00000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x9, [0x9, 0x0, 0x5, 0x4, 0x9, 0x1, 0x402a203d, 0x81, 0x2]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x400, 0x5, 0x60a24931, 0xffffffff, r1}, &(0x7f0000000240)=0x10) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 11:25:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x9, [0x9, 0x0, 0x5, 0x4, 0x9, 0x1, 0x402a203d, 0x81, 0x2]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x400, 0x5, 0x60a24931, 0xffffffff, r1}, &(0x7f0000000240)=0x10) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) 11:25:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 416.809049] net_ratelimit: 14 callbacks suppressed [ 416.809073] protocol 88fb is buggy, dev hsr_slave_0 [ 416.817800] protocol 88fb is buggy, dev hsr_slave_0 [ 416.820083] protocol 88fb is buggy, dev hsr_slave_1 [ 416.826055] protocol 88fb is buggy, dev hsr_slave_1 11:25:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 416.887205] protocol 88fb is buggy, dev hsr_slave_0 [ 416.892305] protocol 88fb is buggy, dev hsr_slave_1 11:25:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 417.207236] protocol 88fb is buggy, dev hsr_slave_0 [ 417.212336] protocol 88fb is buggy, dev hsr_slave_1 11:25:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 417.287189] protocol 88fb is buggy, dev hsr_slave_0 [ 417.292311] protocol 88fb is buggy, dev hsr_slave_1 11:25:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, 0x0) 11:25:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, 0x0) 11:25:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, 0x0) 11:25:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) 11:25:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 0: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 0: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 3: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x9, [0x9, 0x0, 0x5, 0x4, 0x9, 0x1, 0x402a203d, 0x81, 0x2]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x400, 0x5, 0x60a24931, 0xffffffff, r1}, &(0x7f0000000240)=0x10) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) sync() 11:25:58 executing program 0: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x9, [0x9, 0x0, 0x5, 0x4, 0x9, 0x1, 0x402a203d, 0x81, 0x2]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x400, 0x5, 0x60a24931, 0xffffffff, r1}, &(0x7f0000000240)=0x10) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) sync() 11:25:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 422.097569] net_ratelimit: 22 callbacks suppressed [ 422.097593] protocol 88fb is buggy, dev hsr_slave_0 [ 422.108657] protocol 88fb is buggy, dev hsr_slave_1 11:25:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x9, [0x9, 0x0, 0x5, 0x4, 0x9, 0x1, 0x402a203d, 0x81, 0x2]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x400, 0x5, 0x60a24931, 0xffffffff, r1}, &(0x7f0000000240)=0x10) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) sync() 11:25:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.047184] protocol 88fb is buggy, dev hsr_slave_0 [ 423.047191] protocol 88fb is buggy, dev hsr_slave_0 [ 423.047239] protocol 88fb is buggy, dev hsr_slave_1 [ 423.052257] protocol 88fb is buggy, dev hsr_slave_1 11:25:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:25:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 3 (fault-call:8 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:25:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.127209] protocol 88fb is buggy, dev hsr_slave_0 [ 423.132269] protocol 88fb is buggy, dev hsr_slave_1 11:26:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.275135] FAULT_INJECTION: forcing a failure. [ 423.275135] name failslab, interval 1, probability 0, space 0, times 1 [ 423.327340] CPU: 0 PID: 17174 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 423.334307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.343662] Call Trace: [ 423.346241] dump_stack+0x172/0x1f0 [ 423.349862] should_fail.cold+0xa/0x15 [ 423.353735] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 423.358829] ? ___might_sleep+0x163/0x280 [ 423.362962] __should_failslab+0x121/0x190 [ 423.367187] should_failslab+0x9/0x14 [ 423.370979] __kmalloc+0x2dc/0x740 [ 423.374918] ? finish_task_switch+0x146/0x780 [ 423.379411] ? rw_copy_check_uvector+0x28c/0x330 [ 423.384156] rw_copy_check_uvector+0x28c/0x330 [ 423.388726] ? finish_task_switch+0x146/0x780 [ 423.393210] import_iovec+0xbf/0x200 [ 423.396911] ? dup_iter+0x260/0x260 [ 423.400526] ? _raw_spin_unlock_irq+0x5e/0x90 [ 423.405004] ? finish_task_switch+0x146/0x780 [ 423.409480] ? finish_task_switch+0x118/0x780 [ 423.413959] ? __switch_to_asm+0x34/0x70 [ 423.418002] ? __switch_to_asm+0x40/0x70 [ 423.422054] vfs_readv+0xc6/0x160 [ 423.425493] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 423.430840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.435579] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.440147] ? retint_kernel+0x2d/0x2d [ 423.444019] ? trace_hardirqs_on_caller+0x6a/0x220 [ 423.448940] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.453682] ? retint_kernel+0x2d/0x2d [ 423.457560] ? do_preadv+0xca/0x280 [ 423.461174] do_preadv+0x1c4/0x280 [ 423.464697] ? do_readv+0x290/0x290 [ 423.468310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.473054] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.477795] ? do_syscall_64+0x26/0x610 [ 423.481754] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.487113] ? do_syscall_64+0x26/0x610 [ 423.491075] __x64_sys_preadv+0x9a/0xf0 [ 423.495039] do_syscall_64+0x103/0x610 [ 423.498913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.504085] RIP: 0033:0x457f29 [ 423.507265] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.526148] RSP: 002b:00007f2974434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 423.533837] RAX: ffffffffffffffda RBX: 00007f2974434c90 RCX: 0000000000457f29 [ 423.541089] RDX: 10000000000000db RSI: 0000000020000040 RDI: 0000000000000005 [ 423.548345] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.555609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29744356d4 [ 423.562861] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000006 [ 423.570413] protocol 88fb is buggy, dev hsr_slave_0 11:26:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.572103] protocol 88fb is buggy, dev hsr_slave_0 11:26:00 executing program 4 (fault-call:7 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 3 (fault-call:8 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 1 (fault-call:0 fault-nth:0): getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() 11:26:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.768157] FAULT_INJECTION: forcing a failure. [ 423.768157] name failslab, interval 1, probability 0, space 0, times 0 11:26:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 423.865241] CPU: 0 PID: 17193 Comm: syz-executor.4 Not tainted 5.0.0+ #12 [ 423.872214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.881564] Call Trace: [ 423.881589] dump_stack+0x172/0x1f0 [ 423.881611] should_fail.cold+0xa/0x15 [ 423.881630] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 423.881650] ? ___might_sleep+0x163/0x280 [ 423.881669] __should_failslab+0x121/0x190 [ 423.881686] should_failslab+0x9/0x14 [ 423.900966] __kmalloc+0x2dc/0x740 [ 423.900996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.901020] ? rw_copy_check_uvector+0x28c/0x330 [ 423.901037] rw_copy_check_uvector+0x28c/0x330 [ 423.901060] import_iovec+0xbf/0x200 [ 423.930609] ? dup_iter+0x260/0x260 [ 423.934236] ? find_held_lock+0x35/0x130 [ 423.934253] ? __fget+0x340/0x540 [ 423.934273] vfs_readv+0xc6/0x160 [ 423.945206] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 423.950574] ? kasan_check_read+0x11/0x20 [ 423.954733] ? __fget+0x367/0x540 [ 423.958196] ? ksys_dup3+0x3e0/0x3e0 [ 423.961916] ? wait_for_completion+0x440/0x440 [ 423.966504] ? __fget_light+0x1a9/0x230 [ 423.966525] do_preadv+0x1c4/0x280 [ 423.966543] ? do_readv+0x290/0x290 [ 423.966560] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.982404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.987164] ? do_syscall_64+0x26/0x610 [ 423.991141] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.996511] ? do_syscall_64+0x26/0x610 [ 424.000494] __x64_sys_preadv+0x9a/0xf0 [ 424.004474] do_syscall_64+0x103/0x610 [ 424.008376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.013561] RIP: 0033:0x457f29 [ 424.016757] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.035658] RSP: 002b:00007f4e1ac6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 424.043375] RAX: ffffffffffffffda RBX: 00007f4e1ac6ac90 RCX: 0000000000457f29 [ 424.050646] RDX: 10000000000000db RSI: 0000000020000040 RDI: 0000000000000005 [ 424.057922] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:26:00 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() 11:26:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 424.065192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e1ac6b6d4 [ 424.072464] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000006 11:26:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 4 (fault-call:7 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000730000/0x5000)=nil, 0x5000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001400)='/dev/snapshot\x00', 0x302, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 1: timerfd_create(0xf, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() 11:26:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x7, &(0x7f0000001400)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x100000000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r4, 0x8}, 0x8) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000140)={{0x6, 0x3f6bc}, 0x50}, 0xfffffffffffffefa) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="70a3361530a7c2282c0081ed2df6e1edfc076fb771316cd2e35f93d4b8e14e5f3c4219680ef0c6da8108947b2b3d8cb1fc1752ea6d"], 0x1) ioctl(r0, 0x1, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2008d9af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = accept4$rose(0xffffffffffffff9c, &(0x7f00000002c0)=@short={0xb, @dev, @netrom, 0x1, @default}, &(0x7f0000000300)=0x1c, 0x80800) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) sync() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nfc_llcp(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x0, 0x11ad5daa, "39f7dee8b9d3504829e4617d29b458fbfc9c4456e7fafcd3e583463ddc60f988505408c32a4db6f39027bb041260b3f6a238da9f6771065b4d7914ded6b957", 0x25}, 0x60, &(0x7f0000000140)=[{&(0x7f00000000c0)="1510cd3f89e31cc6c6443cb80731a824c479906328f1b7f1d4c963f6d5bc84bd5cbffa3e62d5cc9b35690be736cccee495ce907edb95470ef4378f7e5fa5b03213abefbe62c3c870c5", 0x49}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x88, 0x10}, 0x1) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x3ab98b3d, @mcast1, 0x1f}, 0x1c) 11:26:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) read(r0, &(0x7f0000001400)=""/233, 0xe9) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x7ffff000}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000002, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03002a2e93f5eaf93796e08dfda88836d090c1713384dc359023f4baad2139bc42e06dcb8c0016770d"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x1, 0x80000000, 0x6}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) sync() 11:26:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000003, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x5, 0x8001, 0x8000, 0x41b, 0x0, 0x7ff}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002680)={0x0, 0x6, 0xffffffff, 0x333}, &(0x7f00000026c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000002700)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x400, 0x8d, 0xb7, 0x3ff, 0x9, 0x40, 0xfffffffffffffffa, 0x4, 0xd8, 0x34c, 0x10000, 0x80, 0x1ff, 0x8, 0x8]}, &(0x7f0000002800)=0x100) sendmmsg$inet_sctp(r1, &(0x7f0000002f80)=[{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x100, @mcast1, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000001400)="4dfdf322a32892263c1841979641fd4cbe0e2e0223c4110fe0d26f2352519a91ac781fa6a397825704059a87f392c2bbc129e9e7ce861f93bbeeac89d3cdd9445d8117426b8aee4c6803c55b48c2abdc53bd57b37472ac0ea8ebb63ae9ea66cf02cfcaca6a0ac14459a73b75fa8a5cb5e64e2b4182b2abf3ad5fc214a8d7607d620e31ad1a3236bc8262b600512079d47a7e3ffb17e87325acf8c95843f67cc100b7975053a15576eb10b08e36e8dcac7d6ee38f6a47186fbf040ce995de87d847d459db9ec3263bff2e93ba4df58020b932986c6a9e9bff76ff0cf053d7111a1b420684d85062ec7e5795b776ac3a", 0xef}], 0x1, &(0x7f0000000380)=[@init={0x18, 0x84, 0x0, {0x94f3, 0x80000001, 0x8, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x30, 0x4000}, {&(0x7f00000003c0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000001500)="325844c7dc9ad12123b0af7d3dfd2f44bb05c4df78eeb7ab3a0503ecc89beae2ae243ad2d86d0364c816b39c6bc2ade8", 0x30}], 0x2, &(0x7f0000002840)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0xfffffffffffffffe, 0x4, 0x0, 0x9, 0x1, 0x80000001, 0x400, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x9, 0x7, r5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xd}}], 0x68, 0xc094}, {&(0x7f00000028c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002900)="bbaa851106efdf49590ccdd7f39b5fbdbf249e0ef3c9b7c9e949a0852123b4e977ce2c8fe31e41e897dbf633cdec063c0e", 0x31}, {&(0x7f0000002940)="056ecd360f4fc999c57b504c0572169b3f4df64a1c3a656c21b7afa342b786459fb1e7f5bc58cc90faf1f1b64f22ed1931d5dea8ed5f87fbdfb2e804367c317cd93f0c2e5a78c704812135b316616dacc5d0b6c4e24c7b5f04868184a7653777abb7c91174103168bcf4eef87877a69735793d0e6e6f117dcd5003e0f95664f6a46961023dfe8708bca9f6e838a24228693662948dbff3422db3f66bf810207446dd7d8b046dcc94028597dd90a09d12504cd6f203a98d4d084e610707d94fa923977cd0d196c70132007004de90", 0xce}, {&(0x7f0000002a40)="9f22eff831e833f014ac32435c984878b49a6e2b1718a21e20dbd4a6641f1b11357277bdb710f7c6f63d6848a70185d3abfadbbab9ffa7e34a2a046c537cbe93e4e6bcedba8acf9cb243ec37e7203bd61126634e80037b20bd2372512a133d127ed808de2ada8ec910c751e8ad5edeeaf6095189b0badb9ba650385cc4f235493884b0dca68bb44e3c1f9f24080b205fe130bb84686577bb57c60f45a510689a9d56c0c1780a2b99b954ff118f3cf1e30c4e29edc5fd2042b115024d170e940db03a4561dd97f0b32edd97b366be542001dc58fd293e4a61fa572b898e727399891bd477bc", 0xe5}, {&(0x7f0000002b40)="e329df04e3e5d6fa3ca2112fd3774dee4545b656894658001200e6f331dd07699d31559f5d8d99f159b963054852741cd3bff2aa09094e6568560f66935a33a14cb4e6c0ece90f59a64f789792183c9875ff055ac62bd1f2ca33ab047d7bd34022c064364dcf1f053245a0edafcb978e4ae4fe96bcf9262bb65a7f", 0x7b}, {&(0x7f0000002bc0)="f6167f7ae296f0380607ca47c1517faffcb27ef93f20143c42fc2bdea12d80e487c7a1e25efa1592f8a3176e9300a54051309e8924123aa44a6e552c4cf6e9d5862f6bfb09c7ccebaf19819213198d08051d8a70a421fe", 0x57}, {&(0x7f0000002c40)="c2b53b8875c1ddd32bb54b7f7f93e8d319de94be29e21911e9e1f3f820138325d7c6bfa4798842d0e27eff91c1061e2b629b8fe4a8252f8d6adca157aa7b1a50384a11814050449df1253e0dba80eac261143ee57a3999b0608669f8e185f7d053ed4722f98b7f27133fb703cb7e502ce2f35a7c32275cb8392945875eff3a5c2f98522225e0218bf97c06dfa9704e696e9b0541cc7faed4b0269ff42106b4be27213dd2d5e3bbac3a7c275b2e0572dbc524859787bf7516f1542147b60c4a3c7a410579627676", 0xc7}, {&(0x7f0000002d40)="42e6219910edf607995a2d27c7d1f1a64fb276d425dd8ad35b4e8a75dd03738ac00b32767b5c94b97acdf965f54453de4d33da09fd2ef28a713df41cd215e4dc58517fdc9364d0143eeb42505c832463120f71b4dd2057c9bb3b4ade3155308905fc0340736556934a270af0439a97f2c3a4a22aa1bb81235d07efd4bee8e169ed31949c5f269e6137d77e6192f6b3f373561b4e8e9bfca7761c7d6bedc78ef739d0b636a6f9adabeb706143ec7a7f3ec946763e17d947b66a16efcba33fe2192d296c34fa76ff40c7259a72ce66d1b0d390250270616a558e371fd3e84c0506c6fd82bbf70e", 0xe6}, {&(0x7f0000002e40)="86244aff8f6b2d2731647d6ada31d58b19f1bb60c2cad8150e30c565f08cf2d998929e0eebf1f5", 0x27}], 0x8, &(0x7f0000002f00)=[@authinfo={0x18, 0x84, 0x6, {0x400}}, @init={0x18, 0x84, 0x0, {0x100000000, 0x5, 0xce79, 0x3000000000000000}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0x7, 0x20}}], 0x48, 0x4000000}], 0x3, 0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000003040)=0x7e) 11:26:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 427.207185] net_ratelimit: 16 callbacks suppressed [ 427.207194] protocol 88fb is buggy, dev hsr_slave_0 [ 427.207226] protocol 88fb is buggy, dev hsr_slave_0 [ 427.212245] protocol 88fb is buggy, dev hsr_slave_1 [ 427.217235] protocol 88fb is buggy, dev hsr_slave_1 [ 427.287237] protocol 88fb is buggy, dev hsr_slave_0 [ 427.292388] protocol 88fb is buggy, dev hsr_slave_1 11:26:04 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xfffffffffffffc7b, 0x2) sync() 11:26:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000004, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={@local, 0x1f, r4}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x1) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 427.687455] protocol 88fb is buggy, dev hsr_slave_0 [ 427.687581] protocol 88fb is buggy, dev hsr_slave_0 [ 427.694213] protocol 88fb is buggy, dev hsr_slave_1 [ 427.698731] protocol 88fb is buggy, dev hsr_slave_1 11:26:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="b0559a056ebf37520a1d079eafcfc6dd00000001000000000000000000000092738de3d393998d8036adc0d23107e30ad626361bc52cfdf4df5921be0ee4a8c7247a7135ccaf7f30ecad5faf7ef49a569fb2110a945a553c3eabc2bd2371b5ee50eb9dd2df8be7fa083a760ab6047503ad2393f8e7406909"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x2f, 0x30, 0x3, 0xa, 0x4, 0x0, 0x3, 0x1b, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='ex'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000008, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x74fa, 0x3, 0x8, 0x3}) socket$pptp(0x18, 0x1, 0x2) 11:26:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="38a24288e48d56b21939cca807e121d55004af72461afbb93b88faecea055d03ab7fd0db20060000009b44cb8da1e722e1ed65396bcb4132ceec52663de0559ddd764ed4b5785b1c109379d071d2f4a2704e812e608253b66ad7206b0d88f45376f37c1d6527584d6158aaa29571156894a902203f74ab56f7eb8ab1bf21d6341afa221f65cba02eaca778d995f616f345dc7fe7b14f00bcb2663b96474b8d00cb02fbf02042491f30559a3e91eb75ebd54b7b4cb3c4f9119f80dabdf080d94461c000f69108d92589fd7da57f9c9ec681c227f250ddfe472651e08dc44ef1352995316623ef3aa733a5474b28b376ce17702024b73c9b4204c89f4cde61e1f1aada23f1de532d39a23297587a8e82"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='ex'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='bridge0\x00') r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='ex'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 5: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:05 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 1: getrandom(&(0x7f0000000340)=""/40, 0xffffffffffffffd8, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x204000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, @in6=@local, 0x4e20, 0x3, 0x4e20, 0xa65e, 0xa, 0x20, 0xa0, 0x4, r1, r2}, {0x3, 0xfffffffffffffffe, 0x8, 0x1, 0x9, 0x9, 0x6, 0xee0}, {0x7f, 0x10001, 0x7, 0x9}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0x3ff, 0x1ee, 0xfc94}}, 0xe8) sync() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40004, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000040)={{0x7d, @multicast1, 0x4e22, 0x4, 'rr\x00', 0x2, 0x101, 0x67}, {@empty, 0x4e22, 0x10003, 0x100000001, 0x6, 0x152d}}, 0x44) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x761c, 0x202) 11:26:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x1000000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="bef1e7773920f18f9e96ebe05048e0a752fc1813432f8893e28c73077fb6cd8962d57d6c8eeff756aa8a2746679360ab81f7edbed99bd80b1fe22944182496c1cda0dd5cc0a39d045bf83077833275262d6af59137607319c8192204966c6c054027047a70f48974e7c02c922097fb1153e47997e3849ca0906ca0ea0f5b6b62c9a73cec8da13cc51cd794c0e978b81f0fe6414430bf60520bc5d38aaf6a13b80abe00700e5ba4c3a9a3747c9b"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 5: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x2000000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 5: