}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b6fea99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x461d7844}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afd6da7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543b10ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56031362}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x386cfcd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7026fd80}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b6955a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x89ab5f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x693e6a53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae9adf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368aa2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc1b1888}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9506575}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63be5945}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21351647}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000001}, 0xc004) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2394.775995] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2394.777639] EXT4-fs (loop1): group descriptors corrupted! 21:43:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r5, @ANYBLOB="58bff6fe1ae5398d99258f66923921b19c154e0444da7e43bbc433acf6d5c0a7ce3b5ff2"], 0x6) [ 2394.856959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2394.885780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 21:43:57 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x440, 0x41) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048004}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:43:57 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x3f00000000000000}) 21:43:57 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x1000000}) 21:43:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timerslack_ns\x00') bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:43:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:57 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:57 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffdcc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000fddbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="0a001a0008021100000000000a001a000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20000001) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0x6) 21:43:57 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) r2 = semget(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r3 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x2}, {0x3, 0xc2}, {0x3, 0x1f, 0x800}, {0x1, 0x200, 0x800}], 0x4) semop(r3, &(0x7f00000000c0)=[{0x2, 0x7ff}, {0x1, 0x4, 0x1800}, {0x1, 0x0, 0x1800}, {0x0, 0x0, 0x1000}, {0x3, 0x1, 0x3000}, {0x0, 0x1, 0x800}, {0x0, 0x369, 0x1000}, {0x0, 0x4, 0x800}, {0x1, 0x2, 0x800}], 0x9) semctl$IPC_RMID(r3, 0x0, 0x0) 21:43:58 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0109788c1276528c3176adf8105133a55017805d29f0c9ca14ef3c98e856785a3186b389cbcf849e48111b920a61781efe1ee8cae77367a8b2db5b093f768e2c0c77276f1a65f7f22ffe38cce46e55eef23139daa999fa14a467f3b7f323da2acde65faaa5915db9ffd3bb292a23921697089f4ab3555fa177dff903f7d3e130befaa6586ba27b1de4981c2506285fc73812742db4d8717e56634ca926f22b4eb5f0a49e9989e269f46a0dca1e021f7874bb235cec7afb3b8f"], 0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xbf, 0x5, 0x8, 0x4, 0xac5c}) 21:43:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2414.532472] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2414.535867] EXT4-fs (loop1): group descriptors corrupted! 21:43:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) openat(r3, &(0x7f0000000100)='./file0\x00', 0x20004, 0x17c) write$bt_hci(r3, &(0x7f0000000080)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x400, 0x7, 0xffff, 0x200}}}, 0xb) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000140)="1ba40f022c7926926ec1c0bea07b9f3abd342c9d8acf4acbd6d64d2e75f039571b2bee5c9e4336d38d74fe19b9f17b7c9e") 21:43:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0xd4, 0x3, "c8fe49", "066c43", 0x1, 0x40, 0x7, @any, 0x9, 0x1, 0x3, 0x2, 0x0, 0x22, 0x2}}}, 0x1d) 21:43:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:43:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES16], 0x6) 21:43:58 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:43:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) 21:43:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7216fdfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10e73f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1e708}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78c531be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55080305}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x374b618}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f27fd6b}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002080)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x0, {0x22, 0xc66, 0x7fffffff, 0x7f, 0x6}, [0x9]}}, @devid}) r6 = eventfd2(0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002080)={{r6}, r7, 0x2, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x0, {0x22, 0xc66, 0x7fffffff, 0x7f, 0x6}, [0x9]}}, @devid=r10}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x12, 0x3, {0x1, @struct={0x2, 0x1f}, 0x0, 0x5, 0x4, 0x5, 0x4, 0x0, 0x18, @struct={0x0, 0x7}, 0x9, 0x4, [0x4, 0x0, 0x8, 0xb6, 0x5, 0xb500000]}, {0x3, @struct={0x4, 0x9}, 0x0, 0x4, 0x9, 0x40, 0x1, 0xfff, 0xaf5fbc2671682f2e, @usage=0x200, 0xe194, 0x6, [0x6, 0x4, 0x0, 0x8, 0x7482, 0x10001]}, {0x4, @struct={0x20, 0x4}, r10, 0x4, 0x6, 0x5, 0xf067, 0x401, 0x8, @usage=0x5, 0x0, 0xfff, [0x42, 0x1ff, 0xffffffffffffffe0, 0x3214, 0x2]}, {0x2, 0x8001, 0x4}}) [ 2414.959572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2414.998455] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2415.000893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2415.053150] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2415.055015] EXT4-fs (loop1): group descriptors corrupted! 21:44:17 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 21:44:17 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r3 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r3, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x24040005) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:44:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:17 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x101, "36ea0a", 0xf7, 0x2}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:44:17 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x100000000000000}) 21:44:17 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x3f00}) 21:44:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xd6b1230057c296a7}, 0xfffffffffffffe8e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x800, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x1, 0x2}, 0x6) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040010}, 0x4004040) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:44:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4048010) [ 2434.233491] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2434.235306] EXT4-fs (loop1): group descriptors corrupted! 21:44:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:17 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x54800) 21:44:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '@@\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x50}}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x3a4, r6, 0x2713d4738ffab8c9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2078adfc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf251}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64f63de2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33e7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8435}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df003b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2eb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9654}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c31e1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9954}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x176c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10609d69}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3be0d135}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x754c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb897}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ed3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63175611}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c6aceb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4225fd04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x857c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33381bf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ac6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e1d78b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8154}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1351}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b403fe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18c55f3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1171f996}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482867c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b85a34a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b13a5fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ed64431}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b4ba7ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ff532a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d442840}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c1f0f71}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f5aa602}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2262a397}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72fe0140}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59a74433}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28652613}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf105be6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34f1de7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35f28c0f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe86e7cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f931eca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7796ed9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1967839}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c6397d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b010765}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10000}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7903015e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) 