r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001680)="3519808c4254d38d0238f255844fbf4033def454595509f722876b90783b93318a663db32d00d08e7d83f0d7f39b8d2fc2fd84f3a2c7af8d47ca1163d31e199c3bb54486d9a58f70d84be4c82150ba7d4be2c77e17580eaec180194fc7bdbb9a03f10d90f30646207103d789c8f000894ee54cdf5b8eeced54927bd95e8492973c1b4911112c9b07a4a98d33fed55f2e1cb5d37e58a0b967c2d36726825b9bd5b4dff5f265db9af406a090c934684a99bf41537bcb8c1550c76d0c214756d2b72d06ba9498aa0d1dcadc68aa22303f078b4e4a419974604ae408e299c22ea380ddc317b3f892746265d83a15adc49983ef232572e2fd9bc5fdb672f17f818bfb7b32dca47232086c23102653f9c7273d9c67b0d807d1d7da330eafbbef8e007d79a26a03231585d29b6da6eb42c0807a7215a1feacf454d0c3da20afc9db13c64fb48c23898da7ffd628716460ec325dccc34926134cad0f27a6d5479d9fbd486d423871083e9f7541222c9a46b57c9436cffd2d731c4a5e4508c4a529a54dc12debeaa7d78c056f20c9b8a8435415c9f8af34112b3330327411aecd5a0250cf22a629bb3f8432daffbee5ba0afbf37e5a517f855f05c6aa4f720359707055d83afb076f52504dffc97f8d1b08899b02768d59c5596b35bc88de74726922a14e632f11f4e50ef0573324d8ef34db301c3a39e1a7c0eccd12f73eec60172752853c2c5dc71247efbd55d14a05ca250f12db52da07d84b9b24d3d7a14fbadbc8780b3881889a8b351d96da80005f294572b49fd6ae865051c8db4af77b491e7cfe5899cfeb23a3d99a2291a2659f83517c04a8485e4a0406de023843e45e64e667764d4f8c7be6d9b0471afc59975de0f127629791c71236c1fdacb2a5d5dae606fb73832a2e43abc8e235e0b840b6d510beb1de8c6f87194c39322d8cc65df1507f3c360eb7bba4097d58d9d01e14809cb2ea2440144d32f45b190dad78c696f77068e2738ba52638ad27fbcb4a70faa3be86da62fd3e3ea1914458eb9f9b20d81ebf9f6af2f573da6616117248c850bd0336ae6a949e76b32b9a4b5b4bd0b0e5fc2f2c46835ae1d4b3880721c861c111c790a828542897b72b61f3925c9ddd3c1996e772b2e56966003b82c37ff9e253c655791bfcfad61a257973422f03a92335cc52cf41fab3b6a01660a53fe2a26b227e0bb2e9bf69d751948221e72a7fcdaee14dbb9053702aee298b3cac86a283cf2726575d53c00dbef7d5ebe797da59939165baa74ce5d12fa397f4655655591b9d72301f83146fa303e4a994547d24c44bd4681a1786f075aa968d78f8bbbe13c963495a64caccaf52a07670dc5ceddeea5b2d7fb3c3741687b45462f45bccc66d955590d6046b4072cc25719731278ea82eb2ee03ae5e6b4aed9c40b565188753d1ca9e2327e7eb15e36b74999873632df2edeec7797571105556563e4f0b377bb58b4c4a043047b6e177921d3afb0dce00fb79a1276136b87dfc1bf8a053c9725c41dee7a2f14474aeebe520484583d8495e2aed52093efd68a81e5f20e45d177313bc0e0dabf58d7677cd9168df987f451ef9d97dbea89b9a4d46f63d5b1f89e925072c7744028f78461774feadbc51afc0e3937057e73ef735142d098ef86a40eb0af815c01c261fe113e155adf2eb8895d4f91d36004568842de6d181cd0daa1f6d21f58928b88ff5f15f60320b6355de30331412e6abab37d350cd8450757c223fb575c120c82c8a2e49fb56404a98c3993b9ee6a1202b0ddb46a8f0d96d359d390850e79099d6b4fa3206e455be618886422da540c4e50280f4354a5d876e063b21bbd48e7fbdce1ced35bf7319ee40317282b25843812ce88cc0f882e831fe3ab743b9a68fa41d973cd0bf1368dc4e3651c2080755e7f7b435de4b7c3242ddfda0a17ea48a59b378ce451c14895df76d9de3c033fcae3ed98ea32f6f40a89a469190a9209c2df6eb233256f106fb9b0b709278808452f83ffac8c502356cacbbb9ad95d05b802638be513f5b4b3981e5beafb6d67ccc5ec3b54d782cfe9d72553dd06ecb83664faeacb380631ac93a72de4be4b3b4f43b7b93e32f5932bbb331f041d209bb9793cfaea96115b530236f2487a464b7bd92e083a216f3b27ab746adaa41e986cabf61586b6c3caed64fb5c0f9c59126264fadb5f11aaeb807bbed500fddf7e13b55dfdde21335b8b5edbaff95d25b42d31fc277bafc2c086e7e1735ddc3242468f3c41ab44fa1b19a2001e815ae03932ce5d3fc545812e5337a725e39ad1debc15b904da941796f2031a57715128ef9e0b0f2c7da7c97c915a94172ce2a761574405c148ab1fd6f3b213b6ef2c7629e9849ee8c77fcc84d47da83ae62d6ed2f703819883f4b9e4c94969a0ec3ec9338039e8659a3ae56cf5ef590f369a4434df499f02c95e5f7721c964bd3fb790a65d0ad46ec07d2094c40d067ea234d732bfa0bb07a419f8009f29e47a248281100f0acc1d93da2cb55a03b1c84e5a3cb8398d074363194017c474eb164e3ab86520af7a533da397ae6cd4470aa49227d211c18af0de7fd7e049737ef0163f589a3190fa6ac613289b1dbf4a330c0b69b88cc0269becefa47c4cc07bab51b7ee44f32433a6c0a8ebdd64fd42851cfa647da472618d9e1a916746eb9bda0047a7103ee4150c59706c9e7765b53604ba4914cc7fd9d28864d95850a461bc424266ef8415ccd1d0c0c992f6d75d97e27995706bb3085bf4b8b64a59c7e2c45b7692cd426256df7d3bc7ee02a92373c8c6776eceb7c6dcc75b738b4c6cc9374b39ca1f28cce27945b0426a00c6328dc7c1c16385bbcd17842f9d905e74b40f963a3d1c6243a05784043d5edb6ae57f43718849127296b121898ed04d786f9cb3bbc1f97e25c86c1ae5d929eee9d8c82d3af2eeda2b9a458b33d5344213f22bb8efcd6715d97ac923d402f39b8c92830d46cb12137e8bd500e77e8b9d54b192ad4256e581aad860bd4c1acc27c13b465f70504ae0f939ca6d9473c94260494221661cd6e29f4db09f48f621d305b0acc7dfc5bad59cd1f33d9cdbf7ed5315be932a7e7656c8a755724b3560404217cf987494bd6ec0677826daebe344f6f5eef2d2b2c83ec8e2cda175e7198200edd65f2d555ee30b67217394d2c9e12cf094d4e1b60579cdd4347480c804e5e083e619e2ab21533e9e2b145597462c247d21ba3debaaf814a4848740b4621df6afaa2d050d242fe3dc245c4de906a8451bc1be0ca508830ad820ec16f674bfa677962707e0a1430d2881ba7a6cfaf353a7088fbde14ff9ae8a5ac2bbc8a9314882a45090228d17d0d12ed32bd4a22d7ff6b7059e56da2cdf8c2faf2d9cd88f4f2cfffcd9fa907298ee3b79fd63ef4112e7898107e580ea6b4c677df542d09d896afdd449483e987d902c2067394f955205d6dc2079f74bc007a8066627f9b7378611b9fce2fb467d54843526c78220bbed798776b997d1a267281102a840d0878c02d96750574a904680e842dd2df52deafe1e064d8442f807b0a1d0335a2fa653055f2e06828553906ca95de928a957acc63870d23f3720006efbedf88e2d89bc6f9b4fae576df060993d4d9b1e2a00bafb10cfd24f8676c35960242bfbafdbb8d498257b63c049e7af7c6f9242d188ddb2dff127196e35866e420cd46dc125d16eca4121670bb6b61e8a504c171df55828de9dbc84c0c8386523107aa00d02ff3a288dd7794cb390bda92e0dea40fedbe0abbed378b63b04f921532752d919db04b483e6bfac84a0d7ab532984f49fb523eda1a06e081336b3f0335ac4cc27d5031da7328d65d795088f74e1c54e68da335400d264962ede01d05fe2ef436c023ce9d7c1aa811b6cc4cc94dbfaa119d9ad78f63e32f69850d5d9ee64a033a5daa2cde3b1132114eb454d7dd820ad3554e63fcd945d4b3ca912a7eebe297ac117353acd2e310fae983739d7c13d751368bf324e17dd1050ce020f24572d1f17d70a28662eb55afd9836ee32ee1d18a0608db64e3af521a48e6c2044647823556ef7a58b127a47fc50aab3d942f0923e578bacb5fc198ba04b4d5f3ec25a0dcd9f753debc1dc78acfc84b30c1712e518d4ad46cd966a8424e48cc4af92cd80c89502e89c602685deccbf738e5e1ab680225ac2a5c3d06e36df738363fc5acd774415b4002ec83ee94219dfd4d58844b2deeaa174715f6cf1f744362c4d71046b68c71d5e91450d746a580f443f33f23ae59334cf68bc05dd82eaba0f6579741c17bde6b124d6b086b4814d032dfa02397ca6c337db0ce328ccf1ab75678f6833470ed312b8eada9fb0de396f60eee5583a9ebbf4650fd366c6b949e218a1c50126321692a5527d56e1a654dc424c4afa05f51065fa61bd52be3a17218d0db36ba5bfabccc0b048b20137ba197d1ddfc02ba76877ca49aa586b4c88ac57708a5e9de2db4b0d6a19fc39789afa4cfc5ab8c8b045003b58433bf65cb8ef07c6feaded6cd2b22156a47bc460ec56e274466e8b74f40fa5ce5c0c3d0ecc47fc1f4087eeecabe40ccf97244559c3cf7b1a5015a022b36094ff80674e652a5a74e28b43fcf77888edce12fdafa07234069e6fe04c1485e0c74780027d8bbb2697185dcd3faa172b8f0530b6a52e3de3845a19394ff55f971f2ce9e74ab4c4a7d7ea11e74c9a5e05c540e478215c668d3ab5e83266ab0fb5774f19b8a1912e2c5eb44ae79514767d9ee61b403b834e15ecc9bb9eae9f3844d59beade3ccb94b98c75f215acd3d8c1891b86a8a7fba7ef423a430851d58d402a1bece1d4b9167832f7dee705666496b8c9f8428fa52459e9dc93e30dd030e3281dbad80e489ce2176c0431c2f11663c58645eb72e49f96fc10675f2ba3bb0db7430b32d7f4b550df15d9a55620f00689fdcaaca6f0e80f489e5d98139ba297fd987fd2619488861988e7ff9ade0e754d1d9c8cfc0171317d6a0b6ff133c50ee371e3078a645014f19756f4e334a0e6174d265cb1e11a19414d987017f24fdafbed4c002a28823a3e41d15d4f04058e6f5e063bf12a89aa202cacf0c1ee0ecf652232ebcc5778b3fe4f11410983f9a10a84c37410a0d56d6040ef208ad9e3df2994b39e2ae582b39f50e5c34c95405d2b8612af6f79ceb2a38ebf6ecc701bb3de6c44439a43711f7eba7d8a1724e8362b04bbadb01e28875718401985b15ac9968c20befbd9874cfbaeddba252472e635a5649c8e5314ef3e52661a26d35710c582e8f4159a162ca4af8c0d1ed7608bcdf0050c6a920e327eaee6054ccea8ca50344625f93fad3f8fc2ecfb8aeee6aff20784a94b0c8ed5727441b0afdfee39dd905992d9a4e078f86c17e8ccd3f5e66587edb77876cb42893805d279e74456b46359636b7e39163891d5876cc3e65caa83018169ede80d549e67717ff264aa7defc554912b750e8cbb6099f84a66ec8d782fd29c3e9b8f426e3f6d559f64c0f88a87410fcbd77c75be0e2eda91f562e45a4b58bc68c9171da89a35c8ac2c6f8a157d6d542421a6acc565fbf91a75d0f4c2e475a000d0bbc556ece42526ea6f8534bd5d3eee4a773b920fe52dfc2ef9bfb1dc5c4249ff6406b74d8c595d7948722083a158130ca165207802fe0fa4e03c5c2b80ffcd796866e7b7ddd29c179a97bad1e9b5810a412a5d95eb6bb16561844876d5cb1d99971c13a5fadbcbc21ecdbcef82e1e7eea64186a614a1b633b3b0137bdc87794bdc996fcb339c87d1ad3970cab5bc2dd7aa5862ed5c0369edce547f1ff054438d81a", 0x1000}, {&(0x7f0000000340)="9130f6bd3e51a557325f27401863c8df25f7e77b1b81a7cb156125cf278881b61ddbd594a5e708fba46ec438d26996322a206858c1e1ee7492219e528ca0e2e26111a7ce140206a75813e930768eef5d939de2a8bbd80416e87edce41c359c637d9f7e9db0327aea0dd18b4cefad6a7f6682ec7e4e448b8ce0e145baab82ac28abf01db588e73400741d4fd8ec4fc8a9a11a9aa94de94dfe31b26d5a030148", 0x9f}], 0x2, &(0x7f0000002680)=[{0x20, 0x111, 0x5, "ce812d471cf02cad2429f43589"}, {0xc0, 0x107, 0x4ff, "bedb50772bf525a8545e9ddcb1f4ea207c422596dd606d71d08a7a0dcf808d70936991791669da5e08c156cea0b0d03af9d4e7d2557ba5046594e683a1abc343e029a95093001731d449181b4d7f9bf6deb69c3a07fb4c7f675d7ed2dd24db8454211ad5666369b555e8070e835d3a3bed24c27f821022edcc52c6bdd09e66d39ef677242c76b301dbaaf859ae9f777177451b1c463694be795c06075dbae78987b72e4d29a0cec5afd33f3be7240e46"}, {0x88, 0x0, 0x3, "d3a440d85dcffb07f6b99b899e590d168c6499d2ca474bfa2d9dbfc601aec0b376f2253364e0924aa4bf224073ccd8275a600886ef8eab84620f63fc6952ca24effb896e5ed2a57875ca09780425533f3695f9527dba04abdca1149bcaec6614c836627289897242847d3b180d2a84c4d70a"}, {0x100, 0x10d, 0x7fffffff, "ff61cd833e34f862297ab5a7f2832b651fb8aa3ff39c3fb801db88679705026c9988f30fa8c5d80aa187d1adafcb5986e5b098d2bfc8ee405f16868bdee34cfb21324b529c40d601770dd3f9d01d415f8bc874fa2787f46f7b4b1a8ff67d68654ecd4a3e498a89a55db5c31d9c4d7b6e77ad22423c2cff4435030b2e8343af4e6ff54e30895c16bcb9b42d7d2ed411722f5ce90905ce6040b590ddf56b4bbd28f0e5adf96fc5ab79995b4e01d4f5d3b031244fa3d385c2150c9c6b4fbba8a11d58e90ec3bddea8058d3fdefe4d1c3588b642788e6e610c5bdd21ea0301abebbdbfd0d5ec5f40ea6f3243ebdfdc16"}, {0x70, 0x107, 0xffff, "8f82aeee86682e850ccc53da890203583f527ee884bd808e14a02f61a586536feb3012020beb354f51b1ad68a768c0b7d8dec3fa2815ede790ec5abac22a1dcaf6438c2bc7f7b53b12df8e487bb1f3801805f44c275a29f3a2203d"}, {0x78, 0x18a, 0x2, "f05d5a7dc932b7b25b75c4e08a7d80962317635a960a259b3c6c6058a449c8edde0aa0151950dac989242604eaa61804c5dd563e0cb951f8a7d8f0fcb0e53460fbafb0c6d56cc7135387551a97c2702acc8fa6521d6522eb10a0691d1b2c676fab8056aa"}], 0x350}, 0x90) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080), 0x0) 11:26:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sysfs$1(0x1, &(0x7f0000000000)='\'\x00') r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) sync() 11:26:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x511af77f) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x1, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x7ff71a51) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 1: getrandom(&(0x7f00000000c0)=""/40, 0x28, 0x2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x34000, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) 11:26:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x7ffffffff000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="ac564fa901a43c5c9f7d7a1bb2c322ba5f8f88e61553426835866667a34fe83b4ee1708a9e0f8e344bfec83af5a916275f2a6ce44b032a23ac139c58ec7a8de68f2ab61ef25ee443346ca147325c99564bbc8d46bccd58170ce749a2b97be24c8827ad32d7189f1a21f119d43ef78ab99f0f2f50f7bd8133933bc20dcae3f716098932c02832a0abac6ce91b2bb12a2f7986b1c969035ab0f14f14030951e6c84a50177a97150d315fcba0a80e3e1071fdd4f5d737ba44e8122ee37ed282fc103e740bd831dcc2c3d8ae2e3db79989a31491eebd82aa7674adaac3d8dc4c33b864313845aa1562bc6b7980a0e3"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0xf0ffffff7f0000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x10482, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$l2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x5cfe, @dev={0xac, 0x14, 0x14, 0x28}}, 0x1, 0x1, 0x2}}, 0x26) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x80200) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0xf5b8, 0x40, 0x59, 0xfffffffffffffffc, 0x100000000, 0x8], 0x6, 0x800, 0x26, 0x0, 0x7, 0x5, {0x7, 0x1, 0x3, 0x3, 0x8, 0x0, 0x7, 0x4, 0x8000, 0x4, 0x8001, 0x400, 0x40, 0xbaa4, "dabdb2c2b445882b5581a618acfc19693c1f589e275374252c92a88370d6286a"}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 11:26:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x100000000000000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$tipc(r1, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10, 0x80800) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001680)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x282001, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(r3, 0x9, &(0x7f0000000140)="6e1e6531bf450728f66e6b161a90fc24f620e30285d0c85a9996575b1a64279c21a2ff9fcd173b4d6238bd256d91dc49e7400376eeee60e0fd6064eaf34a13a1d0c40b0d04f0191f1ae3f5cac876632da7577822e5b4999058b27f0ba3726819f8567840f13ef338b788bc49a341866dcda72575615a2e73") ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 432.487259] net_ratelimit: 23 callbacks suppressed [ 432.487268] protocol 88fb is buggy, dev hsr_slave_0 [ 432.497380] protocol 88fb is buggy, dev hsr_slave_1 11:26:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) set_tid_address(&(0x7f0000000140)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x200000000000000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 1: getrandom(&(0x7f0000000040)=""/40, 0xfffffe77, 0x3) sync() syz_extract_tcp_res(&(0x7f0000000000), 0x7ff, 0x100000001) 11:26:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0xfff, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) r4 = semget(0x1, 0x0, 0xc) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000001400)=""/194) 11:26:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x511af77f00000000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0xb, 0x6, 0x5}) getrandom(&(0x7f0000000000)=""/40, 0x28, 0x2) sync() 11:26:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 433.447221] protocol 88fb is buggy, dev hsr_slave_0 [ 433.447227] protocol 88fb is buggy, dev hsr_slave_0 [ 433.447268] protocol 88fb is buggy, dev hsr_slave_1 [ 433.452353] protocol 88fb is buggy, dev hsr_slave_1 11:26:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x100, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 433.527916] protocol 88fb is buggy, dev hsr_slave_0 [ 433.533616] protocol 88fb is buggy, dev hsr_slave_1 11:26:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) uselib(&(0x7f0000000140)='./file0\x00') ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x3, @name="c8b6d387aa1b0a41d7e10bd76c9a6a56bdece55bd556d9947984ffe6682cffcb"}, 0x8, 0x0, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 433.927189] protocol 88fb is buggy, dev hsr_slave_0 [ 433.927218] protocol 88fb is buggy, dev hsr_slave_1 11:26:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0x28, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) socket$bt_hidp(0x1f, 0x3, 0x6) socket$can_raw(0x1d, 0x3, 0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xef2, 0x80000) mq_open(&(0x7f00000001c0)='vmnet1#system,\x00', 0x8c1, 0x4, &(0x7f0000000200)={0x3, 0x7f, 0x7, 0x1, 0x9, 0x5, 0x4, 0x5}) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x200001, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80004) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) sync() 11:26:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) r4 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, &(0x7f0000001840)="00660c1c6615009810e6aecae95f3a380d30dafd33e99b063083768f13d5da18a94baf8896bc1e8c6095c52604ec79ba613ae6a233a3dab3354009caab735c7816c20b53139250fead292c44e36c2be5eb4eef53e343d44ecae31b04a12681b54dc527f4bba664674d85e01e52ba05db1dd8b7d3faadce6fae1ff3f72bf0cafe096b4eaa7a226ecea7d3f437b91f9e056fcf040d81311dcd877bc51660ca7002c7937fafe5537d", &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)="67334ea4c4a85a14f21d8d85c85bc13f26ffb1b25ad36097b827f7e15685eba8f209111e818f6be03ee3057ae91540bb338eb3b66d433395a7cd93ebb50ce3ef1a8935c3947a6f18a4ecd3020e7c106f1606fc0668cf4fb3e571a886950d914f46a76582b20d6bfd358630e38edbaf242e160791b130158e97c4424e863b26e9f72dcd3191ea3dee7bce74a648a93807ad72ba21e0d79c40d1a74445252d8391") ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001700)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) shmctl$IPC_SET(r4, 0x1, &(0x7f00000017c0)={{0x7, r5, r6, r7, r8, 0x80, 0x8}, 0xe00, 0x0, 0x100000001, 0x0, r9, r10, 0x3}) 11:26:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f00000000c0)='\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 1: sync() r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockname$llc(r0, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x4, 0x3, 0x20, 0x43c8, 'syz1\x00', 0x100}, 0x0, [0x9, 0x1, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x2, 0x1, 0x8, 0x3f, 0x2, 0x0, 0x2, 0x1, 0x7fff, 0x8, 0xfffffffffffffffd, 0x1f, 0x5, 0xffffffff, 0xff, 0x100000000, 0x1, 0x5, 0x6270, 0xd4d, 0x101, 0x0, 0x600000000000, 0x81, 0x4, 0x8001, 0xed3, 0x4, 0x5, 0x2, 0x707ac190, 0xbc9, 0x80000001, 0x9, 0xa70, 0x5, 0x0, 0xffffffff, 0xe2, 0x78, 0x6, 0x18, 0x6, 0x3, 0x58b, 0x10001, 0x8, 0x7fffffff, 0x4, 0x1f, 0x1000, 0x1, 0xb3, 0x5, 0xffff, 0x0, 0x3, 0x3ce7c3f4, 0x9, 0x539ea1dd, 0x401, 0x4, 0xaa27, 0x487e, 0x7, 0x1ff, 0x8000000000, 0x6, 0x7fffffff, 0x400, 0xffffffffffff0001, 0x6, 0x1, 0xff, 0x10001, 0x0, 0x10000, 0x80000000, 0x6, 0x2, 0x1ff, 0x200, 0x8, 0x100000001, 0xaae7, 0x7, 0x1, 0x7f, 0x4b, 0x578e, 0x2, 0xbc, 0x7, 0x1, 0x4, 0xb7, 0x0, 0x8, 0x10001, 0x2, 0x1ff, 0x0, 0x3, 0x8, 0xfffffffffffffff7, 0x20, 0x3, 0x4, 0x8, 0x9, 0x8d7d, 0x8001, 0x5, 0x8, 0x6, 0x8, 0x58, 0x6, 0x4, 0x4, 0x7], {0x77359400}}) creat(&(0x7f0000000000)='./file0\x00', 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) 11:26:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r4, 0x4) 11:26:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000001480)={0xa0, 0x0, 0x4, {{0x6, 0x3, 0x0, 0x1000, 0x0, 0x0, {0x4, 0x9, 0x800, 0xffffffff00000001, 0x0, 0xff, 0x5, 0x101, 0x7fffffff, 0x7f, 0x8, r2, r3, 0x8, 0x2}}, {0x0, 0x4}}}, 0xa0) write$apparmor_exec(r1, &(0x7f0000001700)=ANY=[@ANYBLOB="7b6f27e3f51d73d71382a55c2dea42ee63bbe4753fa1e2fcadba7e4ac46f18b99d4012f9fa6fcb70ab869055d00aa60b21f246c3c42d4d44260c42042f0ab81219e1c3a0493f"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001680)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000001540)={0x1, 0x0, 0x0, 0x400}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000001780)={0x7, r7}) 11:26:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000100)={&(0x7f0000000040)="43adce7234a0b49157ce4c06b3b44e369c15864ca28ca4751659b6dcf5ada876d17583b4cd9d0ae02abff0ae02d78793c0c60d9f50e6626a0768d8c4dece4733b5fc84d704704f1f7efe2a83e5ced3d3e83fb2a2251458d5fbcc9b51ffdc1fa036bc39adc5029dcbab12862528654899fe6a987b8afafc56171d67a03c6ae721c2f43268aca22bf3c5836c5e", 0x8c}) sync() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) fdatasync(r1) 11:26:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x7, 0x1f, 0x6}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={r5, 0x1}) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x212d40) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000140)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r2 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r1, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140), 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x20000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, 0x7, {0x3}}, 0x18) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="5597098839e7fbf6eeca4703121f30b66e46ec9b53cdcf6228f17e72ab57"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 11:26:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_RUN(r0, 0xae80, 0x0) sync() 11:26:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:26:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001500)=ANY=[@ANYBLOB="0b517853d243e0904ba1688246c81c2f9e47988bed9ff8ecf03ebdd349394bd27a323583e8a6fe05570256b8969648487799925fda24f66bce6d4d7babbb56c383b3c102d70e1ea37f5754fb1b981645"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={&(0x7f0000000340)="33dd562344abf6c933482d465a96fafb1a7940e2d259419e947e6d747479a6308dfdca8a7d85fbe4a60f9fed22d20428d91e538c73b0f7c93a7073855034912290e2147d8eb889a79b400702979b7c5fcb226a45a6ea60ef6c96cb00e901d303d88913ca363866ff9ba79ac426c2d5d5dd0333cf68de0b8ee6da495a5243bb6422419bb88557fb047f976d35b41451a087972decd278ee5e38eb083e3f", &(0x7f0000001400)="2a619147c02e0194e4494709826067d166b16ac52badfec032784f180a1ec5d58554a9c876f1caf2d30f332d9952a5e47aeec6de58e9ed200f7f0f9ccb5f728e9cce72df4c86687ef6a5bb3068ba18824f9b83d66c14fccab94803e3ef21da291d620bbe63b3573dd18cc31bee5fbc2e12737e391ff1657413f7b846e7a1d1e3f414e80b527de0d2f365881480956becf4512b17cfa3923de8d61957003cb4c8c9225ec99bfc3ae3ec2e8885b46432abe439b6a7cf6a18cfc6668a2ee68cb8ef37dea410a1d3d657c7d379f56073294e1a559c9b9094ae9110ad1a499a389362773a61552f6dd62e7b300494f447066ce7b59265c55e7e95"}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7660fd92) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x74bf, 