21:44:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x278, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54a1c404}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x295d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb606}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b32f41f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7da9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x693ef04c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0244b3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b07}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3980dc96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dbb79fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x545dd0d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53f544d0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e15990b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68a02840}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45698f67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d6a2b88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43537048}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e43b68b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa760738}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd42b5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d5e6a6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134b741f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f0ea52}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbcfb54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5018b56f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x249532cd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d2a006}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ee6803}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a0fc93}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ebe2fdd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6610cd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74eeb9f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f9e541a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5692479e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f5ea65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x164c9d77}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4e}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20008010}, 0x40040) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x4051}, 0x4001) bind$bt_hci(r0, &(0x7f0000000540)={0x1f, 0x3, 0x1}, 0x6) [ 2434.434453] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2434.436182] EXT4-fs (loop1): group descriptors corrupted! 21:44:37 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:37 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000440)=ANY=[], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) r4 = getegid() setresgid(r4, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xee01, r4}}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x28, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0) r7 = getegid() setresgid(r7, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xee01, r7}}, './file0\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, r1, r4, 0xffffffffffffffff, r7, 0x20, 0xfff7}, 0x30, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:44:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="646fccd56d382f90e387e16c364223785802b1b9de058da1d95cda48d8f4c2f579b141c982fc14e61c6c2fd2294f7cd23ffe2df97000f5dcca06dd7f17503751b3ffa6a17015efe65509f796f6ec70b8043f84f20e77"], 0x6) 21:44:37 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x1000000}) 21:44:37 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x1000000}) 21:44:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:44:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x7479c0, 0x86) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x2) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x9bc71130692c58c8}]) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRES64=r2, @ANYRESDEC=r7, @ANYRES16, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESHEX=r6, @ANYRES32=r8], 0x3) 21:44:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @add_sco={{0x407, 0x4}, {0x1, 0x7}}}, 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x482, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r1) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r3, 0x400448dc, &(0x7f0000000040)="bf466074bc9dd4970ef4a79f62") [ 2454.101139] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2454.104942] EXT4-fs (loop1): group descriptors corrupted! 21:44:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:37 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r0, r1/1000+10000}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a12e91afd0ca10d38c79b5d7cdb96ff21e03fa18a067bd81b18dbe4e019f0f521132741fc77319ab98017e3159161bb8ffd4539eccbea09ab8109f28aa8b8a569dcc49efae28d71d212d67fb25c13f639c4b6bd7f93e"], 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x288022, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fsname={'fsname', 0x3d, '%\xa2#(-#{'}}, {@dont_appraise}]}}) 21:44:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xac, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:37 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x8004, 0x4}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) close(r0) 21:44:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000080)="df80ed05") write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="7ffce1156cada14b97f335e249f96c4079978c5754987a0beca76ae94248e11862c7ba1932d10e523e32335d68edbe1d456cc645bec52c9fbfc1cab92f7547b30b6134860d56d633134d37c1551aba73e2d048de4d66853c024c3f006b7d3a9cf0a89c5c925f6264fadb0ec3eb026a094cbff6abd902c8e81f777714d07d1c5918f8543863b7f472578c3ccbc22761914fca390306a085edd993d243e7b9714660bd670c7e7a9ea88c3945bec768d7df3715e0433dde6063af0b4d0a04d5cd3d81824f8f70d8ffa907fcb1fb365ac3ffe7ed5c2578d98fa8f26257eb62b47c579b"], 0x6) 21:44:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2454.557231] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2454.560669] EXT4-fs (loop1): group descriptors corrupted! 21:44:56 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x8001, 0x5, 0x6]) r2 = semget(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000200)=""/84, 0x54}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000108000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x100) r5 = semget(0x0, 0x0, 0x0) semget$private(0x0, 0x4, 0x0) semop(r5, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$IPC_RMID(r5, 0x0, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000300)={{0x0, r3, 0xee01, r4, 0xffffffffffffffff, 0x5}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20}) 21:44:56 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x3f000000}) 21:44:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc203, 0x10000) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc72c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fb6ccda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x328e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd191}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3230d42c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1694}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69f83957}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf394}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x801d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36767c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd7f23d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58a4df81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc1a155}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cf44242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x910d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x283b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16d30916}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ebe5b36}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ee3c710}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x590c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7672}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24bc4f3d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74287c97}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) write$bt_hci(r3, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x1c, r5, 0x939f0c73e17edec1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40d0}, 0x48001) 21:44:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) 21:44:56 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x24010000}, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:56 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x100000000000000}) [ 2472.673562] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2472.675234] EXT4-fs (loop1): group descriptors corrupted! 