0x181600) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x344010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x710, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = syz_open_dev$cec(0x0, 0x2, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 1: getrandom(&(0x7f0000000440)=""/40, 0x28, 0x1) r0 = dup(0xffffffffffffff9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f00000002c0)="58ed98d58b2399c9f1eb1b540cf7b2c42d23e25301a6bd17d45efd66380d2e69aa3a7a02ada09ae463b5b77e06b4a7a0fe9c75fd3e618997299a11b309ba1e22289bb748d040574d55237dbee70a31bdfb766f7a7ad42f5a3f8090dbf5278707d4e1", &(0x7f0000000340)=""/241}, 0x18) sync() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x200004, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000040)="1e37601db5e8a6448bbb001aeb7fd6244bc173354df81187f61129df5c9e44d1b33e0df18b4c94ead2680906cc37bc7a1ac82b2dc510edcb7c83eb0503bff8d2379466a4f1b25b2f6a555ceaf15ba14c7d3310763f3df0e27a4e800be0641eff88a2b609f568137388a80f4be710242214f559d6ba252e696630de839906d3be6340c715c91715d8dc21718668aa02e351f4", &(0x7f00000001c0)=""/205}, 0x18) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/185, 0xb9}], 0x1, 0x0) 11:26:13 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0xffffffff, 0x1, 0x800, 0x801, 0x6e, 0x1000, 0xa}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) write$tun(r1, &(0x7f0000001680)={@val={0x0, 0x22f0}, @val={0x3, 0x3, 0x44bd, 0xff, 0x32, 0x2e7}, @llc={@snap={0xaa, 0xab, "4597", "cfe974", 0xdaff, "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"}}}, 0x1017) 11:26:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x6, 0x4, 0x8, 0x45, "a3fad61b65cb46e44a42d7afd1d3535257bcc52e8486fe0166883b5cfa53c633"}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x26, 0x2, @thr={&(0x7f0000001400)="b655c88669974efb32201e4f051ad6cadb8d9e8101f076963947c1db0a0cd5d00c3b7a27d61c6aa415d7a0e84664c4ca636d5a60c3ce42f0a2b2175760610c7ede3ae9ba697943f1701bee434cf73100958e39480c55047a687e344421bc9eca4016f6219ba9b8e543dbc717da4427e9cb21595304063277a92d5375c5f3602f09052db3cf4706b723380de8111a30938041a8a32872b47d2bb2631d2ecb2d87c2e349103d848bf1272f3fd6f9460300cf25397c000f0ad50e11d9411d66ecfdb90a86a67001ac4d9512852a9024e380e11de3432c14d906747becb83a4744d03a948696c47ce7528313f44ab665", &(0x7f0000000340)="c882daf2980777fdafbeb3c8602bba089b79d067298fe09462d1400a233f27746bb9fa314dd004a2018b371fcc8060f9c11a577138ce1ba6db1b9733d2df4ec66cafa376f0710740a5"}}, &(0x7f0000000180)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000003c0)) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x7ff, 0x80000001, 0x9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) finit_module(r1, &(0x7f00000000c0)='posix_acl_accesskeyringmd5sum+*)bdev\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/240) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 11:26:13 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x1ff) dup3(r0, r0, 0x80000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 11:26:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001500)=0x0) r7 = getuid() r8 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002a00)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f0000001540)='/dev/nullb0\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002a40)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002b40)=0xe8) getresgid(&(0x7f0000002b80)=0x0, &(0x7f0000002bc0), &(0x7f0000002c00)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002c40)=0x0) r13 = getuid() lstat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000002e80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0xc1020400}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000340)={0x34, 0x35, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x24, 0x3b, [@typed={0x8, 0x27, @ipv4=@empty}, @typed={0x8, 0x25, @u32=0x1}, @typed={0x8, 0x2f, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @typed={0x8, 0x36, @u32=0x10001}]}]}, 0x34}, {&(0x7f0000001680)={0x11e4, 0x24, 0x800, 0x70bd28, 0x25dfdbfb, "", [@nested={0x1068, 0x5c, [@generic="bf8337c12d45bea2a229dbb08f9211bf8c010907273b35735359c2d651216231e4a41b07ad1b2f9d065a4406ce794cf757ff24ca4866da59eb88744c61f675857f87afd9aab5a01b324f12cd84ee12c0a4e058f7d42cbcbbbf576dd10a31eeae69f3f8d345dcdcb7d217d5b27b2fc84b602fb3795483bfc275fef91770b93cb0cd7cb4a40f99f1bfb9cc15f156df6dc698a36fba0e1b8c0323712077c48351564ee2dc85d3c452105cdf30849c39cefadd8d8b2c60ec3a5bd4905f3580a7779c42e87c83f8cb7e838a4dbe618ce6e4c2b874933a304002ea80f3e034edf94ac78789acfbd5b2162a45525319dfbf15841fd143c1f151a77a525fc7f79651379345487a47ca8a8e3e95d039c0fea9eaae0206c808fcc1cb55661f112d34a2865b75f2d16851efbe1066ec613ad300df16fa45d0d60f489500042fea249b314b8d017b3e4b3fb320d58b395879ef6382aca44b0710d36ccff78c6b1e2e745f09a9f477c0a7be40db6032b0c97411b09d3d28c006d7e74481ca7a0d1f79f84d50b6d13cc1c48b2705afe8c62dcf6ea632a989dc4cdca6a9ca4f5bf016bc423b78424abf6a60fca305c7054f667ac58aa5e08b57c44a072ad39ca21eb8ad3590399ca1d803d40168f8bf11fa91fd84ed28fd1ee663873b6f78f594013b1e9b0e5ccb93a84298d011c7cb52127487be2b6de87c23924ff4910bef2852455f9464d7afae1b282bce9955f0d2d0bb3661498205de36c0051daaec694779326d41a3339315b57425c2d5053aa9a9e4db382530ca0470f85f45ff350159aabc0f7615024a6dbd7d17f6e32bf21bad3029d603e66f25c864abf73a1ddc3545c28678e52b4130dc0d3455920e7221681badc1851e96abfd7fe7e3f4b42fbaf4861a9574e182e144c7b3f316e18724be13eef34544a8b5f5060a2b6681f0375d128fc6e42cb23139b6f79147c5fc9f6dbe9baa55fb1d22a2b73f8cb95ec41f732071acb4380ed4842b0a26e3e1a6b477d134ddfddc99cc54515858c02b6dbe0b1101b6c19df679d28a73212c2e31c2aaf292fd09d5f46e036251b35d14ea3c738a390a0f82bbcb58a8661347a168ce59d7e199635eb43c3a48891708f5298032063cded8e5c5ed5bbab9d19b2e76b606dabe542566eb08a8efa465c5bf852e8addd1d483edb854b16ccd125c2a7b54adc49ccf8c9a211cb17e6e689d5d7d51e3a5c67a0e962cb8a0102e368678b2ad6f05c02f63942d48f9e509f621e7759133954f4f47e194887d66d1d7a2051a1b1b2f591b758adcc7b11ad7fc8817e6b70ee2af1f3ed24623f34146be4c3b0c2990d702f24991d1fe38498a63613f5267bd9c33fab3fff094e34a758068199175e8e732214af161cfda5b124fa8ad5bb3d4f1c9812db3add58e19dd7f5d701333ecdb80a8e96b26d2c6ae311deb7c8a22d96635cd764b1fb4d9645ff4b9251a3aa3ee50c3b0f00d1390a3b090e7e4448787060c72d200008c400e49f10fc80724122f8a2906d604ac51e2f5284a91c377f22575cdb1f0fa934b40c0b62c901198a3119bfd426c69dbe700615f1d4c53ce990c5900a63b493d44dc4c08bd8e304e0d190610fd13756278a52dd922efc02bdfdd476462f6a9e3bc1ea7defb5b911e750fce758012e60581dcacd00da35ec5d82ba56f1ec0f79944c810bb277a3394e837b9b205adf80f889f3880db287151eb164fe71d8ac2ae0b6d9f1c72d361ba836a5db91949aaed14cb2d6a3498d386fc037da603cdd2a5978e4f293030d21ac7c2e40fc6d568a3dc984543014da871467ba165d59b9c6089bd4078e2e81bf8e174118ac9946ec26b18f019537e448d5a149a04fcbfc5913e9bca94728e99bb58bbe4094e6bcc55de98660a1c7d86123513e54cc7fc4fd637c40322577c536d6a84237ea2a65ffdf69cf41dca17cd8422dc1bab7ffe37c2844d14a900861baca57aa6bc5f5a788385cdf455fde70f62544af7dff5c301d01c3177c80799a6c6069e316cca4dff52d360846c9d81891cfc47e45262396797714eee09fb88f70b8974fa310940dca917b330ae19a5cc1639aeb2c7493266981fb7d6bff98ed5e057ac46b37b4bd3bb931464c004e8659450d3baa59aadd22754e5a2cf6f4fb3efb5561ef331df9484bf6e8ad74116e7e1fd76e222e20df95ce52257927e0d773949486deaf6a799d4a91321a2b8354fd994146fc589b929510ce0985932e4f32c758d36e5f55d8e9fed51ea7242cd426dac223c12bcfc415b6fbb18c47b30b072edb6bcceb7eecf158568e1ee9ee19e2cd49f5199cac15a38615591ad42e5517072729fcc9b8c11c76535ddfc8d450da2b3b1ec78bd60e7b891cfbf041d040b2192df74feb5fa6f52b3125ac159ca1199ec7c6be35dc4e14a939317b1fdaf192c2d984426becc144e98d3ae0c554e569118e375a06d537d218664bbee3d49f3d9303fbfb0dabf94de3d4c90f9afb9bab5be9e10a8a9252f8fda3bf3601b9607daa31e483ab781b3530401b6af73ce148b1b5bc53db32878d94dd02ab15274aacf19b629e8d0da1c81fc1ea232bbf05f635098308b75b955a442482f947619efd243f1cd890f34a73d1c3a4bccf1066bef2ff2343ab2c803252d3c7b1aa215e70930903103e825a01df4b4ff191124a2f7ee8f1b916a544e58d3c6e1c4d6bada7fa0e6291b2e3883c550526ee42b8673ac850d779b8b601e50622fca4f8a2600665d97ba3be48ab5c550f8dadc81a4174134772b3bfb04d0a716b634b23dad387b1d0ffb0e89bcc1d7e687b1e1c8ca343c094943c424f58e999bad7caf9271fafb0cbfa0d5fbe5d603ef7ab9b8d64cac4723281eb473db90b110b41598925680c053f00bdaf5a87702f05ea791e1a5b203228770ab731f1824a2f20ab2386bda9eff158dcf7d90d2908d7e7f43561e8ae37ecc7d731a36723c38d2dd9bc191d1b610964bacd64875e9b9a609347cdbad40a6fe966837e25bfb23be0abb1ba5f620464ee56519474dc394b814bc318af6e58012b31410e182853f4b477d26895deb3f5b7a12380329f86cf56999fa26936e9410abb3d4578990a6e9aca1c91fb3e839bbf26df919000ba14ca20c1dcc94ad889aa9773725e5248168bc550d321604f8f146e329cb1a560ff8a4d294dbd90d1a6fa9c5d0e3f5232d7835f3c7193ba7afa815df5036bcf4cf79aa0af4a013aeacf8375d35e29d68d3af7ed6bde16d3e279826d3afe32e43c36b766f63a3ef6c3dbed3699fd6f30b96070fa440fbd2df9c66ae2e77886eb1f850ff60008efcf28175b6fa22fab258f4486dbc8d4af8bb233d7c5832af14b089c9cb8c557b468f55203ef5d105d84f24ac0724ca83b6515eee394ee9ea3560fcd96e7d893030117b0b8b998e92219b93bf696731dc5a109baafb83ee2d637fa4e27e026e85ecad8470e6efcb8ea86b419c89dfb2e9f9d65f6299bae77b94a5caf1b59da8340fe3db6ef5a536fc3f2e481d67442205d6c53eba9d919dd842d9d98081ce79b02904941482b0387823ee1df1bd7b8c6e5b7af3448ad7fd54a845769b5d617a3ac6c0b42644a1406f861e2499c93431f407714567341ce7eaa8ee60ad8c007ad423a2b653d322d8808a45f9f81db31c9b1f0c7c38cd5c2660aed99247e9d86f7537db29df2ad3240622095e75ff92d1fb8a08b1214ab1e0f9fea2d2ae0143093a911ce341f2ef34c36125649f615ee2d63b997f61fb349e4908c8aecc3de8ca7d87d8d9cf9aad6e020ed852078ba7e863ce302708db082a6023ae191303c085bcc0d9dc191d15b9606a9c51827d3f933f3cfc43d01cbd37417762124ad006bb60299fd5f6cad09c4377b864d4acd1439e555531c0d30fec83bfd3e65cd999cf19ea57d7f1ceae73205e822520fea857d79c68600e26bbb461708fe3868bb7a11fdcf08a9ef75e2e87e44f2e223d26802e22007ca7943dba407a286bc6a6e701c6a28f0cefde6c41cd0f29561d039a3291d91b93fd37fdedf3d69a3e9ecab18ff6a8397b25fe9d401b84db52c83bb1f2aa1ce7843fbf7b09e0fbf283087ff333e4a93701e97f80937e61d1515184bf257678b8b40a15a1d262062590da0fc402d143785853ca9a0b91549ed0be717ee49d5d233e87fe1236dcb3072952678c36e55650a5dd03fe03dcb818f686d0900a7e77e316597250c5ce10f3651d0fd3bad9ce911d82c6eec210919b0e196f9b8971b1888e0e45b4bad2a37491d352360273b0d061bd5a61a20d1e539250c30b7529298602d374bddbd69f0264a3226c2d448421d847fdf2495ccdb12b6d663da19af63c522459dfdac32caf41e4c0e55b9011fd6e724dca3afa6ec345d30bc8ecd88be04aaa817c4484a6e8a9d8eb7c4a5b966d2f16ad6f7511e2f48bfb195720eb709b7d05fcfbf1e961fa77af2ab5ebb86ad10dc9e0ffea8fff208c4c3db1e83a56ef9e3506676a3b6cc27fdd51ff9348182f0c872cee215da7001dad8e2b6021debfb125b0f0fbb96be7e5b996e0f31c798603695a231858e6127c29e43887c0ed0872f08ee3f7027e8bc6f7cad9cb9c9b5a250948a61326f47593c77cf1a9f6724ef319b66537cad83f684c02391810498a5828bbb3b6c9abf67b1d7a3b99d0a4d7d93cc685c2c5bb3867951149c73503069f1fe92e1e4572f185e2e3b6ab6a40c8f1f5043533c1bedffbfc73219ecb39cb331cf4f623527b9183edb60384b0e542be4281394efacd551f1f6cdbe1d73063d21958f49ca206cb09a7804354e7c4f67b56d161d0e5a0c67a16b3bb77fddbfb3a75642a83d5388f1cb4d6aae30eb8e778a2079b4065b76be732333f778bc962df7da247347a64c3df827883906d63ac2c43851ae2f8f7e59ee85f1d22085a59e4afc2f00b8095bdb0206b898a1003fec6c2e56304144b691bfb1d171c31f7eff1f270226259d3d0dd4ab6ef4f43554f653bab1b091a4c8450a28b7ec3ec6ecba1bdb4c1f68c69a9fed9cbe6d776348812573af18f6ad0d548e3a9b020ef214ab4dd3bc9617bddb2bf37261cc83e191a5f1170aefd2f39d80e94b59d8f7afc5e4ab8e3c645c45ccdf96a97fd924f54c7d978d1aec9c7c70c64d624b8773481460019a424476d4e60a5e32ae1050b5d323647d634cb3ba56b6f2c14ae87d8089d3d79491bbe9d97cc33e05455556d392d1f94553fedaf857974dd9a313bf50c2759c56c4195af29fd3ef2fb2018026b140c60f9e6ccda630e9bcbffc2df26da93c2dab2fa2bc4ec83e1b83f800893a4d85fe0abb4d96c7a0c6cdad65641f5e111c7a6c2d0f30334d7b559ad055173219625f859db5dce1b53ae2f4a4a38687361d7922acd78b11a6932deceeb9fa2ab20f051aeaf7b62744e6295babf0251fc37f26c7a534a757c4cfe2d1b31710ef7943a43c133cbe007a3aa8911f1b863993f23a8b884d5f1a4cd9f8b865f9302c8ef77011d1b911e04c51afba4b00ddcdaacef952b877875be432ade11bd891b0b5b83c69e66e903a5b5f6b62df1170812fd521f75f47a3e2c2a4d52e2bf18c7a1fa9241ae7ddc7d7d93c9a701f2208f396c4a148b7991694008672be01ee22038cb69dbffba3c6304491caaceddf748663d2d65559689d3a66cb61c0e53a9a31d56e9943b82dfcc8a679a9573b67de38edf4ec40b2e8912fc97c04285ba65fadc59b3ce410236aa6f1b0ae99825901bd50013c7408d55c292fbd526b2dab79b149fa45cac0cc66f97b85192fcf0f4fafc90cfb342ba2f1020246fcd1e45cf064fc3f9d7d07e6795de97481b44386269fde986ab65238c9fb1", @generic="7960350eb2fe7bcfc3c19e2175f56f2b094a4c02cd6aad2bc214a7fac7039ee6e17c264164ec042a86bbf1484a0726d38f31acaa65c038be9000e2c7b565ec1dd2f5303122710fc2ce7223b4163bbe03f071391525ebb27508f442394a76fd60a4"]}, @nested={0x10c, 0x7a, [@generic="76a5df8be35753646738e40dff47278ac3aa2c478cd3e9557a9c84039920d12e3e1599cacb952cb2405acf33aff9207798be48eeeac924b711ae73a303f9de0e8b71745b74c0af7122351f1f10d6b15fa8ad0e0509b028fc2f", @generic="ad0c68b9d12dc6d5e89201922f", @generic="56d7d1b3f378709112058399d35b707a671b27aa1c8dfe4624603ab0171669bba7c3829c6d94f0f52196ab840023e1df86c3f1a8f35f1338abb1c9a9708a91a59d3b72b88ba8d43d17a9ecf722bebb5bdb3e761b492a98", @typed={0x8, 0x2e, @u32}, @generic="04013fa43ea003f9f15ce1e96a60effe0e8b58c9714519c746a364c881b6c64562837402049ceccf909a1247fe6571a211b2701c2147a810a33bc9ff9ca084f048"]}, @generic="c0eafe8374e84acd3fba615a38a4dbfb52ccbcfaf8135efe598c687b8ae45ccdacd29c7eb08c779e0a616549e10a595d235cc2fe1c95621f17f39c557957e0e73c8b101fda4c39b6a8c458dce300f88e3a5c47b5a337df0e25874ad4299235"]}, 0x11e4}, {&(0x7f0000002880)={0x174, 0x30, 0x402, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x144, 0x40, [@generic="808414ea216cdc8683a3c885c613634ddd4914e63db163ab0971dc3ad02e0ca4e888f271fe150b4f9740b9f8b79e74ea1de6722e29fde4661006dd647979676b3d8dc54b691d7efb92cd59c1685e449a0bc8ec15dd88e5c5d9bdf0e1d08fae86426cb1c8afe43894d94a9d4b531f37f4d50926712fcc95831306c2741421f517d91ff8a98e8456af00322cd7344f69d5fd6d618f8a6d1bc7753a179058edc4f982b95e48a572f2c5c21408c20ade247fb0", @typed={0x8, 0x8b, @uid=r5}, @typed={0x8, 0x89, @u32=0xd38}, @generic="f8ad6c46fac1ecc523748700ba95b6384444b0fb7d4c2aeaf5816f3d169fc67d873943afe063e521982ed49557b16a9e6e5814f67cb4c36c3d1482169e82e16d4cd5b2a57744f86dd91a3db56c243eff1c18d8250233502ed6ed7f80d4a4f6d3850f25ec6b616fa4d12c0f26eff1e1926c1928ed0a965991b219fb9d"]}, @typed={0xc, 0x17, @u64=0x4}, @typed={0x14, 0xa, @str='/dev/snapshot\x00'}]}, 0x174}], 0x3, &(0x7f0000002d40)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r4, r1, r3, r0, r0, r4]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x10}, @rights={0x38, 0x1, 0x1, [r2, r1, r0, r4, r4, r2, r4, r2, r3, r3]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r2, r1, r3]}], 0x120, 0x10}, 0x4040) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000140)={0x2, 0x3}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0xffffffffffffffed, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f00000002c0)=0xda) 11:26:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x4, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) mknod(&(0x7f0000000100)='./file0\x00', 0x4, 0x7) write$apparmor_exec(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="fca99e8b713a352c08040000000000000098e23994a888742227e15164150e8e2d8b02f7ad823906b1a27210ffc9a9ba31e7a10956a1420a443456e501bac7e3baf98abaabc62d6487f09b08370eaa96a727094b0000000000"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000340)="0adc1f123c1206a91201428ef67fad5f89050e2dbc625c041e632f9b722623ae3df29496f89a9465220a42e05a8ca2d3670d09f6c0b47deb819f281bc58c0f19e6f70d742189892a59b4fb3259ec0062a433afe7561212000000000000000000") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 437.607204] net_ratelimit: 14 callbacks suppressed [ 437.607211] protocol 88fb is buggy, dev hsr_slave_0 [ 437.607234] protocol 88fb is buggy, dev hsr_slave_1 [ 437.612232] protocol 88fb is buggy, dev hsr_slave_1 [ 437.687200] protocol 88fb is buggy, dev hsr_slave_0 [ 437.692362] protocol 88fb is buggy, dev hsr_slave_1 11:26:14 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000140)="ad59442d3367054b67480ca55bbd8b456d66b16367596411b7671e50ac6d5849e3b35d8c9e5166726b585a736e6776998ea3c312236d74b628e0a5cdbc34a69ff85806d4ae332dc18a67f069847e6afa2f293110336b3447dac224af558de9c95c9b3129b3f6f59ed8abd39fd8ffb06662952e7048eb2b66dff587e6e3", &(0x7f0000000340)="a6aef3d795b40e0b6f40364cc3d0dfe04ed9da927a41078b7aec8e0f09f74040c044e2b029b935d52b4adafb9aa57c4f3781d74d09a22a31ec02d1deb3f166b4cdc9fee940731de58feea679da72d12f63a55e9017b751e5f6d3c82f0c9c1f1589c25bf30a9597bf265dbcf2568dfae4d5938d87d480b77d83493d6c4d29d044", 0x2}, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:26:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x80000001}, &(0x7f0000000140), &(0x7f0000000200)={0x77359400}, 0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:14 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 438.087187] protocol 88fb is buggy, dev hsr_slave_0 [ 438.087195] protocol 88fb is buggy, dev hsr_slave_0 [ 438.087234] protocol 88fb is buggy, dev hsr_slave_1 [ 438.092317] protocol 88fb is buggy, dev hsr_slave_1 11:26:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/nullb0\x00', 0x202000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) finit_module(r3, &(0x7f0000000340)='/dev/nullb0\x00', 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) read(r0, &(0x7f0000001400)=""/145, 0x91) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 11:26:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000001400)=""/98, 0x62}], 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x1) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) finit_module(r3, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 11:26:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 438.727197] protocol 88fb is buggy, dev hsr_slave_0 11:26:15 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00010100000050a800000b000000300001001400030000000000000000000000000000000000280004004e200000080001000a0000000800d8f41dbaa712f69432598422ee7e34a070020f5875a4b061a2026e0bd84b107a13b4992c8057cd41250f2c0474c45718dddb00e944faa5e0145b6a24bacacca3b9f12f04c684427b84074637f1c5f067474e4eb79c4ee29abbe8f29a20f2b712cef0c73de4278e5150137ae5ada19d294c791e63324c3dd43fc4402a894a46eebef6ed753846d1db51d3f846edb1bdc4e66ff7a1d643bc4b4dc891fd8243900bb6e22ce1290c498824d6d05fb99f9229c4e01371edce3ffd18230b2e405b60c06aecd738bdf9dc0189e5a6375ac01f95adcf"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 11:26:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10a00020}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x58}}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x200a0042) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r2 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r1, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x10000000, 0x20, 0x2c}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000014c0)={0xffffffffffffffff, r2, 0x0, 0x12, &(0x7f0000001480)='/dev/loop-control\x00'}, 0x30) timer_create(0x5, &(0x7f0000001400)={0x0, 0x3, 0x0, @tid=r5}, &(0x7f0000001540)=0x0) clock_gettime(0x7, &(0x7f0000001500)={0x0, 0x0}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x6001, 0x2], 0x40, 0x10, 0x4}) timer_settime(r6, 0x1, &(0x7f000006b000)={{r7, r8+10000000}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001010008912, &(0x7f0000000100)="0a0500000000000000b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f0000000180)=0x1ff) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:15 executing program 1: getrandom(&(0x7f0000000040)=""/40, 0xfffffffffffffe30, 0x4005) sync() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x4, 0x1000000000, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7}}) 11:26:15 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) wait4(r0, &(0x7f0000000080), 0x8, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x3, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast2}], 0x40) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140)) write$cgroup_int(r2, &(0x7f0000000100)=0xff, 0x12) sync() 11:26:16 