21:44:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$bt_hci(r3, &(0x7f0000000080)={0x1, @read_clock={{0x1407, 0x3}, {0xc8}}}, 0x7) 21:44:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000300)="b0b52c995451418c1141f075d04fbb847d41ae15e12f2bcb8bd5be8e0e274d7ba7cdf8d19c3dbaba1633ae54c9854e0e72e09b2631e05c2d5877940d63ded8fb842750cea0c227cf9ce65ed39a9f8f67d353c1f49fba8daeba77c2d631ea89f49a2d364742edec74b746173903772db116702b86db0c2647dcf635a760d266680b6a") r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r1], 0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000003c0)=0x10000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="f6475de9df35ad", @ANYRES16=r3, @ANYBLOB="100028bd7000fbdbdf250700000008000800ac1e000106000b002900000014000500fc000000000000000000000000000009110001004e4c424c5f434950534f7634000000000d00010023235d5d29245b2a0000000006000b002100000008000c0002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x8805) r4 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x9, 0x36, 0x7, 0x0, 0xfff, 0x20040, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0x1e}, 0x2b46, 0x0, 0x4, 0x1, 0x8001, 0xee9, 0x7ff, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000240)=0x20000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) bind$bt_hci(r5, &(0x7f0000000500)={0x1f, 0x0, 0x3}, 0x6) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x400004c0) 21:44:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc080}, 0x10) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @le_set_ext_adv_enable={{0x2039, 0x1002}, {0x0, 0x0, "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"}}}, 0x1006) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:56 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:44:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:44:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x3167, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = dup2(r5, r6) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @remote}}}, 0x0) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r8], 0x6) 21:44:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:44:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) write$bt_hci(r0, &(0x7f0000000280)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}}}, 0x5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20400002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x43c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:12 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x100000000000000}) 21:45:12 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:12 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x1000000}) 21:45:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:45:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001740)=0x100000) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000040)=""/66, 0x42}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/145, 0x91}, {&(0x7f00000011c0)=""/93, 0x5d}, {&(0x7f0000001240)=""/46, 0x2e}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/237, 0xed}, {&(0x7f0000001480)=""/239, 0xef}, {&(0x7f0000001580)=""/171, 0xab}, {&(0x7f0000001640)=""/60, 0x3c}], 0xa, 0x7, 0x7) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) close(r0) 21:45:12 executing program 7: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) sendmmsg$inet(r1, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3b4c7ebc51e43371feef7b3b86aa0425e1d5f6189716d18d925f478ba768404925f3ce590828289f576202cbcdf40e82321f80e9d13d9cac2c215911f2f7dadf", 0x40}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="210bed699ebc69c4aced4069c96092e43100e8eb8c8384401055324c083c1ce6b1e3fe759494e3475baa624388620deecfe613bcfeab07bcb002e8da0d7ba58400bfd119ebbced0923d3d110660e56c100c5aa9339a689f59ce0aa60b644c390ee0d999297b4ae668c10cc", 0x6b}, {&(0x7f00000001c0)="c5580f233c27d3ecabb4c6e8981967fce3", 0x11}, {&(0x7f0000000200)="60b418342e0006a997e7a789bbd75c2f2ed57fa0207f8da0e27da1af9492cfb5322581925d76601e3a96627708b719e3fda6efd941c607", 0x37}], 0x3, &(0x7f0000000280)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x68, [@rand_addr=0x64010100, @broadcast, @local, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xff, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @private=0xa010100, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0xf4, [@multicast1, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xc8}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="be2a4f272c145bae92cc8f98e368426e610abce29350f3219d60059ca659fccf2f9de201eb151a8ede28e619dabaa97607523b141486b2e4b254", 0x3a}, {&(0x7f0000000440)="4e305a412b7d133a891159abda929c97aa119ec6d7a545033a4b9e28f61b950cb0a550e8d692", 0x26}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x92, 0x0, 0x3, [0x5, 0x100, 0x7f, 0x5, 0x7, 0x5, 0xc5, 0x1, 0x30000, 0x3]}, @end, @lsrr={0x83, 0x1f, 0xb9, [@remote, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @local, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x2d, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x2e7}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x9, [0x9, 0x3e400000]}, @timestamp_addr={0x44, 0x4, 0x65, 0x1, 0xa}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x9, [0x2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x63, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@empty, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x178}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000006c0)="c1253e178bd5594e35cd77ff3dc775db9eac02fa22c2848386885763e03f14da81b823bb966a33a0a10d466be81a357ba8f14b5d3f950ad633bab9aa8bebd12a2180897d5a88b797d071d62c8609f7447abe5587f972b91b8417ffb6643cb1df4b", 0x61}, {&(0x7f0000000740)="c0e19aab0cc0f2c6879dc2228dd40e9384a61af4ae07b0ac89e56a57d5e69625c1dc8ba1e5f36722f95db791a3c617263ea7", 0x32}, {&(0x7f0000000780)="b0b02390e6707355e4dd1b98f9689bbecb739b9f874a26166d936e230824567f8e26d490ceccd65eb2dd3a5625f3bccc0d320b318f098a4e751ed55a3a510e5fc6ec2601af03b234a1744dfb54f2ecccdfee8e6bd7fdf19e4fa3f3c7a64d1a59fe6995f61cdf75492e81ec", 0x6b}, {&(0x7f0000000800)="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", 0x1000}], 0x4, &(0x7f0000004300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x36, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast2]}, @generic={0x83, 0xf, "d8f3fcb2d1787fabf2b782c152"}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x5, "689667"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14}}], 0xb0}}, {{&(0x7f0000001900)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000001940)="2ae15fbaf41591db2bc47fc2608147c109416eb68bb8849ffe9517b5c0439457fd5deb698b4f55b03d0ddce03a81c2d56f1ad36ad831a437dc6b08dd7cd3dfcb7c436addc3a8a0081b62d185110a0a536c64c3cfbbd50fbeda0d3fa60b828497ab04bd2b0295fc26b83ea36c2fa113097f2496d4c1496c264e4b28654640191a06174a5c5a459be0d256798d6e9bcecd4f1a89510495", 0x96}, {&(0x7f0000001a00)="5b145516eea3ad6cc29b8982c2be241dcb3d94602ca8a23753430aeca730db78a38225956aeefcd843684644f2e7d76e42bfe1bcca06a906fdd56639d78e9c9652a703551cf2498002d3353df4a49ff1a835a63c6ec411ad5422ddb492ae29fef1323617b1b6ffd14677805426f34ae21cd239b27a623c5329db1708aea2687888a6efa13eb175b648d519b9cd34a9cdca32ad05750d3a33443476d68336e5630bf2ed50569edc7162ea01a330ee6391e5d5935ed544363f7dccb8139d523deb0ca2ceb42d13d4d5b596878c9972996b36286a467721484837a96ac24247ec886fa40e81f5262e42267445075531c8e339badd8a28cffd1038166776de32de4c7847b4e9552180cde906b6bd65bed6787f38a77056aeb53c251444bb4d18aff3ae7695ea8487e315d8a777235b547ea603ec8779277be351e62f54b072d9d042653df8ef8d18249b30fbecc0d014fdf6fdb3e924b70faa09de8586919bc54cba33c15cdc8d938f1a7152dd8822812865a604dfed5a55eda19564bc865b76ffe05d3d7a8c7588f9722b1cd8cada2621146b3f28b1f40d31ff030205245076159d1e98a674e2732600a3adcbde1d697de29decb60c5951494a12f9196b13ad9b843b2d1baee46b6f179e38c1cda4797d016bcf024ffcef1c16436b22401139712e83ece8addbce1fa533a034ba17f384f9644fde8f44ca964815904c76ac8c0d33eb1736b06af44b407a16da1016e64e411dfe59bff4a98ee491b9c28bcd2498e3b8254429f4ed5ab9f95116dab774d0ee971ba636fe8e0707acad69c08f82a3cace6933c7924181fb9b4389994c52ac26bbf2ab94be5a683f25810082cd76be590a53cad8c8657b6ca46807494fbfe218f8c82189852fcbe35d7c3e84b9fefacce7cc9a4adb572d310adba8af6e32e542a03ff944931f8ef6479256af5876bd74bb6e9445a33d8d34d3393ffac9ef68bed2c4d51539f3217a2380615e8c47686e15d30468c259228fc2924d405e5d8fb75775e0961120be98f3b6406f6f0df105a75a70410171a665eb5c25f074bb063c6030f25dba150263daaa76b8f1fd578fec51a0352e203cf83317347c650f1ef2087f760bf5a133c90d3329786253d25be4ecb287d2c87e437b18465bfe6690ce0b226bbb4a3c36916364135921a3fc4093a59d9b5d2cd12d7bf1b5bef15865dd84abf45b968f51ba1203b967cc2b9e246d70db01b63e275146db3e6640a3ee3d91b1c321867da1a081e9235561ffb3918e8eb2a6116845a48ad4a09ad937a4feb96e45c1c5bfa814605e8c1a883e744a80992f875db8babef2345227c3566dba28a5934c544e466cb959cadbbf16a99c7f2fa162a9c80d92cc000984dfb5ac0f73f4c05ebdb0fab7f47e19a9b65e3eedf4d201561e0a92eab5cb801b9691215c45d00b644f3371aa68f18175668a5825d407a5d4d1e015a510a58994226ee0f47ca35df986776b4ef14d82482900945a20242d5a7765b9d201ce00cef1e0553d2ae73caf76efdfc2af9e5958956f9413bbf3d0478a69e26a32981e2b4da59d608f7134e165f375e7bdc868614bff8b51f4ba5c5e50e2d0ccd1ec13d04e1a6cbc22c62fd0ab4423b90b08670c8bd887a663d6dbb80fe1369bf298c3dbc931ee4aad34c4b0341870f152f4952f1c7c027267ec36d70246bb4457eaf8d86c3564303c2b2dede1c5f7e03ff2b7209d82af770ef37d5bb1cfbaebd4c0a31a9aa22ea164a1b8269274ab6b0f0a85c282d98194db0d3e9cb5ebe105939c2e87db9ca0de2ced169475ac01da7c0c7bd9925306ddcbd915afa2dc6745e3a8eb4a64cf492ae9a91ddec7f25b3926710315dc8adcf5c7800b2052a9062de03f8de0a6b9b7eccf01bb3f7b36feac88423e70dce3e6fd979b293e201d55ca1ed48ece139babf544ae518a5c8ccdbc14a8510f29a4358ab12fa76302a1eba9fef244cd716af194d06bc651ff83abdefffb657623207551a9d54d02992a889fd1516365721ba792c9cf9125f44573990006f1e57ec57281ef4bd021dd0645ece307b286888159861d5c48cd665401cd471152c4040b59d2a0182de32c09173ebb7e59f7c48cc04129d21404d853703cd4f71604194d34bc2f1747ca8fd719363fafa45ffa26d73a0320ce045c5dff426320b7b6c550e620775b74744d306af30fcf333f30ff0e2e825f2669fde848209eae83aa600d6cc95a8a0cc6a7d585273930f5e3cb899950e988dec9d14d60faacfae8443fe4a6abbed057d9490e20b378095dd402fe402bcda300787292c8bdbc9f49f5586bc080fdea82236b7232dd629d3d737e0998b12d0f292dda6df0ddf6813a6ece05c412b9fdc63db7b955adac00c95656795da038e584c4f278ec373d2ba9f9d5072f638699161b8fd6afa5311f313e8a1c2601f3242c361452ed03b44b69fe8513d24e417abb98af3721d2ba5ae1a0df71c77c99d0e8d92850c22246238be4d04b332317048b23e50eef62d498d2df360798e1f1f4c87ce200c96b2ad4dfc1dcfc983f2739f8d14a17a1562d5bf924ec2a81224ca549563a4410aae6c6efd0c2e0771d2100bad839b8d31ce042c81e4c8eafd16a13b19f3b52409532bff378bc4d1d755d282593b4b352f497da82c4e0dfc3d399d465cd864be89dc0f4e3f02708db0c05e252a254d9d7ac66a7eaadc5a196aa291bc84a16c7ab594f65b319fe5bfe6032392f7cd6e19ad01d8462e02886f19313743d4173b566deefeb71a53a3d76f53b6224a5e248420a0bcbf9bc9480fd7311d82472a85c93c34e822e5ae3c0a7d8319a872ed800fcecf5f919da6877a8a3b908ccba1b5b1520cd1fd105c155c27052e7d38203b0ef9474aa89fd0078ddfcf3a92a7f6858a8ef68c57d51a5a888872cc216a58228edad73dd5b67433683b69b6f065e264ce4e9687f20fd2f46fc213b7a89765f5183cc293fbdb45d8221a1ef3505932ba9f4a813f746e26c804bdfe8b2dd417755888044d71eee9e948820952c2c81f1b3f5b6144f914715c7003b2e0e49b2fdf13ef76df33313ef36375e6b2b4c508a9cf9765ae9514abb316af03536e26f1f9beee58945497fa398abe7e9100200c937db47cb05c9a1c4cf32b0646b4e864f9469dee74dbf73a47a6843993bda9637aa06feaa55c051285500fb5d94fb90e5da3af5618bf6ad637b72d5e75bc8619cc8def36d3068e8e02c8a62a17f4583747108c2219676277e1ff5fb56d7abc5faefe72dbf1da35e052fdc639509c5ba5617feda0e9a04086ecbaa7bac59f82bf8702ca2f9dcdbe17b1584c5305607b696471e9f444920006ef7c395f22453b1c62174c9efb4248eff90a639a67a59eaa11b0cc841e6d67ce904623dd4b12ec04240c0b2552498faeb37d4af5a8dfd7698930a23120e737d7296ea4de0786583f70d9b25bd5dc4f5f46753585f250485085eb9dab823089ed96b03d504e7d61ec2603021a47dbd05ccc00e090f0ea4b6b31c2c73224dcaaa8087a2cc85c938d4d2383229d2ca3ee77b7f866e26ebdd2f700f566ca6940385f3be002a1626df115790338a5b15a5f50862dca40e16d79f433799fb77cf10906ed2c09ed7dec1b938da4ff8ad923cb164f414315d7b7c8e0e3df9f3f8b8da38de02a3ed3bba7c6d17eadb4c5d3df5e7c915a3db163488d02cf45d229c12b6435924b83ecdfc112211ab68ebbf154ee2553168157cc5a65661b6b5e87478b22407dc8c99e3d1fac1434a0a758ebf377c24728c8f00ea56b1e930ed338fb08cdb306eed6f1e61ec23c27d7d72a3320ba3c36eb825c769eec4d47ad9c5647b1121781508438e64b8302ffc07cdd1fe05741f254bec87e2294d734ae075f8c36b5c9a54e1a3353b8f966aa9d241c2b395df7181c3d0dbce7c36c511309f1d06de2d1db3def29a733c68cb6985b156f8dfbfb75eaf3561f896ffad4576bdd0a495488eb349c5b51117a1d61f7e64014170d560a18224092665114da2b937466c05e12bcd38ad6d3812b439143ca449b90a028edefd0182374a614752e03dd754ea58633bea8b37de9624990ae7cb5204fb9770e38759be138085941a6d8982353ccd014b2cbeed288ba04548e3740617d6b753e34022a3a88b51d94225190f93c8a647ceee38e8f8164f2215d2e60f6b9208f1b5341ec62517836be11cc1bcc3337a9a8703aa491a1ab4e64944c979890a10b11f4faebee74f5a4b3bc548b3a87bef7882631f9db6a26b8e33fd359a91be56936e033c3133b2282a74cce44f363107765ccea349405174436136eefce1fbd295710b3d179ef844c785443dd45e96b82aba34b31d3716595fde661b3b8daa61099cbd59d359c8cbbe0392a0b2cbecf15d026d07ee42fa374980cb8b0284548161b23b5e994b6782c39080e2384c3ffec08e0914286149a1f27bdc3b537d49f3bb3fdff9a10f7dd95b32055f9b63956a6a30815e387fccb960e3121b1bbfe6a1c1167d8a3a6ab699dd3f3cdc2de050b4baf7d17cdc1f15a33cb48e8257047b91bbebaa046c70c9424380376ef9c6afeb2daaf4021bd848292ed3ccdbd60aa589ab029c806ff0717b6b9c32b8412cad12ed3eb93280b8a893a556b15308eb249f610411630af3688b9c7b678de6276cefc581de219d1e5775a5a7e76f175ad9f5752e81950c370526ef1d279b6a0e0374e89db49aa2d0ce2841ce52153cdad2b6de76a6bb9546848aa43f545fdea7ea45b6eb40f29563f032749144555447ab5e7320d348d56a78c0487a1fe992e0b272343fa4d5d1d5b332eb4941d6da170bf65c70c46a0dbe60f6e76939ace0e8c6d8a60505940ab9b054f8da9706a10b38f50bec548b859d901a5b191a598821a0126ef9c3eac24c1eefad19e4859637e3de93b8f854b327815df51cf266d6415ddecca676e2e20294634c2b4b8a73f55e1fcfb404b2159b5edc439c5c4f1113d8a7d5d8c18aa8fb90b7c44f1138d017e301f62d615cdb0b0a81d5ca6fc0e6d0916c6e4f3df95c20428ba16e6277f8782f5ea4f9a0a547b5a1c257c168a3334bd5747c79d9cbb027eceb6f33e6a124741eb593384c7281f12b1964061705beb7c94b384295437238b212bda175eef09dfd7db3b9277125488b1aa74176938b854f21ba41c31c8927dfbb227e681cca8eb347e3407dbc74ca1a7bb72f86163471d036b19024e1a12418c0d54e84743a8b4acf74645ed8eed3846f578a7a49d18dfd95f879f442cd7fd4da9a27a51cdddca301c5aa585d3629cee27f2efc1cd2d535a36c9ccc20b6fdc874d9d15845e32035181eac9f18f15fdcf095528be6ed095fc85051133c31e154bec055b8780ef8b599bd5262fcf45f946ef6012b3e1920cc9ef8c8a93e7cf0ae4736634dc6c561614d571953aa6a2662860bd9dd5c3da7645c0998fbbb7d8fded095239d3faed9d4807719f949bb22a35787a1ec28cdd1860bf44d6bcc2b2a84d07015591ff1e2572a5049a59f37dac44e8e252f5b155d8cc3ff91dbc5907cbe30c18fb18dee657bc54f3bd7d0538e4dced94919d22bce029be598da1f8d42f35b490a45c2f00727afac584cba2725aebcff29ad631c24d000bbb456f43bde06f9009be0cf917deb70b5cbc2caad45401c54ba1037fd8f4ed74169802a33ea5cb92bc104d634ddcc92143106d9df17f4afdd127e382ea9f8dc1d2341aad1a2b4d4ca2d582cf225ff6bb5a4dc98d9c2fcb0d8dbaf4099ae0a2493813d2448134e4287da87c276fcfe6056f11c5d65fd4ea46328c9240822402ef3cefb36adff89afb2576451519cc734100d4b11", 0x1000}, {&(0x7f0000002a00)="216df272ae528680a95938a3a2444bd968a698dabc40b1d37d3955aa46d836ac599be0d640ef834ec57a8e4302c07a6666bcf19c28d444bb31bd9f37237a323f15f22932e5d9c3d9f73e280688f83f7abd02c0ea3e47498396d4310b5b10b85c57616010047ab9525ff1429c", 0x6c}, {&(0x7f0000002a80)="376b5e75179d0019a283bae3267c3cc7f9ae3a762f6b55e09ea6b279e74bf18c01639bbdd7dbc5b0d73218be25f5f44d6513e9b2d7394705147d233812a7fdf7d7c9fd6187b8c378796d407cfc2f7d56110b5f45762ab9f0bbf7e4aae7aa18ae9c96d77df88c1c3cafcfceecde734d16f6ce7083f75997aca06bfd2311d25b2e722776bb6ead443d3b5eda92e6ed9689ef1f013d3d515bb1641785244a7cf3ac9a2c77256b81a608203efcbb349701d9b9d069d2d7f3dc0d4fcb45e3942636877de2bde9a79ba150d0a6dfce38ad282201713f9a4dd9d039a1", 0xd9}], 0x4, &(0x7f0000002d40)=ANY=[@ANYBLOB="1100e71deec61cd315124bf000000000000000000000010000009900000000000000b4000000000000000000000007000000863300000001030f6dbb7f01e6d1e3a3a997e1d39a0207fa8cdda11501053dec040710493bda3e5bdbacb58f02a9c84cbc06020707c100000000444ccd11ac1e000100000000ac1414aa00000007640101010000001fe000000100000e9aac1414aa00000006ac14140d00080005ac1414aa00010001ac1e010100000003ac1e00010000000744082be00b860db04414c9017f00000100ffffffac1414aa0000ffff000007000000019404000094040100940400008317c0ac141420ac1414aae0000002ffffffffe000000200890f40ffffffffffffffff64010102862c00000001040202106b943f0a0f2d33ef8094cea6037205080a48c5bd7f170008328a88d7ab69010465220712f39e2caf5f440b5ec3bdbad467aea23144149f41ac1414bb000000010a0104000000006a00001c00000000000000000800000000000022f1be22610ab9173a6bfa32eb23458624a98c", @ANYRES32, @ANYBLOB="ac1414aaffffffff000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac141418ac1e0101000000001400000000000000000000000100000064030000000000001400000000000000000000000200000001000000000000001100000000000000000000000100"/84], 0x1f0}}], 0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r8) recvmmsg$unix(r1, &(0x7f0000004200)=[{{&(0x7f0000002bc0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/34, 0x22}, {&(0x7f0000002f40)=""/177, 0xb1}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/190, 0xbe}, {&(0x7f00000040c0)=""/227, 0xe3}], 0x5, &(0x7f00000041c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x1, 0x20, &(0x7f0000004240)={0x0, 0x989680}) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000004280)={@mcast1, 0x7, r3}) io_setup(0x2, &(0x7f00000042c0)) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r9], 0xffffffffffffffd2) 21:45:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3eb, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:45:12 executing program 5: unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {0x0, 0x2}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x8000]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) r2 = semget(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000200)=""/154) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x0, 0x8, 0xffff, 0xb9, 0x3f, 0x9, 0xd98]) 21:45:13 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080), 0x1c) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = semget(0x0, 0x0, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semtimedop(r3, &(0x7f0000000140)=[{0x1, 0x7, 0x800}, {0x4, 0x31f7}, {0x4, 0x9b8}, {0x3, 0x2, 0x800}, {0x2, 0x605, 0x1800}, {0x1, 0x4, 0x1000}, {0x4, 0x5, 0x800}, {0x4, 0x7, 0x1800}], 0x8, &(0x7f0000000200)={0x0, 0x989680}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x401, 0x1800}], 0x1, &(0x7f0000000080)={r1, r2+60000000}) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x1, 0x8) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r4 = semget(0x0, 0x0, 0x0) semop(r4, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1000}, {0x1, 0x4, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x3, 0x1}, {0x0, 0x1, 0x800}], 0x6) semtimedop(r4, &(0x7f00000000c0)=[{0x4, 0x7, 0x1000}, {0x3, 0x3ff, 0x800}, {0x0, 0x7, 0xc00}], 0x3, &(0x7f0000000100)={0x77359400}) 21:45:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$sock_bt_hci(r0, 0x800448d0, &(0x7f0000000040)="98605150f2a3bf511efb5252027de8ab88a3756c50c60a6dee15d3b7f9658ece") [ 2489.506624] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2489.509053] EXT4-fs (loop1): group descriptors corrupted! 