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x9, 0x2000000000000005, 0x1, 0x800000000003, 'syz1\x00', 0x58f3b1a5}) 11:26:18 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0xffffffffffffff06, 0x0) sync() r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x8200, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) [ 442.887198] net_ratelimit: 22 callbacks suppressed [ 442.887207] protocol 88fb is buggy, dev hsr_slave_0 [ 442.897316] protocol 88fb is buggy, dev hsr_slave_1 11:26:19 executing program 1: getrandom(&(0x7f0000000080)=""/40, 0x28, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x240002, 0x0) sync() r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x83, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x4, 0x7, 0x100000000, 0x6, 0x4, 0x5f15}) sendto$rose(r1, &(0x7f0000000100)="b7446dc0a53157d354018c409df3944138fdee8ad355fc61d9097b5bba5d9d681881fd1d630b1e25bf11e19f1b87238c92d3d33ce4bcad92da537b055caff4e31e404aca771b9c7dc31731b156df726af5098f9788b0102fff404e87cede654bdfae1d27a90f37e04e9f531dec51c40f81e8618eb0ea69c084c3954b4a784533431410db2ce3128f49ae0e655bfbe7c0d02231cfd05936e018391f85e1935621cd45678380ffc97446e86ffc9b33ee8c3ae25f8c03f38dbf76ebf9d7e9c77403e36e511173672a1fdfc3919925c617a33fecd749cd47415c208a", 0xda, 0x8000, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) [ 443.847938] protocol 88fb is buggy, dev hsr_slave_0 [ 443.853088] protocol 88fb is buggy, dev hsr_slave_1 [ 443.857214] protocol 88fb is buggy, dev hsr_slave_0 [ 443.863183] protocol 88fb is buggy, dev hsr_slave_1 11:26:20 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0x4, 0x3) sync() [ 443.927202] protocol 88fb is buggy, dev hsr_slave_0 [ 443.932297] protocol 88fb is buggy, dev hsr_slave_1 11:26:20 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) [ 444.327188] protocol 88fb is buggy, dev hsr_slave_0 [ 444.327193] protocol 88fb is buggy, dev hsr_slave_0 [ 448.007206] net_ratelimit: 14 callbacks suppressed [ 448.007216] protocol 88fb is buggy, dev hsr_slave_0 [ 448.017207] protocol 88fb is buggy, dev hsr_slave_0 [ 448.017251] protocol 88fb is buggy, dev hsr_slave_1 [ 448.022259] protocol 88fb is buggy, dev hsr_slave_1 [ 448.087193] protocol 88fb is buggy, dev hsr_slave_0 [ 448.092288] protocol 88fb is buggy, dev hsr_slave_1 [ 448.487189] protocol 88fb is buggy, dev hsr_slave_0 [ 448.487207] protocol 88fb is buggy, dev hsr_slave_0 [ 448.492280] protocol 88fb is buggy, dev hsr_slave_1 [ 448.497300] protocol 88fb is buggy, dev hsr_slave_1 11:26:26 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) sync() 11:26:26 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 453.287215] net_ratelimit: 22 callbacks suppressed [ 453.292224] protocol 88fb is buggy, dev hsr_slave_0 [ 453.297324] protocol 88fb is buggy, dev hsr_slave_1 [ 454.247210] protocol 88fb is buggy, dev hsr_slave_0 [ 454.247217] protocol 88fb is buggy, dev hsr_slave_0 [ 454.247283] protocol 88fb is buggy, dev hsr_slave_1 [ 454.252302] protocol 88fb is buggy, dev hsr_slave_1 [ 454.327213] protocol 88fb is buggy, dev hsr_slave_0 [ 454.332304] protocol 88fb is buggy, dev hsr_slave_1 [ 454.727187] protocol 88fb is buggy, dev hsr_slave_0 [ 454.727222] protocol 88fb is buggy, dev hsr_slave_1 [ 458.407222] net_ratelimit: 14 callbacks suppressed [ 458.407229] protocol 88fb is buggy, dev hsr_slave_0 [ 458.407248] protocol 88fb is buggy, dev hsr_slave_1 [ 458.412211] protocol 88fb is buggy, dev hsr_slave_1 [ 458.487181] protocol 88fb is buggy, dev hsr_slave_0 [ 458.492292] protocol 88fb is buggy, dev hsr_slave_1 [ 458.887193] protocol 88fb is buggy, dev hsr_slave_0 [ 458.887223] protocol 88fb is buggy, dev hsr_slave_1 [ 458.892303] protocol 88fb is buggy, dev hsr_slave_1 [ 459.527214] protocol 88fb is buggy, dev hsr_slave_0 [ 459.532298] protocol 88fb is buggy, dev hsr_slave_1 11:26:40 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4fbcb7b2b518bf3461691c32df40c99426d4beb9e9b08045e816d1af51fe7a89cf3c56bbf00cc46054f0045311a171f23cd1df7300bbe062fd8e58d8bc0297c401bf9af25229f5bbd35c97ce689bc4f578bd76be0de6598a29bd9b943e1ac915d0"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000002bc0)=""/203, &(0x7f0000002cc0)=0xcb) r2 = syz_open_dev$cec(0x0, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x7}, &(0x7f0000000200)=0x8) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000001400)=""/254, 0xfe}, {&(0x7f0000002680)=""/254, 0xfe}], 0x4, &(0x7f0000002780)=""/255, 0xff}, 0x8cb0c5da6a23a224) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002a40)=[&(0x7f0000000140)='/dev/nullb0\x00', &(0x7f0000001540)='/dev/snapshot\x00', &(0x7f0000002880)=')ppp1@*$em0eth0)\x00', &(0x7f00000028c0)='/dev/nullb0\x00', &(0x7f0000002900)='/dev/snapshot\x00', &(0x7f0000002940)='/dev/snapshot\x00', &(0x7f0000002980)='vmnet0md5sum{\x00', &(0x7f00000029c0)='!-.*\x00', &(0x7f0000002a00)='/dev/snapshot\x00'], &(0x7f0000002ac0)) getsockname$ax25(r2, &(0x7f0000002ac0)={{0x3, @bcast}, [@rose, @remote, @rose, @default, @bcast, @remote, @netrom, @netrom]}, &(0x7f0000002b40)=0x48) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffd) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000002d00)=[0xfbd, 0x101000]) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:40 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:26:40 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0xffffffffffffff84, 0x2) sync() r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xfd, "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"}, &(0x7f00000001c0)=0x105) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0xc946, 0x6}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 11:26:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 463.687191] net_ratelimit: 20 callbacks suppressed [ 463.687199] protocol 88fb is buggy, dev hsr_slave_0 [ 463.697404] protocol 88fb is buggy, dev hsr_slave_1 11:26:41 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202101, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x702, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sync() [ 464.647200] protocol 88fb is buggy, dev hsr_slave_0 [ 464.647204] protocol 88fb is buggy, dev hsr_slave_0 [ 464.647254] protocol 88fb is buggy, dev hsr_slave_1 [ 464.652335] protocol 88fb is buggy, dev hsr_slave_1 [ 464.727202] protocol 88fb is buggy, dev hsr_slave_0 [ 464.732355] protocol 88fb is buggy, dev hsr_slave_1 [ 465.127212] protocol 88fb is buggy, dev hsr_slave_0 [ 465.127217] protocol 88fb is buggy, dev hsr_slave_0 11:26:42 executing program 1: sync() r0 = getpgid(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x101) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x800000087, @empty, 0x4e23, 0x2, 'wrr\x00', 0x20, 0x4000000000000081, 0x7e}, 0x2c) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) syz_open_procfs(r0, &(0x7f0000000000)='oom_score\x00') 11:26:42 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sysinfo(&(0x7f00000001c0)=""/205) sync() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3ba, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xfff}, 0x8) 11:26:44 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bond\x00'}) 11:26:45 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffffffffffffffdc, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) [ 468.807211] net_ratelimit: 14 callbacks suppressed [ 468.807218] protocol 88fb is buggy, dev hsr_slave_0 [ 468.807241] protocol 88fb is buggy, dev hsr_slave_1 [ 468.812211] protocol 88fb is buggy, dev hsr_slave_1 [ 468.887221] protocol 88fb is buggy, dev hsr_slave_0 [ 468.892339] protocol 88fb is buggy, dev hsr_slave_1 11:26:46 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xfffffffffffffd98, 0xfffffffffffffffa) sync() [ 469.287937] protocol 88fb is buggy, dev hsr_slave_0 [ 469.293039] protocol 88fb is buggy, dev hsr_slave_1 [ 469.297184] protocol 88fb is buggy, dev hsr_slave_0 [ 469.303103] protocol 88fb is buggy, dev hsr_slave_1 [ 469.937184] protocol 88fb is buggy, dev hsr_slave_0 11:26:50 executing program 1: getrandom(&(0x7f0000000140)=""/40, 0x28, 0x2) sync() r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x4bd5, 0x592}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000100)=0x8) [ 474.087189] net_ratelimit: 19 callbacks suppressed [ 474.087198] protocol 88fb is buggy, dev hsr_slave_0 [ 474.097284] protocol 88fb is buggy, dev hsr_slave_1 [ 475.047217] protocol 88fb is buggy, dev hsr_slave_0 [ 475.047222] protocol 88fb is buggy, dev hsr_slave_0 [ 475.047273] protocol 88fb is buggy, dev hsr_slave_1 [ 475.052301] protocol 88fb is buggy, dev hsr_slave_1 [ 475.127204] protocol 88fb is buggy, dev hsr_slave_0 [ 475.132285] protocol 88fb is buggy, dev hsr_slave_1 [ 475.527200] protocol 88fb is buggy, dev hsr_slave_0 [ 475.527205] protocol 88fb is buggy, dev hsr_slave_0 [ 479.207195] net_ratelimit: 15 callbacks suppressed [ 479.207203] protocol 88fb is buggy, dev hsr_slave_0 [ 479.207227] protocol 88fb is buggy, dev hsr_slave_1 [ 479.212189] protocol 88fb is buggy, dev hsr_slave_1 [ 479.287196] protocol 88fb is buggy, dev hsr_slave_0 [ 479.292288] protocol 88fb is buggy, dev hsr_slave_1 [ 479.687186] protocol 88fb is buggy, dev hsr_slave_0 [ 479.687219] protocol 88fb is buggy, dev hsr_slave_1 [ 479.692361] protocol 88fb is buggy, dev hsr_slave_1 [ 480.327247] protocol 88fb is buggy, dev hsr_slave_0 [ 480.332360] protocol 88fb is buggy, dev hsr_slave_1 [ 484.487236] net_ratelimit: 20 callbacks suppressed [ 484.492245] protocol 88fb is buggy, dev hsr_slave_0 [ 484.497343] protocol 88fb is buggy, dev hsr_slave_1 [ 485.447225] protocol 88fb is buggy, dev hsr_slave_0 [ 485.447231] protocol 88fb is buggy, dev hsr_slave_0 [ 485.447284] protocol 88fb is buggy, dev hsr_slave_1 [ 485.452302] protocol 88fb is buggy, dev hsr_slave_1 [ 485.527195] protocol 88fb is buggy, dev hsr_slave_0 [ 485.532282] protocol 88fb is buggy, dev hsr_slave_1 [ 485.927190] protocol 88fb is buggy, dev hsr_slave_0 [ 485.927227] protocol 88fb is buggy, dev hsr_slave_1 11:27:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3b}, &(0x7f0000000180)) timer_create(0x4, &(0x7f0000000340)={0x0, 0x26, 0x4, @thr={&(0x7f0000001400)="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", &(0x7f0000001680)="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"}}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:03 executing program 1: getrandom(&(0x7f0000000040)=""/40, 0xffffffffffffffe0, 0x1) sync() 11:27:03 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7ff, 0x2002) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f00000000c0)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:05 executing program 1: sync() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x7, 0x3}) 11:27:05 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) sync() 11:27:06 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x50800, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000340)=0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x9, 0x4) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x1ff, 0xaaaaaaaaaaaad42, &(0x7f00000001c0)=[{&(0x7f0000000080)="0942dd11fb9a64997b7f777d68530f9a690eff8aba27c33d47421e95f87fb05fc2a0f4850d0c93f255f9bee72b010fa94506c29712c54300692e66043447ec9fa99a812c914b94abc61069f9af6ba25751f973f6892bc55a6242da95e6a1bacd870176cc58844fcb29cccff674f38218e84ca952612ff00dbda3f06aad8aec96f1522c8ea6d340cefb0bbcaae095ad29933036b5ac48f9a506ff93eaf61b470cec288ed0730d1871e87a4e62cc5f3b70c0a8f0015e5d8457bb", 0xb9, 0xb82}, {&(0x7f0000000240)="0a696283d284309b65c8ed41baa75716ac46f31a", 0x14, 0x1fbe3ee}], 0x41001, &(0x7f0000000200)='^\x00') setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) [ 489.607261] net_ratelimit: 13 callbacks suppressed [ 489.607269] protocol 88fb is buggy, dev hsr_slave_0 [ 489.617176] protocol 88fb is buggy, dev hsr_slave_0 [ 489.617322] protocol 88fb is buggy, dev hsr_slave_1 [ 489.622310] protocol 88fb is buggy, dev hsr_slave_1 [ 489.687211] protocol 88fb is buggy, dev hsr_slave_0 [ 489.692341] protocol 88fb is buggy, dev hsr_slave_1 [ 490.087188] protocol 88fb is buggy, dev hsr_slave_0 [ 490.087195] protocol 88fb is buggy, dev hsr_slave_0 [ 490.087238] protocol 88fb is buggy, dev hsr_slave_1 [ 490.092322] protocol 88fb is buggy, dev hsr_slave_1 11:27:07 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x143c000000000000}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8000000, 0x1, 0xffffffffffffaf20, 0x800, 0x80}) 11:27:11 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat ', 0x4, 0x5e, ['\x00', 'md5sum\x00', '},/\\\x00', '\x00']}, 0x2b) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) 11:27:11 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x28, 0x2) sync() [ 494.887185] net_ratelimit: 22 callbacks suppressed [ 494.887193] protocol 88fb is buggy, dev hsr_slave_0 [ 494.897293] protocol 88fb is buggy, dev hsr_slave_1 [ 495.847206] protocol 88fb is buggy, dev hsr_slave_0 [ 495.847237] protocol 88fb is buggy, dev hsr_slave_1 [ 495.852292] protocol 88fb is buggy, dev hsr_slave_1 [ 495.937213] protocol 88fb is buggy, dev hsr_slave_0 [ 495.942300] protocol 88fb is buggy, dev hsr_slave_1 [ 496.327189] protocol 88fb is buggy, dev hsr_slave_0 [ 496.327217] protocol 88fb is buggy, dev hsr_slave_1 [ 496.332271] protocol 88fb is buggy, dev hsr_slave_1 11:27:15 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x21) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xc580}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x11, 0x100000001, 0x7, 0x7}, &(0x7f0000000140)=0x98) sync() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x4, {0x800, 0x948b, 0xff, 0x8}}) [ 500.007198] net_ratelimit: 14 callbacks suppressed [ 500.007205] protocol 88fb is buggy, dev hsr_slave_0 [ 500.007229] protocol 88fb is buggy, dev hsr_slave_1 [ 500.012194] protocol 88fb is buggy, dev hsr_slave_1 [ 500.087250] protocol 88fb is buggy, dev hsr_slave_0 [ 500.092347] protocol 88fb is buggy, dev hsr_slave_1 11:27:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r4 = open(&(0x7f0000000140)='./file0\x00', 0x14000, 0x10) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000180)={0xa, {0x5, 0xff, 0xa12, 0xffffffffffffffc0}}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'vlan0\x00', 0x9}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000001400)={{0xf000, 0x0, 0xd, 0x7, 0x9, 0xa000000000000000, 0x7fffffff, 0x0, 0x7, 0x80000000, 0x1}, {0xf002, 0x2, 0xd, 0x2f84, 0x1, 0x101, 0xfffffffffffffff9, 0x0, 0xffff, 0x3, 0xffffffffffffff01, 0x4}, {0x2, 0x0, 0xa, 0x6, 0x6, 0x100, 0x40, 0x2, 0xfffffffffffffff7, 0x3e06, 0x6, 0x8}, {0x2000, 0x4000, 0xb, 0xe6c, 0xfff, 0xffffffffffff0001, 0x0, 0xb07, 0x3f, 0x3, 0x1, 0xf4}, {0x16000, 0x0, 0x10, 0x2, 0x1, 0xfff, 0x8000, 0x58b6, 0x4, 0x9, 0x9, 0x7}, {0x100000, 0x5000, 0x1f, 0x100000000, 0x87, 0x800, 0x10000, 0x7, 0x5, 0x9, 0x80000001, 0x9}, {0x1000, 0x5000, 0xd, 0xfffffffffffffff7, 0x8001, 0x8, 0x1, 0x5, 0x4, 0xe1b, 0x9, 0x7}, {0x2, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100000000, 0x3, 0x80000001, 0x7, 0x0, 0xdda}, {0x2004, 0x1000}, {0x11000}, 0x2, 0x0, 0x5000, 0x0, 0x5, 0x5000, 0xf000, [0x5, 0x2, 0x5, 0x7f]}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e21, @rand_addr=0xffffffff}}) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 500.487188] protocol 88fb is buggy, dev hsr_slave_0 [ 500.487193] protocol 88fb is buggy, dev hsr_slave_0 [ 500.487238] protocol 88fb is buggy, dev hsr_slave_1 [ 500.492268] protocol 88fb is buggy, dev hsr_slave_1 [ 501.127207] protocol 88fb is buggy, dev hsr_slave_0 11:27:18 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:19 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0xffbe, 0x2) sync() socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 11:27:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) listen(r4, 0xffffffffffffff01) 11:27:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7d441bf3b8795cadd63ce069931e348a14f978d94b40b8f3ce04dada3f334d722c4688725ea4ff01d363fd"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:20 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:20 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x401, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, {0xffffffff, 0x3, 0xf87c, 0x9, 0x5, 0x70000000}, 0x40, 0x8}, 0xe) 11:27:21 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xfffffffffffffdc0, 0x2) sync() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x8}, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x801, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x4, 0x3, 'client1\x00', 0x0, "89b97a540e6c6444", "8c7c13a6b1dfd0ba0093daf3112971bdddba630100168b8ccb1e942f9a0949d1", 0x4, 0x81}) 11:27:22 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() socketpair(0xa, 0x7, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e24, @multicast2}}) [ 505.287189] net_ratelimit: 21 callbacks suppressed [ 505.287199] protocol 88fb is buggy, dev hsr_slave_0 [ 505.297325] protocol 88fb is buggy, dev hsr_slave_1 [ 506.247191] protocol 88fb is buggy, dev hsr_slave_0 [ 506.247196] protocol 88fb is buggy, dev hsr_slave_0 [ 506.247245] protocol 88fb is buggy, dev hsr_slave_1 [ 506.252316] protocol 88fb is buggy, dev hsr_slave_1 [ 506.327194] protocol 88fb is buggy, dev hsr_slave_0 [ 506.332355] protocol 88fb is buggy, dev hsr_slave_1 [ 506.727199] protocol 88fb is buggy, dev hsr_slave_0 [ 506.727228] protocol 88fb is buggy, dev hsr_slave_1 11:27:23 executing program 1: getrandom(&(0x7f0000000040)=""/40, 0xfffffffffffffe58, 0x400000000002) sync() r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)={{0x3, @rose}, [@remote, @remote, @rose, @remote, @default, @netrom, @null, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) accept4$netrom(r0, &(0x7f0000000100)={{0x3, @netrom}, [@netrom, @bcast, @bcast, @default, @null, @netrom, @null, @bcast]}, &(0x7f0000000180)=0x48, 0x80800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000200)={0x2, 0xff, 0x1}) 11:27:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7, 0x2, 0x80}) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) clone(0x4000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="f464f3e10b34e92060dd26947cc838986fb75eddc3990c7b5af00d91005d3f30e9c0f0a89892a45cfe50a4c8a268de62ad809923f89052501c48752a6b9696de96a48d0bd6a834f0e58b2a21fd1b8d92076bdd3b6972333eec3866b2890107ec9027d789f44d33106a137135eb") sync() 11:27:25 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006e00)='/dev/vsock\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000006e80)='nbd\x00') r2 = syz_open_dev$vcsn(&(0x7f0000006ec0)='/dev/vcs#\x00', 0x1400000000000, 0x200) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000006fc0)={&(0x7f0000006e40)={0x10, 0x0, 0x0, 0x500900b4}, 0xc, &(0x7f0000006f80)={&(0x7f0000006f00)={0x5c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x40b15df83800976a) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() 11:27:26 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'caif0\x00', 0x7}) [ 510.407219] net_ratelimit: 12 callbacks suppressed [ 510.407227] protocol 88fb is buggy, dev hsr_slave_0 [ 510.417202] protocol 88fb is buggy, dev hsr_slave_0 [ 510.417251] protocol 88fb is buggy, dev hsr_slave_1 [ 510.427333] protocol 88fb is buggy, dev hsr_slave_1 [ 510.487183] protocol 88fb is buggy, dev hsr_slave_0 [ 510.492293] protocol 88fb is buggy, dev hsr_slave_1 [ 510.887188] protocol 88fb is buggy, dev hsr_slave_0 [ 510.887217] protocol 88fb is buggy, dev hsr_slave_1 [ 510.892344] protocol 88fb is buggy, dev hsr_slave_1 [ 511.527188] protocol 88fb is buggy, dev hsr_slave_0 11:27:30 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r2, 0xfffffffffffffffc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") flistxattr(r2, &(0x7f0000000140)=""/107, 0x6b) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 515.687228] net_ratelimit: 20 callbacks suppressed [ 515.692219] protocol 88fb is buggy, dev hsr_slave_0 [ 515.697298] protocol 88fb is buggy, dev hsr_slave_1 [ 516.647207] protocol 88fb is buggy, dev hsr_slave_0 [ 516.647247] protocol 88fb is buggy, dev hsr_slave_1 [ 516.652317] protocol 88fb is buggy, dev hsr_slave_1 [ 516.727194] protocol 88fb is buggy, dev hsr_slave_0 [ 516.732288] protocol 88fb is buggy, dev hsr_slave_1 [ 517.127199] protocol 88fb is buggy, dev hsr_slave_0 [ 517.127229] protocol 88fb is buggy, dev hsr_slave_1 [ 517.132278] protocol 88fb