21:45:13 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) timerfd_gettime(r2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ddad67f6906a9097e1e33940b098171c0c38f19acd9fdbf195b77a5f2e0f10b959769a46390f05d592dd5be0abe6b50880fac365d60367d0bf651d3ceeb9529df34a073e70bdd975d8dff6f90666bdf4fb82ae8d225bd60faf690521b90c0cd636a3c0ae473c409f7d3d5bd5272030a601ebbcf8df4218391bf4d70fef10419e68680bbc9b91313e02c30393546384a8c9dff550b8d455752c58885b4fc842175b9c6ae30b034757b1d91bf2da27bc177ad0c41d9f0883c66e5f0b972146c01a03e2d240d0c55677c6dd41137e322655e22b04d7111b205d395a"], 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 21:45:13 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)="50a150fb99773f0f451519bf79ceca4ee2faa7636e9bee3a1186281194566c0ce0c8eb0f396a1611f92da9c316173d8b7cbaa8d9da8c33969996964ec5ca47bbd72c334b0d26f3e05530356bb6efe723d96a0e20d5f641b31afff05682b362ac2b51313d50265ede250fb67f26197f9958effffd460cdbe4d2c542285bd8b983aa8fbec05fdc0789f0071be399cf26fe5409db090d43cbc8d698e37302d4a8ee31e363ccad81b30f", 0xa8, 0x0, 0x0, 0x1, r4}]) sync_file_range(r1, 0x6, 0xb61, 0x3) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) fsetxattr(r1, &(0x7f0000000000)=@known='user.incfs.metadata\x00', &(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xd, 0x3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[], 0x6) 21:45:13 executing program 5: mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ext3\x00', 0x4000, &(0x7f0000000100)='{-\x00') r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:45:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:45:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2489.756925] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2489.758609] EXT4-fs (loop1): group descriptors corrupted! 21:45:33 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:33 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x3f00000000000000}) 21:45:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x22c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32a51ae5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ceebc04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x489089b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43a54b4b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24fb4dae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3414b18b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c8a5fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b3947e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x547c31bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5012afb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x137d3f36}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x195e475c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e83e001}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x755cb526}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5490dc83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x83d6396}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x100a2710}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b8037b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495c19b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66035421}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d5a8fbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e806b6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12028f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2de40b22}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x22c}}, 0x4) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:33 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000200)=""/4096) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semget$private(0x0, 0x4, 0x220) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x1, 0x4, 0x41) semctl$IPC_RMID(r1, 0x0, 0x0) 21:45:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:45:33 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x100000000000000}) 21:45:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0xe0d}}}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = socket$inet(0x2, 0x3, 0x5) ftruncate(r6, 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r0, @ANYRES64=r1], 0x6) 21:45:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x43) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) 21:45:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)={{0x108, 0x71, 0xd9, 0x146, 0x2a9, 0xb804, 0x237, 0x2}, "e87a181ba19ad79765baf2dcc8767c4e4b981ae856ca74e03218d88657c6e72d0aec4e761409c3a63a7a32838991e93348a51cc3ea6377b0a8d365d012cb9159159acaccc90eb6f541377b1b132cfecd1670f0b7862f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x876) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) [ 2510.035509] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2510.040059] EXT4-fs (loop1): group descriptors corrupted! 21:45:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:45:33 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x1000, 0xff, 0x5, 0x9, 0x3}}}, 0x11) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000080)) 21:45:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c07228}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x491c2bf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x334c4683}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f668ca1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14776805}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b3da21d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63e28e36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6578c6f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c156ffb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, @llc={0x1a, 0x207, 0x7, 0x81, 0x72, 0x2}, @l2tp={0x2, 0x0, @empty, 0x3}, @can={0x1d, 0x0}, 0x78ac, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)='ip_vti0\x00', 0x80, 0x401}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3f8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x37, 0x5, "ac299d686484bdd9185eced649e8c9776ba0ed2dd349d6772bb23372b501cb328dbffddc56f7f5014b9f94cba1c104e90a0c7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff83}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf0}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "a06b837eecea52340c340f07dcb19a0a51c24340fa68e14b3e187dd6746fa230731e1cd7413fb13ded1307a8295c5b9e08d874d92fb44d492300729a2422d5ad423e7f4953aec9e9a03206c45871cc07f6223c68ab94f4235b628dea44f9324918e9302e27fa5f89f86bf4614708420932f8586b1e9371273afddb0b8b913b9778000f2d9eaae583ff1d5aec6f97aaaedac4733c147fa4b103ba0d"}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "2a493f189f46f3a9823b2700771f1c44df3dbfe438b5e25b"}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "dcedf4455e02fcb5ab2cb35f4383f8ae6cd8be055c0ade401ec0c3c611a81d129018ee3219f79f66ff76263f3e38bf33f43da4ae5936512131251653d3018ddcdb2c43a1d13188b4f1fed6201bdc0d381d5b1df5b60349332d896e3ef28d6ab7d4af695faaf2ef37b489d3566b2fe07e478b4848a26cdb97a237bdd65df1ea658f9a0f02951024f213f1587ffd248d731bca67ccf174f3a24345cf88660ba16e1eeadca2d73c5208a020fb381ba62df99137202d716ad32b22317bebcf7d6926418b"}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "0f589dc9942280b55680e96100907f3ad343dcb18c3e0836788978fbd18e0f06664671aa50b85dcd129c7a9f0c004b5c3bf721e25e7877487a899faf06f14f9bd54a56fbf78023056347707332485530c2e03cba3cf51d03ff2e1cffffc4eb297e373e9a3b814b4e85af35c67458a9dc53137ecf689a935d3bccb27edd0e849a443198b178f5d63b1e19ab8df580fb71"}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040081) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000980)={0x1f, 0x0, 0x4}, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000940)={'wg1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x830) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) [ 2510.433118] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2510.436515] EXT4-fs (loop1): group descriptors corrupted! 21:45:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:45:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80801) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x28, 0x1, 0x70bd26, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004005) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:52 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x3f00}) 21:45:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000141) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:45:52 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:52 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x1000000}) 21:45:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) dup(r0) 21:45:52 executing program 5: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r0 = semget$private(0x0, 0x6, 0x0) r1 = semget$private(0x0, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x2, r2, 0x0, r3, 0xffffffffffffffff, 0x8, 0x9}, 0x101000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x400) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x8, &(0x7f0000000200)) 21:45:52 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x3, 0x800}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00, 0x0, 0x3}}) 21:45:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x800) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000100)="4fa5cfe0bab0a21b09716215c366f62048805ce1b8b228135f0a8ff236a79e0883481d713b15edee46f3917f8b162e52562701a1fd51ccbef1f98f250b52ee575fbc6c5da6662755ee3deab8570f28e8f3e6caefca08ae20317b6d29f5e7a7c7516720fbcded976bd5f3a72aa4462d133c454353a4869f2ee2e277ee984835d318ce30b9598773b5b8d1f9f72bac9a98406b4ee3426acaabee0677445587d424b43dfdc824029635d09f51620f78c4f2ee81eb77ca9e07a8618ef5bbef6d8cdb8baf70cf0be6dadb6f463feb261ad8f93e780278b68c") syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c001) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r7) 21:45:52 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, '.\x00'}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x3, 0xfa77, 0x2, 0x7f, 0xd72}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_bt_hci(r2, 0xc000000b, &(0x7f0000000140)="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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) [ 2529.094043] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2529.096716] EXT4-fs (loop1): group descriptors corrupted! 21:45:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100100, 0x0) fchmod(r2, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:45:52 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:45:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:45:52 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001}, {0x3, 0x9}], 0x43) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:45:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) [ 2529.351282] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2529.355402] EXT4-fs (loop1): group descriptors corrupted! [ 2548.363101] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2548.364312] EXT4-fs (loop1): group descriptors corrupted! 21:46:11 executing program 5: r0 = semget$private(0x0, 0x3, 0x608) semget$private(0x0, 0x3, 0x400) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:46:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x2, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000180)={0x1, @host_buffer_size={{}, {0x1, 0x0, 0x6, 0x200}}}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r2, &(0x7f0000000140)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) r6 = fsmount(r2, 0x1, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x8000) r8 = dup2(r7, r6) mq_getsetattr(r6, &(0x7f0000000200)={0x6, 0x9, 0x7ff, 0x9}, &(0x7f0000000280)) write$bt_hci(r8, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:46:11 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x1000000}) 21:46:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0xf0}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x800, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/96, 0x60}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/184, 0xb8}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000800)=""/203, 0xcb}], 0x7, 0x3, 0x6b) 21:46:11 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe0e8c5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 21:46:11 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:46:11 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x100000000000000}) 21:46:12 executing program 7: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000280)={0x3, 0x1a, 0xa, 0x9, 0x0, 0x2, 0x2, 0x12c, 0x1}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x24000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x100) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000480)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r8, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x70, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) 21:46:12 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:46:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/memmap', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) write$bt_hci(r3, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3}, 0x6) 21:46:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x1b6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x8050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x1c, r4, 0x939f0c73e17edec1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000240)={0x0, 0x5e, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) [ 2548.631114] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) 21:46:33 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) 21:46:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:33 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x3f000000}) 21:46:33 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:46:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010e040000ffffffffff"], 0xa) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/pcie_aspm', 0x40, 0x30) r5 = syz_open_dev$hidraw(&(0x7f00000005c0), 0xe9, 0x2000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000140)}]) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf4e1480a8645f8ca, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="c86adb79b7e62ff66984b5a5a731fabd71af30d5470629dac0ebc01f1d1c548d8ea07ab09fbbb0644834405cfe48e5843f6adb976b6a5accdc030a8201efdf87f6abe7311562a133772294adee8373bb669a406bb8416f87a546120b2ef3b77234f7ea800715732f6883cbfde025e173c71e316821b4550f43f0733ad4511557364a4731", 0x84, 0x63a0, 0x0, 0x1, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x1000, r1, &(0x7f0000000280)="6635acff590c0aa253c4aef6682ba18c4a6f3f08c87335bd72f431a51cb3501cc0fd0b89717a8841ad915be5d8b1c6829970a19b3beeffa5c864ec3c9b7c01d9114ff9ca781e76c84db2c307fc28e9b25c9a5e202ddf762998b9746c9b381341c955ba031b62a4702b13313ab8f346df0c259480b05d2f64cbeedc06427c98501d62cf93b983c7712b719f8b209ee11a9de91d2d5fd28cefe7da7b1ccf832342266ccb0f7d32faa9e77b393d31e702af3e172e7c94542ed44da1c66a3ae8c30af6b115b69d25", 0xc6, 0x2, 0x0, 0x2, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9d0, r0, &(0x7f0000000400)="41ded4019089fe0b5b3fc80504c0e9e986b52f7d9f5ba90531574b39314edc5a30c3c570b2a1032fc58684111e9b2d92e6c5a4b82303f16d51978301695927fbb6febcab429618e44c2c823249853148414a037099708d917e15a0452fc50b465cb45c73035de66c30c3779c69f64a42eebaad05135d1d939c07a72b361c3d2abceef6f5901cca93484de49592aee5b041d0de5a6bca783e78821f79da34c2e4b6ba755de6c066f4d333128bb6ebad767d17c267928a828ff0937959acb1901771a2c1e78da9e038d4a02bc52975da777b8655fa08e1274a3fa45717d6dec327b02547a79f0a594239", 0xe9, 0x400, 0x0, 0x0, r4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x33f, r5, &(0x7f0000000600)="b338aa87f31887fcd1cc437494fdfb9817c935cc0aa29de5babfd49640dab5931d7ac33eaeb5c6368dff904c27cfeb02a22d36ffa53991d722aae88389b93cc5e0fd004dcc2574f936ac5adbea7be80a6dfe22d45a281c0e81306ce4ae9910949fbc78298d6b2e833ce43b5b13d2ecdd4cdf337d", 0x74, 0xfffffffffffffffe, 0x0, 0x3, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f00000006c0)="7f2dc9a754da53b65b95fefa006906c7403bcee7db279f0d8bac80734e9076b4883f8f05b957a7ca8b69bb7d76d80e2f4b796cb4db8123d9684162004e78b1cc93e1d3ab3cd9043286d6533fd1b954651ddc208ce875bc344642a72f524da811867f8673211ffce5f5232d85dda3fb3b0a32fda751fd7fc231f44c4f8792a72e6ecdc2d24853865cbe43c99b3ec223bdc1dba6494cb15140c64136a48b1e1bd80275a2bedc2416bd1e5df4b66ac7bda4fe23bc2432fd08e40c48", 0xba, 0x6, 0x0, 0x1, r8}]) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r11], 0x6) 21:46:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000100)="9523879f985bdb70af82d0a319d5e3a0f8840f9a56452f87f2959b925e5b1cd1f05e09f82ba2eb5c9bf631fea883746c4eb51b0adfcf37f517ada188a707c25976ace51e11090931e205015430c27a002f01e4f94565384d4bb5045d2d0753bccc444070e6473f3fc1e4dac3f710badd1892efddad9ae803d5304fc0c77ab3075f93652a9d0c7a6f50896292adb863b79ca17df2e3422350baa595073e0d2ef3ae324b17e6abeedaa392dc26f7bff3b590c5bce8846ef147358324caed6bf998718c7d6b802d7128177e8d4d282ebc732d") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x1c, r7, 0x939f0c73e17edec1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000040) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r8], 0x6) 21:46:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000002c0)="cb54370a3d78e37c59a43ed675fd1de96e8a6d1b59245a168dcda8834ebc883b29c9330135e26ca606fe693d3db4a788864b4efee8bf3f0923c2c62c483fff2f37a88e28808df37a1ebdcd0bbe4e447e2f9843c84b79b6f4d61eb1f40f9e148e74311eb8bf5b8fe04f1d593c694b7e019844344de0c6794bbf9a7122f76a090d79e001de841ef679e4305a10b4ef", 0x8e, 0x20000000ffffffff}]) fsetxattr$trusted_overlay_origin(r4, 0xfffffffffffffffd, &(0x7f00000001c0), 0x2, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000ac1314bb080002000300000008000800ffffffff00"/38], 0x2c}}, 0x20000001) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0x4d9b4106ff76a71d, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="54000000a76a2b6ab5273a46d3a346c3ee2d3f1b216308bb012e00", @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYBLOB="0a0004007770616e300000000a0004007770616e3300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) write$binfmt_elf64(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7a, 0x9, 0x81, 0x3, 0x200, 0x3, 0x3d, 0x10000, 0x292, 0x40, 0x45, 0x8, 0xfc00, 0x38, 0x2, 0x3ff, 0x4, 0x3f}, [{0x2, 0x8, 0x2, 0x10000, 0xffffffffffffffea, 0x200, 0x8000, 0xffff}, {0x6, 0xc0e3, 0x7ff, 0x8, 0x8001, 0x1, 0x8, 0xa00}], "4f5af82c4eb18bfa91d241c65bcf503c0e1763f9b1aa9fb4e8dd74ac1be28f6a31c95b7dc2070051ecdbc11fbd08b8e90d9d0ea02f0a358c91306973cf08fd21aee66a1c2cf9708078d36250b03d500b1e15b46ca580f4ac6f8a6b12c66a7c703be4a23e4ba6c967f890de4e996885724bba3c0025b410d7a88234d30b5b1a37b390df196f955055fa09668d140e3daac9debaaff23b7ade9a75ee5f51c00f85c48f51662f43448f92046d08d0d4b4da", ['\x00']}, 0x260) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:46:33 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 2570.329591] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) 21:46:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x22) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES32=r2], 0x6) 21:46:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x500}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r3], 0x6) 21:46:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x600}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000140)}]) r9 = openat2(r3, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x400080, 0x81, 0x8}, 0x18) io_submit(0x0, 0x9, &(0x7f00000018c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xb07c, 0xffffffffffffffff, &(0x7f0000000140)="ac2d765fa74cc8a535124c1035b0bd627eda30cf5d351f1dde8f3ced3269958727abb7dcf9401ea7b65c65d99fd697cd9aa6d57d586d7b95d175839383889a74a71bfddf8d786efc86cbd049c143bbdd21a55eca79212605f10641109fa5b29957822d7da8a4f8fa656e0ed0ec2433b16a3072d461c747e6a630", 0x7a, 0x4, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000200)="9049619c3e3feb60c0868c4d7fa560f57b3fb6c3715777f0180cb523ff95f38bdb90aa53272f5af07ea9ca58dd7912d9a1bb9563130d11243d", 0x39, 0x100000001, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x12, 0xffffffffffffffff, &(0x7f00000002c0)="7293a4e47075001cf15de87988a11ed2cf7d30b4497997377d4dc87f5d3693bc", 0x20, 