is buggy, dev hsr_slave_1 [ 520.807201] net_ratelimit: 13 callbacks suppressed [ 520.807208] protocol 88fb is buggy, dev hsr_slave_0 [ 520.807240] protocol 88fb is buggy, dev hsr_slave_1 [ 520.812196] protocol 88fb is buggy, dev hsr_slave_1 [ 520.893522] protocol 88fb is buggy, dev hsr_slave_0 [ 520.898650] protocol 88fb is buggy, dev hsr_slave_1 [ 521.287179] protocol 88fb is buggy, dev hsr_slave_0 [ 521.287209] protocol 88fb is buggy, dev hsr_slave_1 [ 521.292252] protocol 88fb is buggy, dev hsr_slave_1 [ 521.937190] protocol 88fb is buggy, dev hsr_slave_0 [ 521.942269] protocol 88fb is buggy, dev hsr_slave_1 [ 526.097209] net_ratelimit: 22 callbacks suppressed [ 526.097219] protocol 88fb is buggy, dev hsr_slave_0 [ 526.107288] protocol 88fb is buggy, dev hsr_slave_1 [ 527.047183] protocol 88fb is buggy, dev hsr_slave_0 [ 527.052293] protocol 88fb is buggy, dev hsr_slave_1 [ 527.057205] protocol 88fb is buggy, dev hsr_slave_0 [ 527.062364] protocol 88fb is buggy, dev hsr_slave_1 [ 527.127192] protocol 88fb is buggy, dev hsr_slave_0 [ 527.132294] protocol 88fb is buggy, dev hsr_slave_1 [ 527.527187] protocol 88fb is buggy, dev hsr_slave_0 [ 527.527234] protocol 88fb is buggy, dev hsr_slave_1 11:27:44 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:44 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) poll(&(0x7f0000000000)=[{r2, 0x4030}], 0x1, 0x7f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e23, @remote}}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:44 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0x28, 0x20000002) sync() r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xfffffffffffffffa) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r0, r1, r2) 11:27:44 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:44 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x3ae, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x22200, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x37}) sync() 11:27:45 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x200000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r1, &(0x7f0000000040)="181a2919d2c66a0c6bc119d2e51d0c6ee9915e814b50c3d42ac1297401368ce6c1ce57b4a3de9ffa2da3abead9d2597739ac19c5654531a9ab199275243cce478936698c1dff87b06c8d74491bb0eeffde3f441af2ac4a595698f6ef76baa801540ce72d044590a2ea4ba55e3b3a69715f1927e8212158a6f0159a9b282fe4b09a0d68374ff4", &(0x7f0000000100)=""/31}, 0x18) getsockopt$inet_int(r0, 0x10d, 0x5, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() 11:27:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x40) r1 = semget(0x2, 0x3, 0x1) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000140)=""/172) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x200, "6179c212ddd57bd2596cd866329596b81f1c4b08bd7a3b74bf723c6189afbd2f", 0x2, 0x1}) getrandom(&(0x7f0000000100)=""/40, 0xfffffffffffffe02, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x8, 0x1fc, 0x5, 0x4, 0x53d32388, 0x9}) sync() ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xe8, 0x100, 0x1ff, 0x4, 0x15, 0x9, 0x1, 0x0, 0xfffffffffffffffd, 0x800, 0xffff, 0x9}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x9, "26630cdbbd31c3e32dfe5e274b61e117ea05f129419cd441d994d891fb6f6848", 0x0, 0x1}) 11:27:46 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x4239, 0x101000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x9, 0x3f, 0x7f, 0x9}, 0x10) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ac03b90a9479a66fa7e7f72164d4f8e26875076ecaa820acef9132ebf987643e78d2436526ef90ee90e23d3b830ccff48079f52980a7f232f519ba34abf7cd1f9369c966f5a5527959e7f874b96d19918e3f116ca90f6a006c8452d88f80c6552cc7fa17aec0955015302083e2dace0b51969426db3747779b51e6c27103aae669230b13a6e8256812d8e2947d34b3aedf00473626666d627ef72cf2f4d2be8268553b235b10cb289403347d993daa247e1d8633dbc95a00be84afbae7003a489e2fda5ebb372cd85234cd7f22f6cdc50c3803235dd209a2c33d80ed3e2f0f00e3b70da6d693aff9dfaafca5f967fdb9e2757690629228", 0xf7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0xb823091, 0x8000, 0x6, 0xffffffffffffffc1, 0x11, 0x37, 0x80000001, 0x400, 0x2, 0xf2, 0x6, 0x9f1}) fadvise64(r0, 0x0, 0x5, 0x4) 11:27:47 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x468, 0x10000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sync() [ 531.207185] net_ratelimit: 11 callbacks suppressed [ 531.207193] protocol 88fb is buggy, dev hsr_slave_0 [ 531.207197] protocol 88fb is buggy, dev hsr_slave_0 [ 531.207282] protocol 88fb is buggy, dev hsr_slave_1 [ 531.212240] protocol 88fb is buggy, dev hsr_slave_1 [ 531.287209] protocol 88fb is buggy, dev hsr_slave_0 [ 531.292316] protocol 88fb is buggy, dev hsr_slave_1 [ 531.687190] protocol 88fb is buggy, dev hsr_slave_0 [ 531.687219] protocol 88fb is buggy, dev hsr_slave_1 [ 531.692263] protocol 88fb is buggy, dev hsr_slave_1 [ 532.327192] protocol 88fb is buggy, dev hsr_slave_0 11:27:49 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) clock_gettime(0x0, &(0x7f0000005240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/239, 0xef}], 0x1}, 0xe3}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1, &(0x7f0000000340)=""/4, 0x4}, 0x8}, {{&(0x7f0000000380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/75, 0x4b}], 0x6, &(0x7f0000000800)=""/17, 0x11}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000000880)=""/13, 0xd}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f00000009c0)=""/211, 0xd3}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/126, 0x7e}], 0x6, &(0x7f0000000c80)=""/203, 0xcb}, 0x713}, {{&(0x7f0000000d80)=@rc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/42, 0x2a}], 0x1, &(0x7f0000000e80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003500)=[{&(0x7f0000001f00)=""/78, 0x4e}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/65, 0x41}, {&(0x7f0000003000)=""/131, 0x83}, {&(0x7f00000030c0)=""/95, 0x5f}, {&(0x7f0000003140)=""/32, 0x20}, {&(0x7f0000003180)=""/169, 0xa9}, {&(0x7f0000003240)=""/143, 0x8f}, {&(0x7f0000003300)=""/229, 0xe5}, {&(0x7f0000003400)=""/194, 0xc2}], 0xa}, 0x1}, {{&(0x7f00000035c0)=@alg, 0x80, &(0x7f0000003740)=[{&(0x7f0000003640)=""/16, 0x10}, {&(0x7f0000003680)=""/142, 0x8e}], 0x2, &(0x7f0000003780)=""/204, 0xcc}, 0x3}, {{&(0x7f0000003880)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003900)=""/187, 0xbb}, {&(0x7f00000039c0)=""/254, 0xfe}, {&(0x7f0000003ac0)=""/224, 0xe0}, {&(0x7f0000003bc0)=""/88, 0x58}, {&(0x7f0000003c40)=""/251, 0xfb}], 0x5}, 0x8}, {{&(0x7f0000003dc0)=@l2, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/16, 0x10}, {&(0x7f0000004e80)=""/225, 0xe1}], 0x3, &(0x7f0000004fc0)=""/43, 0x2b}}], 0x9, 0x42, &(0x7f0000005280)={r0, r1+10000000}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000052c0)=@sack_info={0x0, 0x4c3, 0x4}, &(0x7f0000005300)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000005340)={r3, 0x0, 0x30}, 0xc) pselect6(0x40, &(0x7f0000005380)={0x101, 0x2, 0x9, 0x4, 0x5, 0x200, 0x1, 0x3}, &(0x7f00000053c0)={0x4205, 0x7c, 0x56, 0xfff, 0xf, 0xfffffffffffffffa, 0x7, 0x1}, &(0x7f0000005400)={0x0, 0x5, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x3f}, &(0x7f0000005440)={0x77359400}, &(0x7f00000054c0)={&(0x7f0000005480)={0x9}, 0x8}) sync() r4 = syz_open_dev$audion(&(0x7f0000005800)='/dev/audio#\x00', 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000005a80)={0x10001, 0x4, 0x4, 0x0, &(0x7f0000005980)=[{}, {}, {}, {}]}) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000005840)={0xa65f, {0xfffffffffffffffe, 0x1, 0x10000, 0x8, 0x5, 0x6}}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000005880)=""/191, &(0x7f0000005940)=0xbf) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000055c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000005780)={0x1f, 0x6, 0x4, 0x200000, &(0x7f0000005600)=[{}, {}, {}, {}, {}, {}]}) getpeername(r2, &(0x7f0000005500)=@nfc, &(0x7f0000005580)=0x80) [ 536.487216] net_ratelimit: 19 callbacks suppressed [ 536.487224] protocol 88fb is buggy, dev hsr_slave_0 [ 536.497319] protocol 88fb is buggy, dev hsr_slave_1 [ 537.447230] protocol 88fb is buggy, dev hsr_slave_0 [ 537.447279] protocol 88fb is buggy, dev hsr_slave_1 [ 537.452346] protocol 88fb is buggy, dev hsr_slave_1 [ 537.527234] protocol 88fb is buggy, dev hsr_slave_0 [ 537.532358] protocol 88fb is buggy, dev hsr_slave_1 [ 537.927190] protocol 88fb is buggy, dev hsr_slave_0 [ 537.927239] protocol 88fb is buggy, dev hsr_slave_1 [ 537.932363] protocol 88fb is buggy, dev hsr_slave_1 11:27:55 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:27:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 541.607211] net_ratelimit: 14 callbacks suppressed [ 541.607219] protocol 88fb is buggy, dev hsr_slave_0 [ 541.607249] protocol 88fb is buggy, dev hsr_slave_1 [ 541.612228] protocol 88fb is buggy, dev hsr_slave_1 [ 541.687221] protocol 88fb is buggy, dev hsr_slave_0 [ 541.692315] protocol 88fb is buggy, dev hsr_slave_1 [ 542.087190] protocol 88fb is buggy, dev hsr_slave_0 [ 542.087195] protocol 88fb is buggy, dev hsr_slave_0 [ 542.087240] protocol 88fb is buggy, dev hsr_slave_1 [ 542.092264] protocol 88fb is buggy, dev hsr_slave_1 [ 542.727210] protocol 88fb is buggy, dev hsr_slave_0 [ 546.887190] net_ratelimit: 20 callbacks suppressed [ 546.887198] protocol 88fb is buggy, dev hsr_slave_0 [ 546.897269] protocol 88fb is buggy, dev hsr_slave_1 [ 547.847185] protocol 88fb is buggy, dev hsr_slave_0 [ 547.847191] protocol 88fb is buggy, dev hsr_slave_0 [ 547.847235] protocol 88fb is buggy, dev hsr_slave_1 [ 547.852258] protocol 88fb is buggy, dev hsr_slave_1 [ 547.927189] protocol 88fb is buggy, dev hsr_slave_0 [ 547.932290] protocol 88fb is buggy, dev hsr_slave_1 [ 548.327190] protocol 88fb is buggy, dev hsr_slave_0 [ 548.327223] protocol 88fb is buggy, dev hsr_slave_1 [ 552.007227] net_ratelimit: 15 callbacks suppressed [ 552.007235] protocol 88fb is buggy, dev hsr_slave_0 [ 552.007261] protocol 88fb is buggy, dev hsr_slave_1 [ 552.012223] protocol 88fb is buggy, dev hsr_slave_1 [ 552.087188] protocol 88fb is buggy, dev hsr_slave_0 [ 552.092275] protocol 88fb is buggy, dev hsr_slave_1 [ 552.487181] protocol 88fb is buggy, dev hsr_slave_0 [ 552.487186] protocol 88fb is buggy, dev hsr_slave_0 [ 552.487230] protocol 88fb is buggy, dev hsr_slave_1 [ 552.492271] protocol 88fb is buggy, dev hsr_slave_1 [ 553.127203] protocol 88fb is buggy, dev hsr_slave_0 11:28:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:12 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x186, 0x2) sync() 11:28:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x101fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x100000000, 0x2, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x954, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001680)=ANY=[@ANYBLOB="66696c74657200f8ff00000000acf600000000000000000000000000000000008b00000059fc0ddbc16f0311f2ab2a774b4518a4e72437b131da5ecd9b3ded830ad757e1457f638abf9966185c77c8c861205003324bb77d6c9d39200568c3f15dae9e6db46e8a7d94d1bf42106456a91e631657c3f8795a3e4a91b9e7c9ef650e8c66084c90e3934f2bbb080fd300e34f6c91150bde48bca5f4d5c731d789cc0dabcf560339801b4a73282559f72cbefeaffe6f69ba00000000000000ef8d938297a24ff692bb0d4d6e4e2ba6162c6141804d278f6bf757c95266f04d24d5336ee13c479f700e955406c8830bd1f2564b2550737fd0dfd016f22887d94a1fc6e72e686ccb5e1eed40757f36bbd163c54aecef"], &(0x7f0000001500)=0xaf) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0xfffffffffffffffa) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x11, 0x2}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) connect$bt_rfcomm(r1, &(0x7f0000001480)={0x1f, {0x7, 0x9, 0xdd3, 0x5, 0x480000000000, 0x5}, 0x5}, 0xa) timer_settime(r5, 0x1, &(0x7f00000003c0)={{r6, r7+30000000}, {r8, r9+10000000}}, &(0x7f0000001400)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001a40)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000001b40)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000005700)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000056c0)={&(0x7f0000001b80)=@newtfilter={0x3b1c, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, r10, {0xf, 0x10}, {0x5, 0x7}, {0xf, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xc19}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x40, 0x2, [@TCA_BPF_OPS_LEN={0x8, 0x4, 0x6}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x171c, 0x2, [@TCA_MATCHALL_ACT={0xb0, 0x2, @m_sample={0xac, 0xb, {{0xc, 0x1, 'sample\x00'}, {0xc, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}]}, {0x8c, 0x6, "d3bd44448b111e9121e49520f149fda1568638cf737b23029f1e314d115fa54f1a6268be3ade0b5df4dee00690de6bfb657ea0fb5e9cb226a66b0a98717416c0579718d10af4d62c814423390374d42f86828ea2a03f02035c769694e5cff4d838ea9bef5bdf352d4198c8b33685dab6662553497a863e7509c82171104e75c8694419b330"}}}}, @TCA_MATCHALL_ACT={0x48, 0x2, @m_csum={0x44, 0x18, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x50e, 0x7fff, 0x8, 0x400}, 0x76}}}, {0x10, 0x6, "64282b4f13555ea7b6"}}}}, @TCA_MATCHALL_ACT={0x14fc, 0x2, @m_police={0x14f8, 0x11, {{0xc, 0x1, 'police\x00'}, {0x1440, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x228}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x18400aad, 0x9, 0x9, 0x9, 0x7, 0x8, 0x3, 0x346, 0x5, 0x1, 0xc3, 0xfffffffffffffffe, 0x78a, 0x7, 0x1, 0xfffffffffffff045, 0x7, 0x9, 0x5, 0x9, 0x6, 0x20, 0x10001, 0x1000, 0x1ff, 0x5, 0x0, 0xffff, 0xfd1e, 0x1000, 0x5, 0x3, 0x9d, 0x2, 0xaf8, 0x6, 0x0, 0x405, 0x10001, 0xf610, 0x0, 0x4, 0x381d4b9c, 0x5, 0x5, 0x7, 0xffffffffffffff81, 0x0, 0x5bd8, 0x6, 0x7, 0x5, 0x6, 0xe8e, 0x9, 0x6a8, 0x67d, 0xffffffff80000001, 0xfffffffffffffff7, 0x0, 0x8, 0xd0, 0x101, 0x20, 0x5, 0x2, 0x800, 0x0, 0x28000000, 0x2, 0x1000, 0x5, 0x100, 0xffffffffffffffe1, 0x7, 0x7f, 0x3, 0x3, 0x9000, 0x4, 0x100, 0x100000000, 0x20, 0x75, 0x7ff0, 0x3f, 0x145e, 0x4, 0x8, 0xfffffffffffffff7, 0x1, 0x32, 0x7fffffff, 0x80000000000, 0x5, 0x80, 0xfffffffeffffffff, 0x7, 0x6, 0x9, 0x400, 0x2, 0x8000, 0x9, 0x100000001, 0xffffffff80000001, 0x9, 0x7, 0x100000001, 0x3, 0x2, 0x100, 0x100000001, 0x2, 0xd8, 0x7, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff, 0x800, 0x400, 0x9, 0x3, 0x3, 0x6, 0x3, 0x3ff, 0x5, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x3, 0x1, 0x4, 0x80000000, 0x6, 0xd98, 0x9, 0x8, 0x10001, 0x4, 0x101, 0xfffffffffffff801, 0xfffffffffffff475, 0x6, 0x3, 0x81, 0x40, 0x4, 0x0, 0x1, 0xfffffffffffffffb, 0x0, 0x7fff, 0xfffffffffffffffc, 0x400, 0x187, 0x1ff, 0x4, 0x2, 0x80, 0x200000000, 0x6, 0x81, 0x93c, 0x2, 0x1a, 0xfffffffffffffff7, 0x2, 0x6, 0x3, 0x3, 0x7ff, 0x9, 0xe7c4, 0x2, 0x9, 0x5, 0x2, 0x400, 0x3, 0xfffffffffffff001, 0x4, 0xffffffff, 0x9, 0x4, 0x2, 0x7, 0x9, 0xff, 0x5, 0x3, 0x2, 0xe, 0xffffffff, 0x80000000, 0x400, 0x3, 0x4, 0x9, 0x1, 0xa19, 0x1, 0x9, 0x1, 0x8, 0x1, 0x100, 0x8, 0x0, 0x8, 0x3acd, 0x8, 0x2, 0x3ff, 0x1000, 0x8, 0x5, 0x10001, 0x1, 0x3, 0x81, 0x9, 0x1ff, 0x8, 0x29e21a1c, 0x2, 0xec, 0x81, 0x9, 0x6, 0x100, 0x7, 0x401, 0x6, 0xffffffffffff9765, 0xd5a, 0x1, 0x1, 0x3ff, 0x9, 0x76, 0x80, 0x401, 0x3, 0x3, 0x101, 0x0, 0x7fffffff, 0x1, 0x2, 0x8, 0x7, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xd6, 0x0, 0x7, 0x7, 0x8000, 0xfe9, 0xca0, 0x100000000, 0x7fff, 0x24, 0x3ff, 0xffff, 0x7ff, 0x9, 0x6, 0x1000, 0x253, 0x3, 0xaf8, 0x1, 0x3, 0x6, 0x642, 0xfff, 0x3ff, 0x8000, 0x8000, 0x2, 0x2, 0x6, 0x7fffffff, 0x7, 0x4, 0x5, 0xfff, 0x3, 0x8001, 0x7fff, 0x52, 0x3, 0x468c7ca1, 0xffffffff, 0x5, 0x9, 0x20, 0x8, 0x40, 0x80000001, 0x800, 0x1, 0x575, 0xfff, 0x3f, 0xffff, 0x7, 0x0, 0x1ff, 0xffffffffffffffc0, 0x6a, 0x1, 0x4, 0x80000001, 0x1ff, 0x1000, 0x4, 0x5, 0x17e5, 0x0, 0x1, 0x5, 0xa76, 0x101, 0x100000000, 0x8, 0x0, 0x0, 0x4, 0x200, 0x800, 0x6, 0x0, 0x8, 0x7f, 0xfffffffffffffffc, 0x7ff, 0x101, 0x0, 0x5, 0x800, 0x5259, 0xb9b, 0x9, 0x1, 0x0, 0x9, 0x0, 0x4, 0x4a5, 0x0, 0xfff, 0x40, 0x3f, 0x7, 0x2, 0xd9d, 0xfffffffffffeffff, 0x4, 0x3f, 0x7, 0x101, 0x7ff, 0x7, 0x9, 0x1, 0xd4e9, 0x4, 0x8f, 0x2, 0x6, 0x401, 0x100000001, 0x0, 0x6fca273b, 0x6, 0x7ff, 0x5, 0x5, 0x0, 0x5, 0x6, 0x3, 0xc61, 0x1f2, 0x50610551, 0x3, 0x1, 0x558, 0x1bb, 0x1, 0x3, 0xfffffffffffff4c8, 0x8, 0xdf8, 0x0, 0xff, 0x35b1, 0x8000, 0x1, 0x5, 0x8, 0x1, 0x6, 0x7, 0x5, 0x5, 0x1, 0x2, 0x2, 0x1, 0x9, 0x8, 0x5b3, 0x4, 0x4, 0xff, 0x2e6a, 0x400, 0x20, 0xffffffffffffffff, 0x53, 0x9, 0x7, 0x9, 0x2, 0x6, 0xffff, 0x3, 0x100000000, 0x5, 0x5, 0x8000000, 0x3, 0x7, 0x80000001, 0x7, 0x3, 0x1, 0x6, 0x1, 0x0, 0x3, 0x9, 0x8, 0x80, 0x5, 0x40, 0x9, 0x3, 0x2, 0x2a9d43e2, 0x0, 0x566f, 0x8, 0x6, 0x2, 0x9, 0x80000001, 0x5a, 0x7, 0x68, 0x7ff, 0xfffffffffffffff7, 0x8c, 0x0, 0x7, 0x7f, 0x2, 0x3, 0xffffffffffff29a3, 0x3, 0xffff, 0x5, 0x1, 0x2, 0x2, 0x0, 0x1, 0x8, 0xdf, 0xffffffffffffffff, 0x5, 0x20, 0x100000001, 0x3ff, 0x6, 0x7a7, 0x9, 0x6, 0x6, 0x5e8a, 0x2, 0xa6d, 0x2, 0xfffffffffffffb70, 0x3f, 0x8001, 0xcd, 0x7ff, 0x6, 0xb668, 0x7, 0x3, 0x7, 0x4e2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x101, 0x0, 0x3, 0x2, 0x100000001, 0x1ff, 0x10000, 0x3c5, 0x10001, 0x4, 0x7f, 0x2c7db078, 0x0, 0x3f, 0x0, 0x9, 0x100000000, 0x401, 0xfff, 0x401, 0xf9, 0x2, 0x3, 0x5, 0xffff, 0xaf, 0x8001, 0x3ff, 0x5, 0x101, 0x6, 0x0, 0x4, 0x200020000000000, 0xffffffff, 0x8, 0x4c, 0x6, 0x3f, 0x6, 0x8, 0x5, 0x5, 0x1, 0xff, 0x8001, 0x2, 0x8e09, 0xff, 0x7, 0x1, 0x5, 0x80000001, 0xfff, 0x100000001, 0x1, 0x3, 0x3d, 0x3, 0x0, 0x6, 0x2, 0x9, 0x100, 0x9, 0x9, 0x8, 0x4e25, 0x1, 0x9, 0x10001, 0x1, 0x9, 0x600000000, 0xfffffffffffff001, 0x649, 0x5, 0x9, 0x1, 0x80, 0x2, 0xffffffff7fffffff, 0x91, 0x100, 0x0, 0x3, 0x2, 0xff, 0x7fffffff, 0xf7, 0x9, 0x4, 0x1, 0x1, 0xff, 0x9, 0x1, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x4, 0x83e, 0xffffffff, 0x2fce80000, 0x9, 0x2, 0x8, 0xffffffffffff0001, 0x8, 0x8, 0x2, 0x9, 0x100000000, 0x8e, 0x0, 0xfffffffffffffeff, 0x9, 0x7f, 0x7ff, 0x3f, 0x1000, 0x8, 0x3ff, 0x9, 0x6, 0x101, 0x0, 0x1, 0xee5, 0x6ed9, 0x101, 0x7fffffff, 0x8001, 0x7, 0x7, 0x9, 0x100000001, 0x8235, 0x0, 0xfe27, 0xa50000000000000, 0x1, 0x2, 0x200, 0x3, 0x7, 0x1, 0x8001, 0x7, 0x0, 0x7, 0x6, 0xd42d, 0xf7, 0x2, 0xc1, 0x2, 0x8000, 0xe8, 0xa4e, 0x8, 0x8001, 0x3, 0x1, 0x4590, 0x401, 0x80000000, 0x44, 0x3, 0x58ef, 0x0, 0x7, 0x1a6000, 0x77, 0x1, 0xc096, 0x3, 0x6, 0x101, 0x124f, 0x28ef, 0x7fff, 0x4, 0x64, 0x8001, 0x1ff, 0xfffffffffffffffd, 0x101, 0x2, 0x8, 0xaa2d, 0x8, 0x29, 0x1, 0x3ff, 0x4, 0x2, 0x3, 0x4, 0x101, 0x1, 0x400, 0x9, 0x6, 0x2, 0x60, 0xa2e5, 0x4, 0x3, 0x7ff, 0xfffffffffffffffa, 0xfff, 0x9, 0x0, 0x9, 0x101, 0x4, 0x8001, 0x3, 0x0, 0xffffffffc76997ed, 0x0, 0x3, 0x4, 0xf23, 0xffffffffffffffff, 0x922d, 0x10000, 0x4, 0x5, 0x3, 0x10001, 0x8, 0x3, 0x3, 0x7, 0xffffffffffffffff, 0x401, 0x8000, 0x7f, 0x5, 0x60fa, 0xfffffffffffffffe, 0x3, 0x100000000, 0x8, 0x2, 0x10000, 0x4, 0x200, 0x10001, 0x3, 0x400]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x0, 0x44d, 0x9, 0x400, 0x20, 0x2, 0xc4e, 0x8, 0x2, 0x9, 0x0, 0x5, 0x200, 0x1, 0x5, 0x8, 0x2a, 0x4, 0x0, 0x1000, 0x3, 0x5de4, 0xffffffffffffffff, 0x8, 0x6, 0x3, 0x4, 0x1, 0x0, 0x67, 0x8, 0x3, 0x480000000000, 0x6, 0x1, 0x3, 0x1, 0x10001, 0x0, 0xc756, 0x1f, 0x800, 0xfffffffffffffc00, 0xc4, 0x5, 0x8, 0x7, 0x1, 0x6ee, 0x7, 0x0, 0x8, 0x2, 0x9, 0x8000, 0x4, 0x3, 0x0, 0xb013, 0x1, 0x77, 0x3, 0x17f, 0x2, 0x9, 0x5, 0x40, 0x1, 0x0, 0x7, 0x7, 0x8, 0x1, 0x9, 0x1000, 0x7, 0x1, 0x7, 0xfffffffffffffff8, 0x6, 0x80000000, 0xffffffff00000000, 0x9, 0x7, 0x2, 0x9, 0x7ff, 0x0, 0x800, 0x20, 0x3, 0x7, 0x3, 0x4, 0x2, 0x7, 0x2e7a5983, 0x6, 0x0, 0xfff, 0x7fa, 0x83, 0x3, 0x1, 0xdf, 0x9, 0x4, 0x34997a45, 0x7fffffff, 0x2, 0x9, 0x10000, 0x2, 0x4, 0xfff, 0xf28f, 0x7, 0x2, 0x20, 0x400, 0x7ff, 0x7, 0x100000000, 0xfffffffffffffff8, 0x6, 0x4010000, 0x100, 0xffffffff, 0x1, 0x10000, 0x2, 0x1f, 0x7, 0x7, 0x16ed1f30, 0x8, 0x40, 0x9, 0x6, 0x6, 0x8, 0x2, 0x9, 0x10000000000000, 0x0, 0xfffffffffffffffb, 0x6, 0x2, 0x696a, 0x0, 0x6, 0x100000000, 0x4, 0x8000, 0xfffffffffffffff7, 0x0, 0x9, 0x3bd84482, 0x2657cba2, 0x9, 0x100000000, 0x0, 0x5, 0x1, 0xfffffffffffffffc, 0x4, 0x101, 0x1, 0x81, 0x2, 0x0, 0x5, 0x400, 0xff, 0x6, 0x4, 0x0, 0xca, 0x100, 0x1, 0x10001, 0x2ad15e1d, 0x400, 0x1, 0x5, 0x8, 0xe6, 0x9, 0x80000000, 0x8000, 0x100000000, 0x3ff, 0x0, 0x5, 0x8d42, 0x100000001, 0x1, 0x3, 0x753eba61, 0x80000001, 0xffffffff, 0xc1c6, 0xe0, 0x2, 0xe0, 0x8, 0x7ff, 0x2, 0x9, 0x20, 0x7fffffff, 0x8, 0x1ff, 0x4, 0x1ff, 0x7, 0x3, 0x3, 0x0, 0x2, 0x2, 0xa6b, 0x6, 0x1, 0xffffffffffffff6b, 0x1, 0x2, 0x5, 0x6, 0x6, 0x0, 0x9, 0x4, 0x1f9c, 0x0, 0x1, 0x552, 0x4, 0x1, 0x1, 0x1, 0x100000001, 0x100, 0x40, 0x0, 