0xffff, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000340)="ba5567ccb8c0a9b89e9ef3d612635946772e10fef94de4183420c96f248123a37846fc8a027b61b99dd396a082f528412497e4b3748ebb4b2782625697530067256ac7033fd05282abbee066219086a34a246311f9b2743448ce5ce55ea7153dd50bd487b174b4f93c3476ec88", 0x6d, 0x80000001, 0x0, 0x3, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x4}, 0xfffffffffffffffd, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0xf737, 0xffffffffffffffff, &(0x7f00000015c0)="4880e45e267b7f5ee6ec6317d05dd27e6e17eaf06bd3c322339585b42a894d6bc7f322c8abdfed3aacab62242f46771b4d82c294aebd7de090dd4c8380f004a2c6c680c1d71a3072e20b4d68543f8dc0eda7e6208766f20c6ceb7bcd551d5d76b1500fae9a8e577e9dd51ac25eb2dbf74e95c77db0140dc7a525fa0caa488137978a08431a794a7808ed3a74ad04a377f8998d59a92f3510e7a285a35a75afcb2e9d", 0xa2, 0x7fff, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x6d8, r5, &(0x7f0000001680)="1247587caf019746479eca6eecc7e338a3f707a6b14c3751cbb44c835be2b7d7465d632deac418baac11557575b788692e6e6913eeb8b0801d60381c031a232ff5638b2373537262e6ca70b582abaf38dd30139ca3c0a62a4b224ce8aa25ce51ecad1e4e067cc2e4170fade50ff9d5077373ec0820ce40ad54f674fc48e604b2e5dbd9dbf4ac92bb87270512dc46ec97d4adbfb9d946be2e26ad10c0f902d98b73efab754fe053869f0974ea382efae78e442045acc04bb33330a159", 0xbc, 0x0, 0x0, 0x2, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000001740)="5419426d78f24e2b77138f4a75f3feddf58ef38b486d3de8101805bf92a85e6c6aa16d1954af3d353d5f89c2baa96bcdc52be1cab4ce6739040c30e66e0deaef5cc31b3606aeb44f33201371b042d3add929f883a2fa8e1eacf83ad0eb0e04e203262862c9203bf96034c203ff3fc87f795251ffd328e36c5cd2c350ebe3dd3ff70cd4846a11977ee78dfb3d9615aa06601023a3df3082c8b5ae089ad49ace667219c761a186f04a4066d4b6cf51345a86549e465c6d09", 0xb7, 0xc000000000000000, 0x0, 0x1, r9}]) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r3, &(0x7f0000000080)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r11], 0x6) 21:46:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)="7baac58890a2d7ab0150635485cfad98") ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)="d0e77539197fcb1c78a341538c2a418d41fb73056dd1f60c92d5") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:50 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x100000000000000}) 21:46:50 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000580)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) write$bt_hci(r0, &(0x7f0000000540)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x2, 0x2, 0x23, 0x8, 0x7}}}, 0xb) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="f00000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:46:50 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x8, 0x800}, {0x4, 0x3, 0x800}, {0x4, 0x7}, {0x2, 0x10, 0x800}, {0x2, 0x7}, {0x4, 0x7, 0x1000}, {0x2, 0x6, 0x800}], 0x7) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) r1 = semget(0x3, 0x0, 0x408) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x800}, {0x0, 0x5, 0x1800}, {0x0, 0x8001, 0x1800}, {0x0, 0x1000, 0x1000}, {0x1, 0x4}, {0x1, 0x7e, 0x800}], 0x6) 21:46:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x700}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000180)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010900000400048008000100000000000400088008000200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x158, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb9efa0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x651c3786}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d9dbc9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60cfe06a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e33cf6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x547a49f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1034703f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38dfa060}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6452dccd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12a1c5cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5daad7fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a5f36cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c35bb5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 21:46:50 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:46:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x2e3b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) r8 = dup2(r5, r4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) dup2(r9, r8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd_index=0x1, 0x710, &(0x7f0000000100)="ea057586153db15155193e30ec92e007a83d", 0x12, 0x1a, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x80000000) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11) fcntl$addseals(r8, 0x409, 0x5) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r10], 0x6) 21:46:50 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 2587.127362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2587.151357] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2587.169243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:50 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x40, 0x8, 0x1f, 0x9, "7cd8a1121d2f6e7b4bc114c60145f6cb80e050f5b05eff923c9f74c7488ad6"}}}, 0x27) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000140)}]) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:46:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_hsr\x00', {0x6a}, 0x40}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc744d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41cb347c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501c8699}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55b88430}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9448}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x95439d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14b3336e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28aea043}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ff56bcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33952a45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be4f27a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x848c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ce28fca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x883178a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc649}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40050) 21:46:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:46:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0x900}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:46:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x6) 21:46:51 executing program 0: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x7, 0x4708, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESHEX=r2, @ANYRESDEC=r3], 0xfffffffffffffd7e) 21:46:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80200, 0x14) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)="9683c70685a3b29f02bcdd9dd3e97041") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) 21:47:06 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 21:47:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000140)}]) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="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", @ANYRESHEX=r4], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x1c, r7, 0x939f0c73e17edec1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 21:47:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0xf00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:47:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000140)}]) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000040)="a5004a0133b30cc3d3f020b3716c1ed85e29e6f5d5af281446a055c21e1288776465d403cd945d47c5c0de8662eb5e2f4201720881b8b32cb6d09497d3b01b5594df11f574d9e8353814ec4b1052c63bd40bbb8ec37a87e64fc6c3ec") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) 21:47:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 21:47:06 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:47:06 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x3f00000000000000}) 21:47:06 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) r1 = semget$private(0x0, 0x1, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000440)=ANY=[], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) r5 = getegid() setresgid(r5, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xee01, r5}}, './file0\x00'}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0xee01, r2, r5, 0x10, 0x3ff}, 0x20, 0x9}) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 21:47:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)="469925") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000140)}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x18) bind$bt_hci(r5, &(0x7f0000000200)={0x1f, 0x2, 0x3}, 0x6) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xbe}, 0x1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000140)}]) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x6) 21:47:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000500000008000700ac1414bbb71b4fc9080000000000000008000800ffffffff"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000012) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001090000180004800800010000000000040008c008020200010000001c000c8014"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r10, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000025}, 0x20000080) 21:47:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0xb601}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2603.514215] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 21:47:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="a25322595d12f670bd21d00b8720c5cf7b109c98d3bcec23f569e35dcaa560ae720c8a958f925288d53eaf1142d50ab523c7749ca20b78f5eb156f8ec4b8d88bbf84bcbf989dec3c572c9c4c1a323a96c91b77aafd3ebcbe5b611b8bc64d62b2d0c5451c767c4e815942ff692618fecdf6e82d8a17653e38e184281cbe23cf647aca3793ca41a97f594f2dadfc9f2e64c3ff0b15a7fe13f2") r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x200, "a40f97", 