0x2, 0xc8, 0x373, 0x100, 0xfffffffeffffffff, 0x20, 0x3, 0x6, 0x90000000000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x83f8}, @TCA_POLICE_RATE={0x404, 0x2, [0xab3, 0x7fffffff, 0xe6, 0x8f23, 0x0, 0x5, 0x5, 0x8, 0x4, 0x927e, 0x6, 0x9, 0x9, 0x9, 0x6, 0x2, 0x7, 0xfffffffffffffffd, 0x3f, 0x6, 0xb84, 0x7, 0x0, 0x3, 0x3, 0x9, 0x3, 0x9, 0x3, 0x1f, 0x3f, 0x5, 0x400, 0x1000, 0x10000, 0xcb, 0xffffffffffff4d23, 0xdc, 0xe7, 0xffffffffffffffc1, 0x9, 0x6, 0x3, 0x6, 0x1ff, 0x0, 0x2, 0x1, 0x6, 0xfffffffffffffffd, 0x4, 0x3, 0x57, 0x401, 0x5, 0xaa4, 0x204432da, 0x3, 0x9, 0xfffffffffffffbff, 0x3, 0xff, 0x5, 0x6, 0x5, 0x800, 0x7, 0x6, 0x9, 0x12d, 0x3, 0x3, 0x401, 0x3, 0xff, 0x10001, 0x101, 0x80000001, 0x100, 0x6, 0x81, 0x5, 0x7fff, 0x2, 0xffffffffffffffff, 0x69, 0x0, 0x7, 0x1000, 0x100000001, 0xffffffffc7e45f48, 0x9, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x6, 0x0, 0x1f, 0x2, 0x1000, 0x2, 0x0, 0x4, 0x8001, 0x0, 0x5, 0x0, 0x8, 0x9, 0x40, 0xffff, 0x8, 0x10001, 0x1000, 0x3ff, 0x1, 0x48, 0x8, 0x2, 0x1, 0x5, 0x90, 0x3, 0x7, 0x1000000, 0x9, 0x9, 0x0, 0x2, 0x5, 0xc6cc, 0x4, 0x8, 0x77, 0x0, 0xfd, 0xbe, 0x2, 0x8, 0x7, 0x6, 0x7, 0x0, 0x0, 0x1f, 0x100, 0x3, 0x5, 0xffc1, 0x80000000, 0x9, 0x7fff, 0x79, 0xffffffffffff8c0b, 0xc3, 0xffffffffffffff40, 0xffffffff00000001, 0x9, 0x81a, 0x1980000, 0x4, 0xbc07, 0x1, 0x37e8, 0x80000000, 0x1, 0x5, 0x4, 0x20, 0x1ff, 0xda9, 0x4, 0x4, 0x72, 0x9, 0x1, 0x4, 0x101, 0x20, 0x3, 0x10000, 0xd77, 0xffffffffffffff0d, 0xffffffff, 0x20, 0x9, 0x80, 0x800, 0x0, 0x1f, 0xbf, 0x7, 0x3, 0xfff, 0x8, 0xc594, 0x6b4, 0x2e00000000000000, 0x7fffffff, 0xffffffffffff8000, 0xda0, 0x7, 0x400, 0xec9, 0x6, 0x8000, 0xff, 0x1, 0x80, 0xec88, 0x6, 0x7, 0x9000000, 0x5, 0x9ad, 0xb6a, 0xf002, 0x5, 0x9, 0x7, 0x5, 0x0, 0x7, 0x9, 0x2, 0x80000000, 0xf4b45ec, 0x4, 0xfc2, 0xe, 0x2, 0x4, 0x6, 0x100000001, 0x7a, 0x80, 0x80000001, 0x8000, 0x7, 0x9, 0x4, 0xfffffffffffffffd, 0x7fffffff, 0x6, 0x16, 0x7ff, 0xac, 0x20, 0xdc49, 0x80000000, 0x2, 0x40, 0xba, 0x1472bb7e, 0x3500]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}]}, {0xa4, 0x6, "e6b8ff56dc50a58186b3731cbbc243c0edf633daa8b4837bb6adf5e50a41337d9f279bb3aae6dc2862e20f8dfd47683d8990875fbe0dea3a342a79a6f55bf962d19f42011b337a635019590e27dd73ade794dd88a00b80030e67316063afc4385a45ebe58cec8f0330a1d5b02332a2efa80b0e32801025ab0bcb43ce1aaffa5edfcae2b07c869bc3ddf66cc7c2192583cca6fffc5785c9028bcb5565c129"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0xa0, 0x2, @m_sample={0x9c, 0x14, {{0xc, 0x1, 'sample\x00'}, {0x24, 0x2, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x0, 0x9, 0x8000}}]}, {0x64, 0x6, "ae6dfcac569a3fa19334ad01d2c6c275d3123ba0d4135e00fc47f0634beb8593a5de57b446d8bdc6758bd05cb2b03ae19c740fefc734422691cbee7333cec62aa8345cd9470e886ceaa0d7179e3984429e28ebaf71bab077255e304a37"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x74, 0x2, @m_skbedit={0x70, 0x1a, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x58, 0x6, "f5538d0fc38685add916fef3741c2560422ad42791ff742e7d47eaa237fe4eba27bb8b81146dc85c46acdb5dd761cbdcd1daac639da0856a423d378f2eba250df2da5f95aabaea75508384218c6df7314c"}}}}]}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x2368, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}}, @TCA_CGROUP_EMATCHES={0x44, 0x3, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, @TCF_EM_META={0x3c, 0x6, {0xfffffffffffffffa, 0x4, 0xb7, 0x0, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x8, 0x2}, {0x2, 0x7ff, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR='8']}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x1}, {0x0, 0xe71, 0x2}}}]}}}]}, @TCA_CGROUP_ACT={0x1078, 0x1, @m_simple={0x1074, 0x2, {{0xc, 0x1, 'simple\x00'}, {0x5c, 0x2, [@TCA_DEF_DATA={0x14, 0x3, 'vmnet1vboxnet1\'\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x3, 0x4, 0x5}}, @TCA_DEF_DATA={0x18, 0x3, '/dev/loop-control\x00'}, @TCA_DEF_DATA={0x14, 0x3, '/dev/snapshot\x00'}]}, {0x1004, 0x6, "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"}}}}, @TCA_CGROUP_EMATCHES={0x64, 0x3, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, @TCF_EM_IPT={0x44, 0x1, {0x1, 0x9, 0x0, 0x0, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x7ebf}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x100}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x101}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_ACT={0xcc, 0x1, @m_skbmod={0xc8, 0x2, {{0xc, 0x1, 'skbmod\x00'}, {0xc, 0x2, [@TCA_SKBMOD_ETYPE={0x8, 0x5, 0x9}]}, {0xa8, 0x6, "8dc86e34f1b74d11dcf50e623ad743c3a311e6ab6848f448786d7f4680c241b2027093a142d5d7f7ebcf8dfca8bd68532dfb6dba238d5cf8f6a573ad59a8558d5e830920c905eb0924f0641903a0af4e9cc6345fa93c3412872d73678f1d87dd1e2630eeb68047edebc5fba6b37e44e55d58e2167075f1bd8e2460d9aa1d01b5fd08709447095eb9a374765c9cc043c16a66501cb8116325b4f1c3533da05ec3fef282"}}}}, @TCA_CGROUP_EMATCHES={0x120, 0x3, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, @TCF_EM_IPT={0x88, 0x7, {0x31fc, 0x9, 0x200, 0x0, [@TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x6c, 0x5, "9825b64658f102897fa160a43c31ccb725cf4eb6b942c5d8032bdf23b738b52c86df1e7687d4b1d97429f2f431333973ec8bf1c0f068ae0a21600c1b28102ace53c6c0b4c26803d16144a2fc24ab1f1121a0a63e01dff39aea87a07e8df5ba658da248ae610495f7"}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0xff, {0x80000001, 0x7, 0x3f, 0x0, {0xffffffffffffff7f, 0x7}}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_NBYTE={0x18, 0x100, {0x121, 0x2, 0x9, 0x0, {0xaa, 0x1, 0x2, 'X'}}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x7, {0x2, 0x3, 0x0, 0x0, {0x400, 0x100000000, 0xb3}}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x257, {0xcf3, 0x2, 0x4, 0x0, {0x5, 0x7, 0x2, "c2a65e5e0c1f94"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_ACT={0x1040, 0x1, @m_mirred={0x103c, 0x2, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x1, 0x4, 0x3, 0xfffffffffffffffe}, 0x4, r11}}}, {0x1004, 0x6, "a5eddba2cfc9fab2ea844f09b507d8729b5ac1bd742dd68d8fa97297d07ab46101eefa7a26df96567053526135113960be84ba7c383000d3adb061256a9eaf391f8cbc2bedb66902a62eeeb73f1231e4d177fb7a11e6dcfe6839802af4b6ea23c830e3b92b3c271bf3608b8e01839966330d730dba01b5f18cc57981e0769a28bed555eea464d3c8c5c63adac228b3340a652ae4088e27e941207122a36cefa3f72d9edb638b2fdfa9261f6305d8362f79043d1a0d639e203f870da9369b77dae4e9d74d158d678245ebf07702932ac9b39c141133d035e5c4c31151a1b1d77bda010deed66a02e3b0b6027d69ca9fe574adc222d3d84561e810b6936a1ab679d1b7759ac5926e13145b287b1c128d5367d6bb18482d1273761b6d869d4e70709852a119ae77b7552ef04eaec99d32d93150a4b4bcebb899824f770a9aea3ec040ddfa4150ea0a75fc9fa49259a4129cc5104dad939bc18a63b24a16c76ae085ab912cbee215b83e430a36a4d614c80cc46e6ee4981ed612a394de1883bce927087bbcd41150f8e051a39d101bf10ca7e77b2079d9d33bfcdc1cd8a47207adc36fe6d10c297923e555971f594723a757187c6623b56da29a5cd5edcbbaa86833bcdb56f6dcb677f61b7ae7c101ac57db9c304b6549e6665e2f23055cc3e3709486dd8115dc241bb1e3390ed6ecb74a8110959c9332acef389efbb83a054aa7ddee2f11e98de18f9efb2ab7358367e0791f301682ba5aed9408e5ab3d61ff69d1856299175c7063b124ee12025d632b690df2e101bdd884f9e14fbd580aeea7794a376a6a96f81fd78cc27bf26250bd04b238b0cf2822117a052483c350415bb789a1b31d768d4dac0eb2bbff1e9fdc7cdf6c4fa0ecb8a247e8b5a2071e8a75c9fabee895c42f754665f5f6132abd1ca8acc2f7f5051223a590b3c908aeca2b2b34a4a60d2f42d5e22bcbd418b6a4ec7f3b6a60e3f306778c1fd5c2140f32466f88fc35915fdc8996fae864ee4f530f9b412fe811f891a804bc95fbc7379cd415b0f11eefc91dae2b2469fec88577177af9b1c18aa3030e5cd1555cb242dc5b41aeaf70ff1f618c995ebd5ebe133c7920e22c4a1f4c2b02ce2608d3edd1fa41c462f67d2b0f21dd337ff95daed08bc81d6d9a74cce792552775353fb3b434df056a1be1b86cbfbc35afe4cc2722a9d31b260d593e42db5908e84356e50d19c98fbb27d37662963626d62d9fa0d5de95c28e45b9fc4b8901c3c77c39594e8e1074ce8185fe18a30ed13836646ca45063a7199e73a5807dc9f795ddff90fe697e5d85a70448df10872045354623adc166f03c81513aa9f1cc399476e19c8297299711672942f8ab45ba9756799828d73e0addf7e1ceb035ee2c2bd800e8aa387b1717fd04fa61f072faa85aa516b94444bb91d16bf7c304198b48fd0d70cf323b8760cbbeeb03c7e963f4f1aea4d5ea3473be14d2266dc1fbe96f4b8919677c6f36fc392326d6c3221d480dcad59928d6def5ae5bc712757f0c568556209140204ffaefb050f103433961830c2c6afeb5ef9b06ae13645bf75a30681ed172ca86c24b38f6e61fd27a55329f78d94ced92e8bfd1a98dd0502b3e0b816a00a03faf1b24275c156cae3a25b2da7e96bd7af71e67b08342d79d9def21f68e6f5a4cc9aede8409099da05555b911d062e0bb6d309635772c6bf18a8c44c9f897650878f091ef9ec8c8f79ddaec5076ff3c5f140903600815fb9bf32e70395e98239ea139c9c68ca5fd257b542121eb2ba6c7e027da0ff3090c859603ad726254e1e46f785f37df9a3999e645561c16c414bbb176f2c0aeb1f27b530938b606bed61c59bc70f3a63102f758f6d1d33ad86d7618b065e44a1bb87ec8dfb344d501716e3e86d0149e24e4c0a1a475554ddb97a9bb1a01bc7a5354ff5f148ebd354f08c540649f0c06cd75f0f556188f26320eecea68ef9658431222a0a05d058c49d48eb2f5de3cfdb9afad83ab38682f3b8c695c1db698f444a7c2d6b05bf18d32cb9c80623a4868ef0293d24cd4ed1eb1182e68f0bb37c24ce4f7a83d9810f7dd7baa4a295869acd9c3a11761b9e369ce75faca06354aebe951c9ba655725aac58e4cd3e28a895f21b9096c2c64d5a603e98646bad73c6b0d23c61c113221b2e994242566cede57d31a93a5dc38f496101547d4abf9b172888c06d27bbc38b8985c3d52c2de1b03a75c3736ea5fb14f2f95152637b351c25667f12383ced1bce510e88e2fae69deac0b2b797039585b8e45b52ad0583b0c6129fe4ce9a282c51c0dd2301be5bfa87d1a3d6254063d620b393d39fe787132748f71d964a1a1a88dae7d22e7a112bc2e063540e9ad27db2672aa6da8a43a040f2e2fbada308e89c17cacb8570d66e9e647eafb3733671ef831818c1b68e85ccd4bfaed03b4f3bf907b9ef1b329b21ee21e5e4cdbdc11e943cb0d9209fa02f67d29eee023e224e3090d2515ef2e916058988bef6d3fd5bc6840866b3b930dcb36bf56f98d22f344014fb335243ee14609ad781cd622028393a50254bb9c450bc3c4a420e9a5308bfb198d38669b98793b7f29e1becc3238f4f770465523e731fe425066a724bd4a72cd364eeffd3ff7c07ce34545a4bafc62adf110683ea273eb32a22e26e29cac3c72b52e890837d646fa1044a306b847d9d8bf4922dc94719af86d469a0a0cfb382792f9a9f21fa3356be767ab37dc7a1504c62e88cbec2d75adcf14f32d82294c94b1313dbc425fe8d0d0d32f2f7d69206a37c6ba1387b93ee5a7ff8af569b627be72e52b286fb6d2be40500692db25ce7d6607e04981f53005bfffaae1695bbed27d037146f8bba62bac99188b125f6f726943cb8823d5081a6e3b4a5ecd088805c0e8a583fcfdcec992a3cd7b41a45d2fb7a3f15c012d2b0156b5b5e619dffe3df02bad24481fce64db05dacd0eff01f5e3946db18782ca043a8e38e476f7c641cb52d1de8309ea07af7cca7dcac133f914f1262c694c1a8698f4776756a49186d257df4796758d7fd77e661b78acc1844760283b7ac0624ccd8c00dcbe50a3172a82273edf3bced22e57a64c5a3b914e4ecaadfbb4760b268e6b367cf3c18bfe93f6ddf2aa9939a0263f4d4b89116f02be818978c9a389e71dba75b2f49a77f39b53ac7abc05d37b48fb05c85875ef64f8705e9d5ae3464398a4f2a83b69d44b9f4da9f206affc6545a8acd2bc8fce683f25a7ac4a07ead5e587caa715d3dc1c2bc1503172091df316a66fb27dc6390991dc518ee0c948c9b79558c03bd120fb206bcda37be44c8a4d3192c7d05daa0ccff926af1bc549bd45fee8feb0170c260bd3c3ff11df1a56f3a7ce0da0df374cad06e6deaab9c841003c9fbec2cc10e62e3930077373fa93a36f177aeae94a93db8ef325525939329fc12397a673c64fbcaefcc0b4b53f8c2d8c583214b348135d80a60f6fdd7e1e38d67c6497cc09c89c3ec8ecf274f2ee6cd40ff179566e7c0efc347f6595cbdcce4d22eaf8c58325304889c14f0f9e992bc0c02ef9ce73373cbe2f41eb56fd40c2e30512c3909c825ea2637e408f4e2eab43dcce22506d9b7a271996207c5ccb7a38d62ffc0924809a7ce2e90b33d7baa814b64811363e13e2e5d4d8eab0efc4f3a19cd968a484acefbd04c045b2878919bd2833e6094f870301b54e99ace90b89f813fb228e30281041401e6ac1f0f6565d8afa5e208a7669d65be6d51afa88913e069b1529e4f835538ae2db79835ae5ceb8e0631ffbc88a1f9631359f74504859553059e9273abf88b33b4420be1538798e3296a769a9e42a5f83427eba7a1a6570cf2adaf514662e5f291859e52d9a03534725cac61db9c26a31390cfb8be2e43b66950adc41d4ee43cbf4f314a35a35689b97ba4acb8559830481b25b6b252b9c7e7f9de59eb964fc0e7db9292c9869305f4d55deeb4c0b9d17f54bb6dd99e1bfd090ad4f01915819c42f591c820bc88460406b0ce30224f5ab8d951af4741ec6aae28829d9678f5f91ddbe2c37bff969f44e58097c1c4e5a5fa48cf61f2e0c65639dba55efd4acf4bbfd96122fb436cacf8bf1f76f4eb7ed8a265596d57d21059fcd3a3db538ba07cef0f20e112f01f084614f3376d586e16bab24423af03d8ef3b2831a1c3357c311168129c282db20268e04f6f634e537cf018ede031420783f49a3ce747da72971635dd4ae22e87311ae6227a31a4c0d0ae2e09be66a3ac1151335b1f456e9cadea5339f9efbfa5e2650e09eb7cfc81395252e26b4647ecc0e0e5d090679821938bac13e89f87e5eb032c7b1421f60746becfbd7610215cdc72c561d7b2914f88f8be83a22b2a9d23926ff2a5dfdc6d87f5afb35ebd02db27c25c4913c2c8be545ba2c2f46b5344cc07856c0669796d04ae7dbffef1bc50b2d85ebdb671f80cd9beef2baa1620adb88b40b55d016ee4314385a628c678b65c7d9af7192ec31a1f9bdfd0f3fe9336916d50c4e1f9b0d93f27edfb701b3ccda5928e6fb2233d947271d33ad5cf8187174fd010a1e1ee9a55dbdff8db2ba96d642b5be2d06387404a290f18434619e1bd760d41a374bd98eff8b5ee666ec2884883a935b5cf6a52fe884663b80b4221a24340ffe3b14ec1b007d1984e8f7502ab810771a5e40830458b6e3435f2ef2b062b67807ee31d9055cb6743b59ee684d898b28db18717f898cc5d2287265565cf291f274d63d9446319c87731d06ed1068440340fe4b4091cd736f9e902038c84936708f1696af9067f71698547152b3cc5e5ef47aca93a54d04110898584b24588264d62772bc97c2e7a4d0548322db6b35030ce62830b2726e54dd6e54eceba533e59373b6e2dc2f8ed8f2845eb0de4c9fffe5b5affa9e70b0aa1776fa1dc029b2326318718e38ebb31452db695e7c0e2f52f0dfca12a5a3f3cf2e41e985656133ac2e7cbe26ff2af727c70256663ee8129d8952f253a77ff1996f1567ddace5d86d0930e3d810da0dc7a02bbe4316cda84f2b3293d7fe3181a6db07c31877b9bd066e4e43785205e694e7577fa732fa0684ec84955a4a69b98b225e41617afcecb2cbf6657e8a6c6d60b992ad266b6f2843e7cbbf0872eb653b266e1764136148e3bb10c65fd6b7fb9a23030eec47d7a740770999afe74a28359f90d3d003e6930fa113da3eff9248dc730bad251251afa0dfff3c6a4b23aa21c782fe565c026a5f6109ad00b00c6ea33fad9b07691169c422bfff9c28975bbd1ea8b9ab7157a25f657d4c7f45864caf99323b054a45148d9982983e2a27de6eb5b5e644e6301a842207ce0d26ddfe565c96cc4e4c3f11a53f1bad601fbd280767b135bf7d14f460bd245f8545255fa89b22e14236d5ccd4903d092aff2e0dba2499442fb813ceb36d4a1b3935bb310e59969d9a5a2c77ea0da6c2481ae2f76ac948f69a7e92ce20bc375d245ad6c79ff10f86c5eab48f470fc19b94670ed2a8e06db5c74b9f7e267ffbb8da08ef05ea241ebf421d23d86341fb93cab78d9a3ff951f6bf4ffd50ae2ea8e29f0c9ebf648e8ef9205a8e0e6f27129263cbc465714fd8610918a44424761d93839ce8aa1e3fcd700fbea105ab5ead493fcd247b0d3460e56451a081f9dbb86e8f031faef41290fa6c77cfb596d92f11f2cc4a975447f27d605ecdaaebb50c3e300011ccaec238d8c2af1c34266b4b3880809431dbc4b183b7f37f24a418f5fd8a90ae951a8cc561140b1c13da166c1ffdf5f6d0761f953fa26be8072fed01cb4215b24260968df7c03ee765bf92385cc0dc"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffffffffffc}]}, 0x3b1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:12 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:12 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x105000, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$rose(0xffffffffffffff9c, &(0x7f00000000c0)=@short={0xb, @remote, @remote, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x492800, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x4006}, {r1, 0x525}, {r2, 0x1004}, {r3, 0x804e}, {r4, 0x10}], 0x5, 0x7f) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x212800, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x9, 0x4) 11:28:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:13 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xee, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x440, "675e12677b4b53f64de1ee1512d33ca3765c8bbb1b127d19bfe95277ac76be8d", 0x3, 0x1}) sync() 11:28:14 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0xfffffffffffffcd8, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x2000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x890e, @ipv4={[], [], @local}, 0x5c}}, 0x0, 0xffffffff, 0x0, "29f8c97f2f7edfb1a4eebcf34904e7a3dcc4090be7c9ed90f8e8cd42e5718a1feab4487dc64736e3410295f0c21309a5cadd782232f85baf81d2e8c1207083a310de7110dbe12fd7627f8d53d873d14f"}, 0xd8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x2, 0x2, 0x8, 0x0, 0x8000, 0x1, 0x1000, 0x400, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x7}, &(0x7f00000002c0)=0x8) [ 557.287183] net_ratelimit: 21 callbacks suppressed [ 557.287191] protocol 88fb is buggy, dev hsr_slave_0 [ 557.297265] protocol 88fb is buggy, dev hsr_slave_1 [ 558.247204] protocol 88fb is buggy, dev hsr_slave_0 [ 558.247233] protocol 88fb is buggy, dev hsr_slave_1 [ 558.252397] protocol 88fb is buggy, dev hsr_slave_1 [ 558.327195] protocol 88fb is buggy, dev hsr_slave_0 [ 558.332318] protocol 88fb is buggy, dev hsr_slave_1 11:28:15 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/90) [ 558.727186] protocol 88fb is buggy, dev hsr_slave_0 [ 558.727193] protocol 88fb is buggy, dev hsr_slave_0 [ 558.727235] protocol 88fb is buggy, dev hsr_slave_1 11:28:16 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffff80000000, 0x400180) sendto$llc(r0, &(0x7f0000000100)="4f572320798e709e3194503aa5f008927dd57b5e285615bf419fe5c3bb944cc9bfeb5b8dac92296165d811361b109452e304b7d95c1fc4435f9d1fc4b8380c2867a5a06f0488e11dee8867a45b65491583254f22ea9f877911fab58bc94d03288209031e0c86e5969be4c96d5dee53c0673babad33a0b6e773e5848974c9d836", 0x80, 0x4000000, &(0x7f00000001c0)={0x1a, 0x339, 0x7, 0x1, 0x9, 0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x1f, 0x5, 0x8001, 0x2}}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) [ 562.407207] net_ratelimit: 14 callbacks suppressed [ 562.407214] protocol 88fb is buggy, dev hsr_slave_0 [ 562.407237] protocol 88fb is buggy, dev hsr_slave_1 [ 562.412215] protocol 88fb is buggy, dev hsr_slave_1 [ 562.488832] protocol 88fb is buggy, dev hsr_slave_0 [ 562.493956] protocol 88fb is buggy, dev hsr_slave_1 [ 562.887178] protocol 88fb is buggy, dev hsr_slave_0 [ 562.887204] protocol 88fb is buggy, dev hsr_slave_1 [ 562.892254] protocol 88fb is buggy, dev hsr_slave_1 [ 563.527190] protocol 88fb is buggy, dev hsr_slave_0 [ 563.532295] protocol 88fb is buggy, dev hsr_slave_1 [ 567.687200] net_ratelimit: 20 callbacks suppressed [ 567.687208] protocol 88fb is buggy, dev hsr_slave_0 [ 567.697270] protocol 88fb is buggy, dev hsr_slave_1 11:28:24 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0x42, 0x5, 0x1, 0x0, 0x0, 0x2}) sync() r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x40041) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0xd000, 0x7ff, 0x3, 0x60000, 0x0, [{0x28a, 0x38dc, 0xf4b, [], 0x7}, {0x9, 0x6, 0x100000001, [], 0x7}, {0x38feee49, 0x0, 0x20, [], 0x7}, {0x9, 0x5, 0xd0b1000000, [], 0x80}, {0x5ccab20f, 0x4, 0x7fffffff, [], 0xde}, {0x7ff, 0x3, 0x9, [], 0x1}, {0x9, 0x7f, 0x2, [], 0x8000}, {0x83e9, 0xa4, 0x40, [], 0xd1}, {0x800, 0x0, 0x3, [], 0x10000}, {0x0, 0x3a63, 0x6, [], 0xbc08}, {0x4, 0x6, 0x4, [], 0x1}, {0x53, 0x1ff, 0x7f, [], 0x400080000000}, {0x5, 0x5, 0x7ff, [], 0x2000000000000000}, {0x3, 0x7ff, 0x7, [], 0xffff}, {0x7, 0x1f, 0x8, [], 0x1ff}, {0x0, 0x9, 0x1, [], 0x1}, {0x20, 0x80, 0x0, [], 0x1}, {0x9, 0x8000, 0x7}, {0x32d, 0xffff, 0xbef1, [], 0xd81a}, {0xffffffffffffffe0, 0x81, 0x5, [], 0x101}, {0x3, 0x100000001, 0x7, [], 0x9}, {0x3, 0x40, 0xe, [], 0x7ff}, {0x8e4, 0x0, 0x3, [], 0x81}, {0x3, 0x401, 0x2, [], 0x3}]}}) 11:28:24 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:24 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1cd038241e03fcffcd7940e72bef3625066f0123d18c563284700784c1bb240c20f6c9bf9f10424d2c3cf8e1f802746856da2c554e84e561fd530bde56aab46e108415260a5ff51790b10d6d89ebf2768a54aa339331c18e35c41a7c952f184ce98def38718860b8ecc85c44466317922522eb6cb4c24570d36cad7c785863"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:24 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 568.647197] protocol 88fb is buggy, dev hsr_slave_0 [ 568.647658] protocol 88fb is buggy, dev hsr_slave_0 [ 568.652284] protocol 88fb is buggy, dev hsr_slave_1 [ 568.658777] protocol 88fb is buggy, dev hsr_slave_1 [ 568.727199] protocol 88fb is buggy, dev hsr_slave_0 [ 568.732296] protocol 88fb is buggy, dev hsr_slave_1 [ 569.127194] protocol 88fb is buggy, dev hsr_slave_0 [ 569.127225] protocol 88fb is buggy, dev hsr_slave_1 [ 572.807187] net_ratelimit: 15 callbacks suppressed [ 572.807195] protocol 88fb is buggy, dev hsr_slave_0 [ 572.807202] protocol 88fb is buggy, dev hsr_slave_0 [ 572.807248] protocol 88fb is buggy, dev hsr_slave_1 [ 572.812202] protocol 88fb is buggy, dev hsr_slave_1 [ 572.887193] protocol 88fb is buggy, dev hsr_slave_0 [ 572.892313] protocol 88fb is buggy, dev hsr_slave_1 [ 573.287185] protocol 88fb is buggy, dev hsr_slave_0 [ 573.287268] protocol 88fb is buggy, dev hsr_slave_0 [ 573.292268] protocol 88fb is buggy, dev hsr_slave_1 [ 573.297288] protocol 88fb is buggy, dev hsr_slave_1 [ 578.087192] net_ratelimit: 22 callbacks suppressed [ 578.087199] protocol 88fb is buggy, dev hsr_slave_0 [ 578.097228] protocol 88fb is buggy, dev