0x4, 0x3f}) [ 2603.520194] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2603.549373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 21:47:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000140)}]) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], 0x6) 21:47:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="ff82b6cf624dfe9e7c12dd6f4f8ecd6b569f0a2750875fa1457907f17e87b6b912e6375728da63bf1ddedd0517efe13806046093d36be673651f0050fd38d2727ea718111d9a9dd10c1de046e8") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 21:47:07 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(r1, &(0x7f0000000200)=""/19, 0x13, 0x2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x8, 0x7, 0xfc, 0x9}) ftruncate(r2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 21:47:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{0x13, 0x0, 0xf000}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:47:07 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 21:47:07 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/214, 0xd6}, {}, {&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000040)}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/81, 0x51}, {&(0x7f00000027c0)=""/173, 0xad}, {&(0x7f0000002880)=""/161, 0xcc}, {&(0x7f0000002940)=""/228, 0xe4}], 0x5, &(0x7f0000002ac0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/28, 0x1c}, {&(0x7f0000003cc0)=""/89, 0x59}, {&(0x7f0000003d40)=""/203, 0xcb}, {&(0x7f0000003e40)=""/149, 0x95}, {&(0x7f0000003f00)=""/165, 0xa5}, {&(0x7f0000003fc0)=""/56, 0x38}, {&(0x7f0000004000)=""/175, 0xaf}], 0x8, &(0x7f0000004140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000005600)=[{&(0x7f00000042c0)=""/66, 0x42}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/240, 0xf0}, {&(0x7f0000005440)=""/208, 0xd0}, {&(0x7f0000005540)=""/172, 0xac}], 0x5, &(0x7f0000005680)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x4, 0x40000000, &(0x7f0000005800)) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 21:47:07 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x3f00}) [ 2607.238641] Failed to initialize the IGMP autojoin socket (err -2) [ 2607.888422] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.183146] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.333147] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.347060] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.351143] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.354386] Failed to initialize the IGMP autojoin socket (err -2) [ 2608.424569] Failed to initialize the IGMP autojoin socket (err -2) [ 2609.102591] Bluetooth: hci0: command 0x0409 tx timeout [ 2611.151709] Bluetooth: hci0: command 0x041b tx timeout [ 2611.203142] Failed to initialize the IGMP autojoin socket (err -2) [ 2611.656316] Failed to initialize the IGMP autojoin socket (err -2) [ 2611.875409] Failed to initialize the IGMP autojoin socket (err -2) [ 2611.990699] Failed to initialize the IGMP autojoin socket (err -2) [ 2612.001100] Failed to initialize the IGMP autojoin socket (err -2) [ 2612.030739] Failed to initialize the IGMP autojoin socket (err -2) [ 2612.123259] Failed to initialize the IGMP autojoin socket (err -2) [ 2613.236021] Bluetooth: hci0: command 0x040f tx timeout [ 2614.530557] Failed to initialize the IGMP autojoin socket (err -2) [ 2614.943298] Failed to initialize the IGMP autojoin socket (err -2) [ 2615.179698] Failed to initialize the IGMP autojoin socket (err -2) [ 2615.248696] Bluetooth: hci0: command 0x0419 tx timeout [ 2615.603219] Failed to initialize the IGMP autojoin socket (err -2) [ 2615.664582] Failed to initialize the IGMP autojoin socket (err -2) [ 2615.691382] Failed to initialize the IGMP autojoin socket (err -2) [ 2615.705404] Failed to initialize the IGMP autojoin socket (err -2) [ 2617.649285] Failed to initialize the IGMP autojoin socket (err -2) [ 2618.340754] Failed to initialize the IGMP autojoin socket (err -2) [ 2618.422688] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.008496] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.055742] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.064148] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.114184] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.124295] Failed to initialize the IGMP autojoin socket (err -2) [ 2619.470610] Bluetooth: hci0: command 0x0409 tx timeout [ 2621.412995] Failed to initialize the IGMP autojoin socket (err -2) [ 2621.521859] Bluetooth: hci0: command 0x041b tx timeout [ 2621.802033] Failed to initialize the IGMP autojoin socket (err -2) [ 2622.390700] Failed to initialize the IGMP autojoin socket (err -2) [ 2622.419879] Failed to initialize the IGMP autojoin socket (err -2) [ 2622.445067] Failed to initialize the IGMP autojoin socket (err -2) [ 2622.475754] Failed to initialize the IGMP autojoin socket (err -2) [ 2622.533242] Failed to initialize the IGMP autojoin socket (err -2) [ 2623.566864] Bluetooth: hci0: command 0x040f tx timeout [ 2624.299177] Failed to initialize the IGMP autojoin socket (err -2) [ 2624.687771] Failed to initialize the IGMP autojoin socket (err -2) [ 2625.033553] Failed to initialize the IGMP autojoin socket (err -2) [ 2625.376372] Failed to initialize the IGMP autojoin socket (err -2) [ 2625.386812] Failed to initialize the IGMP autojoin socket (err -2) [ 2625.583711] Failed to initialize the IGMP autojoin socket (err -2) [ 2625.590985] Failed to initialize the IGMP autojoin socket (err -2) [ 2627.240657] Failed to initialize the IGMP autojoin socket (err -2) [ 2627.278597] Bluetooth: hci1: command 0x0409 tx timeout [ 2627.411569] Failed to initialize the IGMP autojoin socket (err -2) [ 2627.756853] Failed to initialize the IGMP autojoin socket (err -2) [ 2628.222049] Failed to initialize the IGMP autojoin socket (err -2) [ 2628.725153] Failed to initialize the IGMP autojoin socket (err -2) [ 2628.758353] Failed to initialize the IGMP autojoin socket (err -2) [ 2628.764449] Failed to initialize the IGMP autojoin socket (err -2) [ 2629.327551] Bluetooth: hci1: command 0x041b tx timeout [ 2630.253564] Failed to initialize the IGMP autojoin socket (err -2) [ 2630.500744] Failed to initialize the IGMP autojoin socket (err -2) [ 2630.561429] Failed to initialize the IGMP autojoin socket (err -2) [ 2631.374664] Bluetooth: hci1: command 0x040f tx timeout [ 2631.576037] Failed to initialize the IGMP autojoin socket (err -2) [ 2632.272002] Failed to initialize the IGMP autojoin socket (err -2) [ 2632.381299] Failed to initialize the IGMP autojoin socket (err -2) [ 2632.451156] Failed to initialize the IGMP autojoin socket (err -2) [ 2633.464584] Failed to initialize the IGMP autojoin socket (err -2) [ 2634.016029] Failed to initialize the IGMP autojoin socket (err -2) [ 2634.058353] Failed to initialize the IGMP autojoin socket (err -2) [ 2635.014901] Failed to initialize the IGMP autojoin socket (err -2) [ 2635.342654] Bluetooth: hci0: command 0x0409 tx timeout [ 2635.721117] Failed to initialize the IGMP autojoin socket (err -2) [ 2635.767345] Failed to initialize the IGMP autojoin socket (err -2) [ 2635.791220] Failed to initialize the IGMP autojoin socket (err -2) [ 2635.858446] Failed to initialize the IGMP autojoin socket (err -2) [ 2637.394319] Bluetooth: hci0: command 0x041b tx timeout [ 2637.560255] Failed to initialize the IGMP autojoin socket (err -2) [ 2637.562059] Failed to initialize the IGMP autojoin socket (err -2) [ 2637.736826] Failed to initialize the IGMP autojoin socket (err -2) [ 2638.454812] Failed to initialize the IGMP autojoin socket (err -2) [ 2638.903202] Failed to initialize the IGMP autojoin socket (err -2) [ 2639.186756] Failed to initialize the IGMP autojoin socket (err -2) [ 2639.200017] Failed to initialize the IGMP autojoin socket (err -2) [ 2639.438648] Bluetooth: hci0: command 0x040f tx timeout [ 2640.653268] Failed to initialize the IGMP autojoin socket (err -2) [ 2640.666296] Failed to initialize the IGMP autojoin socket (err -2) [ 2640.729890] Failed to initialize the IGMP autojoin socket (err -2) 2023/01/16 21:47:44 executor 6 failed 11 times: executor 6: exit status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 16: Device or resource busy) loop exited with status 67 [ 2640.988978] Failed to initialize the IGMP autojoin socket (err -2) [ 2641.846640] Failed to initialize the IGMP autojoin socket (err -2) [ 2642.133657] Failed to initialize the IGMP autojoin socket (err -2) [ 2643.726650] Bluetooth: hci0: command 0x0409 tx timeout [ 2645.774601] Bluetooth: hci0: command 0x041b tx timeout [ 2647.822596] Bluetooth: hci0: command 0x040f tx timeout VM DIAGNOSIS: 21:47:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88804d6bfde8 RCX=ffffffff815fa516 RDX=ffff8880178919c0 RSI=0000000035803067 RDI=0000000000000000 RBP=ffffea0001339bc0 RSP=ffff88804d6bfce0 R8 =0000000000000000 R9 =ffff8880084a446f R10=0000000000000000 R11=0000000000000001 R12=ffff888041df8100 R13=0000000000000001 R14=0000000035803067 R15=ffff88804d6bfe30 RIP=ffffffff81403294 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f719faa6540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f719ff64000 CR3=0000000044858000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81637861 RDX=0000000000000000 RSI=ffffffff81637b15 RDI=0000000000000001 RBP=ffffea0000e5dd00 RSP=ffff88803fc7f720 R8 =0000000000000000 R9 =ffffffff86797667 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffea0000e5dd08 R14=0000000000000000 R15=dead000000000100 RIP=ffffffff81403924 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa76ee636f4 CR3=000000003fc74000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000