hsr_slave_1 [ 579.047201] protocol 88fb is buggy, dev hsr_slave_0 [ 579.047206] protocol 88fb is buggy, dev hsr_slave_0 [ 579.047251] protocol 88fb is buggy, dev hsr_slave_1 [ 579.052273] protocol 88fb is buggy, dev hsr_slave_1 [ 579.127236] protocol 88fb is buggy, dev hsr_slave_0 [ 579.132334] protocol 88fb is buggy, dev hsr_slave_1 [ 579.527201] protocol 88fb is buggy, dev hsr_slave_0 [ 579.527232] protocol 88fb is buggy, dev hsr_slave_1 11:28:39 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:39 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x81) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0xfffffffffffff800, 0x5, 0x1}, 0x10) write$smack_current(r2, &(0x7f0000000080)='/dev/swradio#\x00', 0xe) 11:28:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:39 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:28:39 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000526bd7000fcdbdf250500000050000300140002007465616d5f736c6176655f310000000008000500ac1414aa1400020069703665727370616e30000000000000080007004e200000140002007465616d5f736c6176655f30000000008ed82479d54454b3271df0e283100dc73ffeb1b8b9d8371fd30ea67b2d7b47889e165f4860e81a93151b235046bb9fd6d08a22aaa5eb5e4d2e7f9b32835f7d971e461755e9dd8b082011ae7b0a8617a92869f515125600b4c35f698fd7e8a5bbcfe60f1d1239fa5c27d8c0bf8b4fdde33b87d0bc7d8b8288041664e257c2"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xc010) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000003) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 583.207200] net_ratelimit: 15 callbacks suppressed [ 583.207209] protocol 88fb is buggy, dev hsr_slave_0 [ 583.207233] protocol 88fb is buggy, dev hsr_slave_1 [ 583.212198] protocol 88fb is buggy, dev hsr_slave_1 [ 583.287195] protocol 88fb is buggy, dev hsr_slave_0 [ 583.292285] protocol 88fb is buggy, dev hsr_slave_1 11:28:40 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0x28, 0x0) sync() 11:28:40 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x80) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x7, 0x0, 0xf, 0x4000000000000000, 0x2d, "031ec95a3ba348f8402856b32cdb6a87cd07b5781221243f6d59c762dffad1208cd32b2280a6b0a25c41f5795c"}, 0x37, 0x3) [ 583.687190] protocol 88fb is buggy, dev hsr_slave_0 [ 583.687218] protocol 88fb is buggy, dev hsr_slave_1 [ 583.692302] protocol 88fb is buggy, dev hsr_slave_1 11:28:40 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) pipe2$9p(&(0x7f0000000140), 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@generic={0x3, 0x101, 0x6}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r2 = dup(r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000280)={0x6dd, "d540f06f9e47d361e65d81f589ffce054816eb81cbf7ef4ff8f9c265de93590a", 0x3, 0x1}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x720, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100000000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) sync() [ 584.327192] protocol 88fb is buggy, dev hsr_slave_0 [ 584.332337] protocol 88fb is buggy, dev hsr_slave_1 11:28:41 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x2b4, 0xffffffffffffffff) sync() 11:28:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000180)={0x5, 0x3, @raw_data=[0x8, 0x1, 0xa000000000, 0x1, 0xeb9a, 0x2e03, 0x8, 0x8, 0x3f, 0x1, 0x6, 0x1, 0x1, 0xd2, 0x8, 0xb562712]}) pipe(&(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'vxcan1\x00', 0x2}, 0x18) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0xffffffff00000001}}, 0x18) 11:28:42 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0xd4, @rand_addr="a724c9de1ae0ba96601a2039e1002659", 0x4}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x6b68f2b7000000}, &(0x7f00000001c0)=0x8) [ 588.487226] net_ratelimit: 19 callbacks suppressed [ 588.487234] protocol 88fb is buggy, dev hsr_slave_0 [ 588.497323] protocol 88fb is buggy, dev hsr_slave_1 [ 589.447209] protocol 88fb is buggy, dev hsr_slave_0 [ 589.447214] protocol 88fb is buggy, dev hsr_slave_0 [ 589.447261] protocol 88fb is buggy, dev hsr_slave_1 [ 589.452290] protocol 88fb is buggy, dev hsr_slave_1 [ 589.527214] protocol 88fb is buggy, dev hsr_slave_0 [ 589.532308] protocol 88fb is buggy, dev hsr_slave_1 [ 589.927188] protocol 88fb is buggy, dev hsr_slave_0 [ 589.927218] protocol 88fb is buggy, dev hsr_slave_1 [ 593.607207] net_ratelimit: 14 callbacks suppressed [ 593.607215] protocol 88fb is buggy, dev hsr_slave_0 [ 593.617200] protocol 88fb is buggy, dev hsr_slave_0 [ 593.617247] protocol 88fb is buggy, dev hsr_slave_1 [ 593.622268] protocol 88fb is buggy, dev hsr_slave_1 [ 593.687184] protocol 88fb is buggy, dev hsr_slave_0 [ 593.692269] protocol 88fb is buggy, dev hsr_slave_1 [ 594.087191] protocol 88fb is buggy, dev hsr_slave_0 [ 594.087220] protocol 88fb is buggy, dev hsr_slave_1 [ 594.092256] protocol 88fb is buggy, dev hsr_slave_1 [ 594.727192] protocol 88fb is buggy, dev hsr_slave_0 11:28:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 598.887203] net_ratelimit: 22 callbacks suppressed [ 598.887213] protocol 88fb is buggy, dev hsr_slave_0 [ 598.897280] protocol 88fb is buggy, dev hsr_slave_1 [ 599.847202] protocol 88fb is buggy, dev hsr_slave_0 [ 599.847207] protocol 88fb is buggy, dev hsr_slave_0 [ 599.847252] protocol 88fb is buggy, dev hsr_slave_1 [ 599.852276] protocol 88fb is buggy, dev hsr_slave_1 [ 599.927177] protocol 88fb is buggy, dev hsr_slave_0 [ 599.932260] protocol 88fb is buggy, dev hsr_slave_1 [ 600.327177] protocol 88fb is buggy, dev hsr_slave_0 [ 600.327208] protocol 88fb is buggy, dev hsr_slave_1 [ 604.007214] net_ratelimit: 15 callbacks suppressed [ 604.007221] protocol 88fb is buggy, dev hsr_slave_0 [ 604.017172] protocol 88fb is buggy, dev hsr_slave_0 [ 604.017219] protocol 88fb is buggy, dev hsr_slave_1 [ 604.022231] protocol 88fb is buggy, dev hsr_slave_1 [ 604.087206] protocol 88fb is buggy, dev hsr_slave_0 [ 604.092277] protocol 88fb is buggy, dev hsr_slave_1 [ 604.487185] protocol 88fb is buggy, dev hsr_slave_0 [ 604.487190] protocol 88fb is buggy, dev hsr_slave_0 [ 604.487234] protocol 88fb is buggy, dev hsr_slave_1 [ 604.492271] protocol 88fb is buggy, dev hsr_slave_1 11:29:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:04 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x7fff, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xd9, 0x3, 0x3, "9cbe01c8a5b79edda9454e725a46285e738d7e606ee58ca15e619f53fa573d4c", 0x56595559}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:04 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000040)="6b6a7a8bb748913cac1ea4415a36c3a1b6692ff14cca2313bf83edc45ff15c5aef6a50a253e32db777ba04a5a5c96e6e5f0fd56f05a045c90589c995021d1fb4e88a73f101d79b749bb029c0cc8fb3eaea34e824ca893b53931b268524b89721d86042ce3f35c0248eb86a64ba0b8b4bc4acf4e39f01a6ab772a") sync() 11:29:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:04 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000140)=0x10) sync() fstat(r0, &(0x7f00000001c0)) 11:29:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/audio\x00', 0x20002, 0x0) recvfrom$x25(r0, &(0x7f00000001c0)=""/151, 0xc, 0x40, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000780)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000006c0)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000040)=0x4}) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="5825067242f9abb963d8e7943131974644193f138a3424526bde1d964e8635fbe79e1baa905d53b5e7571b03136839af1e8df3e973c32274465812d9c9738538bea8adb4d707f6696016c10379a47341e93c9e9c418460d13be78bd1eabdff686c82db87b7bbc5c5046f80b520029739e7f7f044db5760e4c0e6930a9950a7880795bd2f9323939674ed347a4d6016ec47ccdf9a1c964daebba5f44f762efd8a277842288b10ef172a17cc4e1ba7b0663ceb41197de484cd4f3aa6983e1bba", 0xbf}, {&(0x7f0000000340)="61d6637307ff53be29c7ce25f64bb2f62478721a33d3f1e096504b31451c4091ebc24e8e418be7028c8114bbceeeb6592a025052257acb85d078aac72422b2da1cd7141690e7ab020f9b6922608d1127e7f2206cc6940b95d8d47fd9f4b012ace48d8a826570630803ae9f7968a5db5f709616fad7de6d30e957af320c7a09545094a0dcf213c1107c26994c614998af0507a3425798bd4344797a33a918e6b3ab0dfb5159d0d7db2c55d67486946a89a1906f412eb7c7db0af450d12b570577abdb2e0f3f84af4922e69eb5762dadbf2ddf07f46661d6a9ad590905cb7aa752582a5fc98a304dbd4ba0c6a01d328dba7a1d", 0xf2}, {&(0x7f0000000440)="ff356c7e290c576671cd27e9ee61cb373dba7f1e8f6c306644417e36f78ab41922a09d591dd20aa2b4f38b6cf24e2dcda2bd6c17604f8cc669e040eb90777ba161ef5118a8f578db139cdbde05562782d4b6297b3423f71014de458a3198d405119d5c1fb7a31145f7d035ab46a65adc6924", 0x72}, {&(0x7f00000004c0)="50e2498cbbe6a6", 0x7}], 0x4, &(0x7f0000000540)="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", 0xfa, 0x80}, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/mixer\x00', 0x10401, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000009c0)=""/186) fcntl$getflags(r1, 0x40b) [ 609.287197] net_ratelimit: 19 callbacks suppressed [ 609.287206] protocol 88fb is buggy, dev hsr_slave_0 [ 609.297306] protocol 88fb is buggy, dev hsr_slave_1 11:29:06 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = getpgid(0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup2(0xffffffffffffffff, r2) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1aa00, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r3, &(0x7f0000000080)={r4, r5, 0x100}) [ 610.247196] protocol 88fb is buggy, dev hsr_slave_0 [ 610.247201] protocol 88fb is buggy, dev hsr_slave_0 [ 610.247244] protocol 88fb is buggy, dev hsr_slave_1 [ 610.252319] protocol 88fb is buggy, dev hsr_slave_1 [ 610.337202] protocol 88fb is buggy, dev hsr_slave_0 [ 610.342327] protocol 88fb is buggy, dev hsr_slave_1 11:29:07 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6\x12rspan0\x00'}}) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = msgget$private(0x0, 0x8) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/83) socket$nl_netfilter(0x10, 0x3, 0xc) [ 610.727182] protocol 88fb is buggy, dev hsr_slave_0 [ 610.727213] protocol 88fb is buggy, dev hsr_slave_1 11:29:08 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x9, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x100) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) sync() 11:29:09 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0x28, 0x2) sync() [ 614.407201] net_ratelimit: 13 callbacks suppressed [ 614.407209] protocol 88fb is buggy, dev hsr_slave_0 [ 614.407231] protocol 88fb is buggy, dev hsr_slave_1 [ 614.412202] protocol 88fb is buggy, dev hsr_slave_1 [ 614.487184] protocol 88fb is buggy, dev hsr_slave_0 [ 614.492275] protocol 88fb is buggy, dev hsr_slave_1 [ 614.887193] protocol 88fb is buggy, dev hsr_slave_0 [ 614.887231] protocol 88fb is buggy, dev hsr_slave_0 [ 614.892279] protocol 88fb is buggy, dev hsr_slave_1 [ 614.897290] protocol 88fb is buggy, dev hsr_slave_1 [ 615.527187] protocol 88fb is buggy, dev hsr_slave_0 11:29:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:13 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 619.687188] net_ratelimit: 22 callbacks suppressed [ 619.687198] protocol 88fb is buggy, dev hsr_slave_0 [ 619.697273] protocol 88fb is buggy, dev hsr_slave_1 [ 620.647199] protocol 88fb is buggy, dev hsr_slave_0 [ 620.647228] protocol 88fb is buggy, dev hsr_slave_1 [ 620.652271] protocol 88fb is buggy, dev hsr_slave_1 [ 620.727191] protocol 88fb is buggy, dev hsr_slave_0 [ 620.732281] protocol 88fb is buggy, dev hsr_slave_1 [ 621.127182] protocol 88fb is buggy, dev hsr_slave_0 [ 621.127233] protocol 88fb is buggy, dev hsr_slave_1 [ 621.132251] protocol 88fb is buggy, dev hsr_slave_1 [ 624.807225] net_ratelimit: 14 callbacks suppressed [ 624.807234] protocol 88fb is buggy, dev hsr_slave_0 [ 624.817183] protocol 88fb is buggy, dev hsr_slave_0 [ 624.817284] protocol 88fb is buggy, dev hsr_slave_1 [ 624.822236] protocol 88fb is buggy, dev hsr_slave_1 [ 624.887180] protocol 88fb is buggy, dev hsr_slave_0 [ 624.892269] protocol 88fb is buggy, dev hsr_slave_1 [ 625.287182] protocol 88fb is buggy, dev hsr_slave_0 [ 625.287213] protocol 88fb is buggy, dev hsr_slave_1 [ 625.292258] protocol 88fb is buggy, dev hsr_slave_1 [ 625.927188] protocol 88fb is buggy, dev hsr_slave_0 [ 630.087225] net_ratelimit: 22 callbacks suppressed [ 630.087234] protocol 88fb is buggy, dev hsr_slave_0 [ 630.097308] protocol 88fb is buggy, dev hsr_slave_1 [ 631.047194] protocol 88fb is buggy, dev hsr_slave_0 [ 631.047201] protocol 88fb is buggy, dev hsr_slave_0 [ 631.047266] protocol 88fb is buggy, dev hsr_slave_1 [ 631.052375] protocol 88fb is buggy, dev hsr_slave_1 [ 631.127187] protocol 88fb is buggy, dev hsr_slave_0 [ 631.132277] protocol 88fb is buggy, dev hsr_slave_1 [ 631.527179] protocol 88fb is buggy, dev hsr_slave_0 [ 631.527184] protocol 88fb is buggy, dev hsr_slave_0 11:29:31 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:31 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:31 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:31 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2a000, 0x0) 11:29:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 635.207194] net_ratelimit: 14 callbacks suppressed [ 635.207201] protocol 88fb is buggy, dev hsr_slave_0 [ 635.207228] protocol 88fb is buggy, dev hsr_slave_1 [ 635.212241] protocol 88fb is buggy, dev hsr_slave_1 [ 635.287194] protocol 88fb is buggy, dev hsr_slave_0 [ 635.292341] protocol 88fb is buggy, dev hsr_slave_1 11:29:32 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x400, 0x9, 0x100000000, 'queue0\x00', 0x9}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x82040, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000200)=0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x3, 0x0) [ 635.687187] protocol 88fb is buggy, dev hsr_slave_0 [ 635.687201] protocol 88fb is buggy, dev hsr_slave_0 [ 635.692306] protocol 88fb is buggy, dev hsr_slave_1 [ 635.697301] protocol 88fb is buggy, dev hsr_slave_1 [ 636.327234] protocol 88fb is buggy, dev hsr_slave_0 11:29:33 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x10f) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7f, 0xffffffffffffff81, 0x401, 0x5, 0x0, 0x4, 0x200, 0x6, 0xffffffff, 0x5, 0x4, 0x80, 0xfff, 0x1, 0x0, 0x4, 0xe93, 0x8, 0x10001, 0x2, 0xfff, 0x2f, 0x5, 0x7fff, 0x2, 0x1, 0x8, 0x19c, 0x10001, 0x0, 0x7, 0x8, 0x5, 0x73, 0x1, 0x80, 0x0, 0x40, 0x1, @perf_config_ext={0x400}, 0x20, 0xf455f7f, 0x5, 0x9, 0x0, 0x9, 0x2}, 0xffffffffffffffff, 0xf, r1, 0xa) sync() bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 11:29:34 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x17000) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() [ 640.497227] net_ratelimit: 22 callbacks suppressed [ 640.497237] protocol 88fb is buggy, dev hsr_slave_0 [ 640.507317] protocol 88fb is buggy, dev hsr_slave_1 11:29:37 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x88cd, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x7, @empty, 0x400}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x8, 0x0, 0x3, r1}, 0x10) sync() 11:29:37 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0x28, 0x1) sync() r0 = semget$private(0x0, 0x7, 0x82) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x49, 0xfffffffffffffe00, 0x5, 0x1}, 0x10) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x8, 0x2616]) 11:29:38 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'cpu'}, {0x2f, 'pids'}, {0x2d, 'cpu'}, {0x2f, 'rdma'}, {0x2f, 'io'}]}, 0x1a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x600400, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$unix(0x1, 0x0, 0x0) [ 641.447251] protocol 88fb is buggy, dev hsr_slave_0 [ 641.447429] protocol 88fb is buggy, dev hsr_slave_0 [ 641.452362] protocol 88fb is buggy, dev hsr_slave_1 [ 641.457389] protocol 88fb is buggy, dev hsr_slave_1 [ 641.537224] protocol 88fb is buggy, dev hsr_slave_0 [ 641.542336] protocol 88fb is buggy, dev hsr_slave_1 [ 641.927181] protocol 88fb is buggy, dev hsr_slave_0 [ 641.927445] protocol 88fb is buggy, dev hsr_slave_0 11:29:42 executing program 1: sync() [ 645.607195] net_ratelimit: 15 callbacks suppressed [ 645.607203] protocol 88fb is buggy, dev hsr_slave_0 [ 645.607230] protocol 88fb is buggy, dev hsr_slave_1 [ 645.612185] protocol 88fb is buggy, dev hsr_slave_1 [ 645.692547] protocol 88fb is buggy, dev hsr_slave_0 [ 645.697670] protocol 88fb is buggy, dev hsr_slave_1 [ 646.087187] protocol 88fb is buggy, dev hsr_slave_0 [ 646.087215] protocol 88fb is buggy, dev hsr_slave_1 [ 646.092258] protocol 88fb is buggy, dev hsr_slave_1 [ 646.737186] protocol 88fb is buggy, dev hsr_slave_0 [ 646.742285] protocol 88fb is buggy, dev hsr_slave_1 11:29:43 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:44 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:44 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x302, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:44 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x7) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x100000000000010a, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 650.887201] net_ratelimit: 20 callbacks suppressed [ 650.887210] protocol 88fb is buggy, dev hsr_slave_0 [ 650.897283] protocol 88fb is buggy, dev hsr_slave_1 [ 651.847200] protocol 88fb is buggy, dev hsr_slave_0 [ 651.847214] protocol 88fb is buggy, dev hsr_slave_0 [ 651.852280] protocol 88fb is buggy, dev hsr_slave_1 [ 651.857319] protocol 88fb is buggy, dev hsr_slave_1 [ 651.927190] protocol 88fb is buggy, dev hsr_slave_0 [ 651.932253] protocol 88fb is buggy, dev hsr_slave_1 [ 652.327191] protocol 88fb is buggy, dev hsr_slave_0 [ 652.332248] protocol 88fb is buggy, dev hsr_slave_1 [ 656.007212] net_ratelimit: 14 callbacks suppressed [ 656.007219] protocol 88fb is buggy, dev hsr_slave_0 [ 656.007258] protocol 88fb is buggy, dev hsr_slave_1 [ 656.012199] protocol 88fb is buggy, dev hsr_slave_1 [ 656.087190] protocol 88fb is buggy, dev hsr_slave_0 [ 656.092246] protocol 88fb is buggy, dev hsr_slave_1 [ 656.487198] protocol 88fb is buggy, dev hsr_slave_0 [ 656.487380] protocol 88fb is buggy, dev hsr_slave_0 [ 656.492289] protocol 88fb is buggy, dev hsr_slave_1 [ 656.497281] protocol 88fb is buggy, dev hsr_slave_1 [ 657.127203] protocol 88fb is buggy, dev hsr_slave_0 [ 661.297202] net_ratelimit: 21 callbacks suppressed [ 661.297212] protocol 88fb is buggy, dev hsr_slave_0 [ 661.307284] protocol 88fb is buggy, dev hsr_slave_1 11:29:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() socket$inet6_dccp(0xa, 0x6, 0x0) r0 = getpgrp(0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x1a, 0x3, @tid=r0}, &(0x7f0000000040)) 11:29:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="fb6fd78249c8262048d0ef1347deec869a13b1bcc5504fc4534b07b8e2a3ec63388ea990627cc8cfd5f168630130fa8c4a97"], 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000003c0)='/dev/snapshot\x00', r2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r4 = getpid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) rt_tgsigqueueinfo(r4, r5, 0x15, &(0x7f0000001400)={0x35, 0xffff, 0xd9e}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8200) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x6, 0xffffffffffffcfdc, 0x5, 0x2, 0x7, 0x3}) r2 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x18, 0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) open_by_handle_at(r4, &(0x7f0000000200)={0x65, 0x8, "0a0648716630b7ecd790df8b70e1f6f2b068b33b73ec0500a78a85bb35f45b5768ea17521df9fa81e71f31c90402386d3d53368a15f7f13bbb58a6ebacc9de20a791172dd683b221f99180dd93e75081f70f4c3c3ff4127add3101c4a2"}, 0x20000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="6b5f3ba7a7fcc547d1", 0x9}, {&(0x7f0000000100)="9b550314deb2de8d318986b7f7a633f438def7f2f1a85aaea34a1ac08b6c453869a848dff7f905b2b6401ae45c678447149149324bd9c141c374aea0d272d8b424273285b01b6df9656ac702d6e1e218cadd5a079c4e4d144e0898479e", 0x5d}], 0x2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x7, 0x1, @raw_data=[0xb0, 0x401, 0x2, 0x1000, 0xff, 0x10001, 0xe3, 0xffffffff, 0x6, 0x7, 0x4947, 0x7fff, 0x2, 0x8001, 0x7, 0xeb]}) 11:29:58 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:58 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 662.247185] protocol 88fb is buggy, dev hsr_slave_0 [ 662.247216] protocol 88fb is buggy, dev hsr_slave_1 [ 662.252257] protocol 88fb is buggy, dev hsr_slave_1 [ 662.327188] protocol 88fb is buggy, dev hsr_slave_0 [ 662.332304] protocol 88fb is buggy, dev hsr_slave_1 11:29:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:29:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 662.727190] protocol 88fb is buggy, dev hsr_slave_0 [ 662.732319] protocol 88fb is buggy, dev hsr_slave_1 [ 662.737166] protocol 88fb is buggy, dev hsr_slave_0 [ 666.407191] net_ratelimit: 14 callbacks suppressed [ 666.407199] protocol 88fb is buggy, dev hsr_slave_0 [ 666.407225] protocol 88fb is buggy, dev hsr_slave_1 [ 666.412183] protocol 88fb is buggy, dev hsr_slave_1 [ 666.487180] protocol 88fb is buggy, dev hsr_slave_0 [ 666.492259] protocol 88fb is buggy, dev hsr_slave_1 [ 666.887185] protocol 88fb is buggy, dev hsr_slave_0 [ 666.887215] protocol 88fb is buggy, dev hsr_slave_1 [ 666.892352] protocol 88fb is buggy, dev hsr_slave_1 [ 667.527216] protocol 88fb is buggy, dev hsr_slave_0 [ 667.532316] protocol 88fb is buggy, dev hsr_slave_1 [ 671.687218] net_ratelimit: 17 callbacks suppressed [ 671.687226] protocol 88fb is buggy, dev hsr_slave_0 [ 671.697288] protocol 88fb is buggy, dev hsr_slave_1 11:30:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 672.647247] protocol 88fb is buggy, dev hsr_slave_0 [ 672.652352] protocol 88fb is buggy, dev hsr_slave_1 [ 672.657174] protocol 88fb is buggy, dev hsr_slave_0 [ 672.662414] protocol 88fb is buggy, dev hsr_slave_1 [ 672.727188] protocol 88fb is buggy, dev hsr_slave_0 [ 672.732279] protocol 88fb is buggy, dev hsr_slave_1 [ 673.127184] protocol 88fb is buggy, dev hsr_slave_0 [ 673.127214] protocol 88fb is buggy, dev hsr_slave_1 11:30:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 1: getrandom(&(0x7f0000000000)=""/40, 0xffffffffffffff42, 0x4) sync() 11:30:10 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001400)=""/218, &(0x7f0000000140)=0xffffffffffffff18) 11:30:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200b00) ioctl(r1, 0xb2, &(0x7f0000000280)="0d2a13af0d581c5db4f9c4daafd7f18a43a8c13c408a50e75881b679b23127869f8088360028b421f14275cafc945777461d2fd02237b67cb2375894016225e185463bd95511ea1aec40da647170430101f19d436b4d93972336ebd221") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x3, 0x20, 0x4, 0x0, 0xffff, 0x1fb}, 0x6}, 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) fcntl$getown(r1, 0x9) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) gettid() getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001540), &(0x7f0000001680)=0xc) getpid() r5 = getpgrp(0x0) r6 = getpgid(r5) fcntl$setown(r1, 0x8, r6) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000001400)={0x4, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001700)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8001, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) sync() 11:30:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:10 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:11 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:11 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x3, @mcast1, 0x200}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e23, 0x0, @rand_addr="6e9a177ba7f988fd527053655e828756", 0xc0}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x7ff, 0x5, @local, 0x7bf}, @in6={0xa, 0x4e22, 0x53d, @local, 0xff}, @in={0x2, 0x4e22, @rand_addr=0x8}], 0xc0) [ 676.807196] net_ratelimit: 15 callbacks suppressed [ 676.807222] protocol 88fb is buggy, dev hsr_slave_0 [ 676.808026] protocol 88fb is buggy, dev hsr_slave_0 [ 676.812259] protocol 88fb is buggy, dev hsr_slave_1 [ 676.817830] protocol 88fb is buggy, dev hsr_slave_1 [ 676.887196] protocol 88fb is buggy, dev hsr_slave_0 [ 676.892276] protocol 88fb is buggy, dev hsr_slave_1 [ 677.287190] protocol 88fb is buggy, dev hsr_slave_0 [ 677.288237] protocol 88fb is buggy, dev hsr_slave_0 [ 677.292274] protocol 88fb is buggy, dev hsr_slave_1 [ 677.298213] protocol 88fb is buggy, dev hsr_slave_1 [ 682.087220] net_ratelimit: 23 callbacks suppressed [ 682.087229] protocol 88fb is buggy, dev hsr_slave_0 [ 682.097296] protocol 88fb is buggy, dev hsr_slave_1 [ 683.047203] protocol 88fb is buggy, dev hsr_slave_0 [ 683.048693] protocol 88fb is buggy, dev hsr_slave_0 [ 683.052285] protocol 88fb is buggy, dev hsr_slave_1 [ 683.063063] protocol 88fb is buggy, dev hsr_slave_1 [ 683.127192] protocol 88fb is buggy, dev hsr_slave_0 [ 683.132295] protocol 88fb is buggy, dev hsr_slave_1 [ 683.528011] protocol 88fb is buggy, dev hsr_slave_0 [ 683.533800] protocol 88fb is buggy, dev hsr_slave_1 [ 687.207208] net_ratelimit: 16 callbacks suppressed [ 687.207216] protocol 88fb is buggy, dev hsr_slave_0 [ 687.207245] protocol 88fb is buggy, dev hsr_slave_1 [ 687.212199] protocol 88fb is buggy, dev hsr_slave_1 [ 687.318649] protocol 88fb is buggy, dev hsr_slave_0 [ 687.323823] protocol 88fb is buggy, dev hsr_slave_1 [ 687.687184] protocol 88fb is buggy, dev hsr_slave_0 [ 687.687189] protocol 88fb is buggy, dev hsr_slave_0 [ 687.687229] protocol 88fb is buggy, dev hsr_slave_1 [ 687.692254] protocol 88fb is buggy, dev hsr_slave_1 [ 688.337220] protocol 88fb is buggy, dev hsr_slave_0 [ 691.329000] syz-executor.2 (18816) used greatest stack depth: 21720 bytes left [ 692.487234] net_ratelimit: 22 callbacks suppressed [ 692.487243] protocol 88fb is buggy, dev hsr_slave_0 [ 692.497326] protocol 88fb is buggy, dev hsr_slave_1 [ 693.447224] protocol 88fb is buggy, dev hsr_slave_0 [ 693.447252] protocol 88fb is buggy, dev hsr_slave_1 [ 693.452302] protocol 88fb is buggy, dev hsr_slave_1 [ 693.527182] protocol 88fb is buggy, dev hsr_slave_0 [ 693.532273] protocol 88fb is buggy, dev hsr_slave_1 [ 693.927180] protocol 88fb is buggy, dev hsr_slave_0 [ 693.927184] protocol 88fb is buggy, dev hsr_slave_0 [ 693.927223] protocol 88fb is buggy, dev hsr_slave_1 11:30:32 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x10100, 0x0) getdents64(r0, &(0x7f0000000040)=""/102, 0x66) 11:30:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:32 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 697.607200] net_ratelimit: 14 callbacks suppressed [ 697.607233] protocol 88fb is buggy, dev hsr_slave_1 [ 697.612194] protocol 88fb is buggy, dev hsr_slave_0 [ 697.622249] protocol 88fb is buggy, dev hsr_slave_1 [ 697.687197] protocol 88fb is buggy, dev hsr_slave_0 [ 697.692294] protocol 88fb is buggy, dev hsr_slave_1 [ 698.087198] protocol 88fb is buggy, dev hsr_slave_0 [ 698.092290] protocol 88fb is buggy, dev hsr_slave_1 [ 698.097177] protocol 88fb is buggy, dev hsr_slave_0 [ 698.102352] protocol 88fb is buggy, dev hsr_slave_1 [ 698.727236] protocol 88fb is buggy, dev hsr_slave_0 [ 702.887237] net_ratelimit: 19 callbacks suppressed [ 702.887247] protocol 88fb is buggy, dev hsr_slave_0 [ 702.897307] protocol 88fb is buggy, dev hsr_slave_1 [ 703.847191] protocol 88fb is buggy, dev hsr_slave_0 [ 703.847195] protocol 88fb is buggy, dev hsr_slave_0 [ 703.847239] protocol 88fb is buggy, dev hsr_slave_1 [ 703.852305] protocol 88fb is buggy, dev hsr_slave_1 [ 703.927187] protocol 88fb is buggy, dev hsr_slave_0 [ 703.932250] protocol 88fb is buggy, dev hsr_slave_1 [ 704.327182] protocol 88fb is buggy, dev hsr_slave_0 [ 704.327212] protocol 88fb is buggy, dev hsr_slave_1 [ 708.007217] net_ratelimit: 14 callbacks suppressed [ 708.007224] protocol 88fb is buggy, dev hsr_slave_0 [ 708.007257] protocol 88fb is buggy, dev hsr_slave_1 [ 708.012216] protocol 88fb is buggy, dev hsr_slave_1 [ 708.087203] protocol 88fb is buggy, dev hsr_slave_0 [ 708.092272] protocol 88fb is buggy, dev hsr_slave_1 [ 708.487215] protocol 88fb is buggy, dev hsr_slave_0 [ 708.487235] protocol 88fb is buggy, dev hsr_slave_0 [ 708.492300] protocol 88fb is buggy, dev hsr_slave_1 [ 708.497317] protocol 88fb is buggy, dev hsr_slave_1 [ 709.127235] protocol 88fb is buggy, dev hsr_slave_0 11:30:48 executing program 1: getrandom(&(0x7f00000000c0)=""/40, 0x230, 0x3) sync() r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000140)) getresgid(&(0x7f0000000480), &(0x7f0000000440), &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'ipddp0\x00'}, 0x18) getpeername$tipc(r0, &(0x7f0000000280)=@name, &(0x7f00000002c0)=0x10) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000180)={0x3, 0x6, 0x34, "5a00c7cac509cfc1d0c1a99dd4a0e1cb73bff67939138da88165b0da5e200227e6ec410688929fa15865ce58001d370a08c19c655e0ee0ee2b115373", 0x16, "d52270f4ac38fc439032df29d565bb8c84c043dbf9c96e249eb29fe4e4a6aaea8f00ecafc0a5e8197da804d764de906f96e6395b41a09e8d57d878dc", 0x10}) 11:30:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="39c6585fd10cdfc658efde68d63f004aab8af1bead4c1a8e46651293610f8f436485a107a3d1c88f6a571196fb442749b209e7b58c3f755cd2bd2a77fcaedc0fe525f60da219db6b8505ae7517f18cb883426daf715883538751c2173d98a735c8d48e6215a54e19de840ac249ccdebde9465913088559c58e5d514fc2961dc522c06c33486a5e63278fdf13128df9c5b107ebb3f1a483c8becb2795909bca8594f93e3501963a43d04bcc84c4cd21da2d9bf50408847754ad9287c0d3eb583ae4f898d176742911e85403037ea1b975c9974993084e256df26db83d0e6d75fbe0b6052100000000000000000000000000"], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x1017fd, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_rr_get_interval(r4, &(0x7f0000000140)) 11:30:48 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() ioctl$VIDIOC_DQBUF(0xffffffffffffff9c, 0xc0585611, &(0x7f0000000000)={0x7, 0xc, 0x4, 0x2200000, {0x0, 0x7530}, {0x0, 0xb, 0x9, 0x98f, 0x7fffffff, 0x1a, "2ec37e85"}, 0x2, 0x2, @fd=0xffffffffffffffff, 0x4}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x200200) r2 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f00000000c0)=[{r0, 0x512}, {r1, 0x6000}, {r2, 0x1080}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={0x8}, 0x8) 11:30:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), 0x4) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) 11:30:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:30:48 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 713.287227] net_ratelimit: 20 callbacks suppressed [ 713.287235] protocol 88fb is buggy, dev hsr_slave_0 [ 713.297325] protocol 88fb is buggy, dev hsr_slave_1 [ 714.247189] protocol 88fb is buggy, dev hsr_slave_0 [ 714.247193] protocol 88fb is buggy, dev hsr_slave_0 [ 714.247273] protocol 88fb is buggy, dev hsr_slave_1 [ 714.252288] protocol 88fb is buggy, dev hsr_slave_1 [ 714.327193] protocol 88fb is buggy, dev hsr_slave_0 [ 714.332288] protocol 88fb is buggy, dev hsr_slave_1 [ 714.727193] protocol 88fb is buggy, dev hsr_slave_0 [ 714.727222] protocol 88fb is buggy, dev hsr_slave_1 [ 718.407195] net_ratelimit: 12 callbacks suppressed [ 718.407202] protocol 88fb is buggy, dev hsr_slave_0 [ 718.407227] protocol 88fb is buggy, dev hsr_slave_1 [ 718.412197] protocol 88fb is buggy, dev hsr_slave_1 [ 718.497195] protocol 88fb is buggy, dev hsr_slave_0 [ 718.502311] protocol 88fb is buggy, dev hsr_slave_1 [ 718.887194] protocol 88fb is buggy, dev hsr_slave_0 [ 718.887198] protocol 88fb is buggy, dev hsr_slave_0 [ 718.887241] protocol 88fb is buggy, dev hsr_slave_1 [ 718.892270] protocol 88fb is buggy, dev hsr_slave_1 [ 719.527220] protocol 88fb is buggy, dev hsr_slave_0 [ 723.687207] net_ratelimit: 19 callbacks suppressed [ 723.687215] protocol 88fb is buggy, dev hsr_slave_0 [ 723.697272] protocol 88fb is buggy, dev hsr_slave_1 [ 724.647192] protocol 88fb is buggy, dev hsr_slave_0 [ 724.652284] protocol 88fb is buggy, dev hsr_slave_1 [ 724.657179] protocol 88fb is buggy, dev hsr_slave_0 [ 724.662335] protocol 88fb is buggy, dev hsr_slave_1 [ 724.737207] protocol 88fb is buggy, dev hsr_slave_0 [ 724.742297] protocol 88fb is buggy, dev hsr_slave_1 [ 725.127183] protocol 88fb is buggy, dev hsr_slave_0 [ 725.127188] protocol 88fb is buggy, dev hsr_slave_0 11:31:03 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 728.807196] net_ratelimit: 15 callbacks suppressed [ 728.807204] protocol 88fb is buggy, dev hsr_slave_0 [ 728.807223] protocol 88fb is buggy, dev hsr_slave_1 [ 728.812195] protocol 88fb is buggy, dev hsr_slave_1 [ 728.887219] protocol 88fb is buggy, dev hsr_slave_0 [ 728.892368] protocol 88fb is buggy, dev hsr_slave_1 [ 729.287206] protocol 88fb is buggy, dev hsr_slave_0 [ 729.287244] protocol 88fb is buggy, dev hsr_slave_1 [ 729.292283] protocol 88fb is buggy, dev hsr_slave_1 [ 729.927225] protocol 88fb is buggy, dev hsr_slave_0 [ 729.932298] protocol 88fb is buggy, dev hsr_slave_1 [ 734.087212] net_ratelimit: 19 callbacks suppressed [ 734.087221] protocol 88fb is buggy, dev hsr_slave_0 [ 734.097256] protocol 88fb is buggy, dev hsr_slave_1 [ 735.047176] protocol 88fb is buggy, dev hsr_slave_0 [ 735.047206] protocol 88fb is buggy, dev hsr_slave_1 [ 735.052247] protocol 88fb is buggy, dev hsr_slave_1 [ 735.127180] protocol 88fb is buggy, dev hsr_slave_0 [ 735.134872] protocol 88fb is buggy, dev hsr_slave_1 [ 735.527178] protocol 88fb is buggy, dev hsr_slave_0 [ 735.527203] protocol 88fb is buggy, dev hsr_slave_1 [ 735.532353] protocol 88fb is buggy, dev hsr_slave_1 [ 739.207193] net_ratelimit: 14 callbacks suppressed [ 739.207201] protocol 88fb is buggy, dev hsr_slave_0 [ 739.207235] protocol 88fb is buggy, dev hsr_slave_1 [ 739.212215] protocol 88fb is buggy, dev hsr_slave_1 [ 739.287180] protocol 88fb is buggy, dev hsr_slave_0 [ 739.292267] protocol 88fb is buggy, dev hsr_slave_1 [ 739.687215] protocol 88fb is buggy, dev hsr_slave_0 [ 739.687247] protocol 88fb is buggy, dev hsr_slave_1 [ 739.692289] protocol 88fb is buggy, dev hsr_slave_1 [ 740.327224] protocol 88fb is buggy, dev hsr_slave_0 [ 740.332285] protocol 88fb is buggy, dev hsr_slave_1 11:31:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:17 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:17 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40, 0x2000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sync() 11:31:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x7, {0x6}}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:18 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101000) bind$tipc(r0, 0x0, 0x0) sync() 11:31:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 744.487261] net_ratelimit: 17 callbacks suppressed [ 744.487270] protocol 88fb is buggy, dev hsr_slave_0 [ 744.497335] protocol 88fb is buggy, dev hsr_slave_1 [ 745.447219] protocol 88fb is buggy, dev hsr_slave_0 [ 745.447248] protocol 88fb is buggy, dev hsr_slave_1 [ 745.452286] protocol 88fb is buggy, dev hsr_slave_1 [ 745.527182] protocol 88fb is buggy, dev hsr_slave_0 [ 745.532283] protocol 88fb is buggy, dev hsr_slave_1 [ 745.927189] protocol 88fb is buggy, dev hsr_slave_0 [ 745.927194] protocol 88fb is buggy, dev hsr_slave_0 [ 745.927234] protocol 88fb is buggy, dev hsr_slave_1 [ 749.607186] net_ratelimit: 12 callbacks suppressed [ 749.607194] protocol 88fb is buggy, dev hsr_slave_0 [ 749.607219] protocol 88fb is buggy, dev hsr_slave_1 [ 749.612188] protocol 88fb is buggy, dev hsr_slave_1 [ 749.687186] protocol 88fb is buggy, dev hsr_slave_0 [ 749.692297] protocol 88fb is buggy, dev hsr_slave_1 [ 750.087189] protocol 88fb is buggy, dev hsr_slave_0 [ 750.087216] protocol 88fb is buggy, dev hsr_slave_1 [ 750.092287] protocol 88fb is buggy, dev hsr_slave_1 [ 750.727222] protocol 88fb is buggy, dev hsr_slave_0 [ 750.732338] protocol 88fb is buggy, dev hsr_slave_1 11:31:29 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4040, 0x0) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000040)="39c87be96a23472e6b7c2a126f75db0aea9e3ad5204de147a9deeab8cdc9c1cf09d0cc713a1483eb84370c3c01a1bb3450493ded84036226004a14a03998b50c1f20acf4a99caf9b98688ff2582d659cb62104f4bf64197108533a47a092c0fa7e3b335514c82bc3ba194efbec638e1d518a10240496ca1cee6e1572dedae8ad08a78c456a87f4392b8f523b84700a8a12") ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000100)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0xff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0xff, 0xffffffffffffff00, 0x5, 0xffffffff, 0x0, 0x7ff, 0x5, {r3, @in6={{0xa, 0x8, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x6}}, 0x0, 0x8000, 0x0, 0xb0fb, 0x15}}, &(0x7f0000000340)=0xb0) 11:31:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 754.887230] net_ratelimit: 18 callbacks suppressed [ 754.887239] protocol 88fb is buggy, dev hsr_slave_0 [ 754.897312] protocol 88fb is buggy, dev hsr_slave_1 [ 755.847186] protocol 88fb is buggy, dev hsr_slave_0 [ 755.847190] protocol 88fb is buggy, dev hsr_slave_0 [ 755.847237] protocol 88fb is buggy, dev hsr_slave_1 [ 755.852411] protocol 88fb is buggy, dev hsr_slave_1 [ 755.927198] protocol 88fb is buggy, dev hsr_slave_0 [ 755.932267] protocol 88fb is buggy, dev hsr_slave_1 [ 756.327205] protocol 88fb is buggy, dev hsr_slave_0 [ 756.327210] protocol 88fb is buggy, dev hsr_slave_0 [ 760.007199] net_ratelimit: 15 callbacks suppressed [ 760.007206] protocol 88fb is buggy, dev hsr_slave_0 [ 760.007233] protocol 88fb is buggy, dev hsr_slave_1 [ 760.012191] protocol 88fb is buggy, dev hsr_slave_1 [ 760.087183] protocol 88fb is buggy, dev hsr_slave_0 [ 760.092278] protocol 88fb is buggy, dev hsr_slave_1 [ 760.487182] protocol 88fb is buggy, dev hsr_slave_0 [ 760.487205] protocol 88fb is buggy, dev hsr_slave_0 [ 760.492265] protocol 88fb is buggy, dev hsr_slave_1 [ 760.497295] protocol 88fb is buggy, dev hsr_slave_1 [ 761.127250] protocol 88fb is buggy, dev hsr_slave_0 11:31:42 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x2, &(0x7f0000000180)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0x498) 11:31:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000001680)="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", &(0x7f0000001400)="c326865d333646c75af0338d0c547f895f614484a1cd0f996d0a132d239aa098929d9f54f4e52f603caed3d01d32a57db7ff5933d6b922a892735cd1d50b06c317f9c8a3d8e436f2227aaeaf4f8ebf7a1188eece7ec7549c7cfa67983d06e0e144602a4ee683c1765fb1594ca5b1694fdd3a0facd08d8bfd73eade342015e33cb4c5ddad06ff07eb17424f6e38994703a78112021af6ffc7344537ee97a82f3bb48eb8dba633e7aa010b75da51db17856bd95d7792810092b39c007991bb67d63ccfca75bc6ffe81d43f6d563bce9787b16023f7437fe3b79301d4b28e221e0ef885c8ee096bf97e52"}}, &(0x7f0000000340)) timer_create(0x7, &(0x7f0000000380)={0x0, 0x1e, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000002740)={0x0, 0x1e, 0x6, @thr={&(0x7f0000001500)="bf4afd26e6ee891c1cc7b5330c50faff6fbea5b2acbd4d7ae684bfb2baef64bb6aac6c74e99ea2426f352adaaf3b2a0f742d2555c725fe420d00a80a48c8c8ede140847fc4fd3db390501d909b9fc23aee5e", &(0x7f0000002680)="1258dd37fdd5dbedda31ee3f021ee784c74e91f07abdffcdaad2a51fd2ab20b49edbf89c19eaf539b13deb53e84ef65628df5e6a9383dde6c534d328173783836cac79a4f9ce7f1a6d187686939d3943131afe3c80cb1f52f0f0936a842a12fd96e4f821ea5571bcd7c62ab4d2fe719e852a77a1adc8baea5fdd62342b4e4ed57735f1732719d7768f0998d23c41bf78c2490bc4b05913a2c7ee"}}, &(0x7f0000002780)=0x0) timer_settime(r4, 0xfffffffffffffffc, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000000c0)=0xe8) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) 11:31:42 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) sync() msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) sync_file_range(r0, 0x100, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)=0x17) rmdir(&(0x7f0000000100)='./file0\x00') 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 765.287231] net_ratelimit: 21 callbacks suppressed [ 765.287241] protocol 88fb is buggy, dev hsr_slave_0 [ 765.297302] protocol 88fb is buggy, dev hsr_slave_1 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:31:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 766.247203] protocol 88fb is buggy, dev hsr_slave_0 [ 766.248015] protocol 88fb is buggy, dev hsr_slave_0 [ 766.252319] protocol 88fb is buggy, dev hsr_slave_1 [ 766.257873] protocol 88fb is buggy, dev hsr_slave_1 [ 766.327759] protocol 88fb is buggy, dev hsr_slave_0 [ 766.333438] protocol 88fb is buggy, dev hsr_slave_1 [ 766.727208] protocol 88fb is buggy, dev hsr_slave_0 [ 766.727373] protocol 88fb is buggy, dev hsr_slave_0 [ 770.407187] net_ratelimit: 16 callbacks suppressed [ 770.407196] protocol 88fb is buggy, dev hsr_slave_0 [ 770.407685] protocol 88fb is buggy, dev hsr_slave_0 [ 770.412221] protocol 88fb is buggy, dev hsr_slave_1 [ 770.418427] protocol 88fb is buggy, dev hsr_slave_1 [ 770.558861] protocol 88fb is buggy, dev hsr_slave_0 [ 770.564644] protocol 88fb is buggy, dev hsr_slave_1 [ 770.887191] protocol 88fb is buggy, dev hsr_slave_0 [ 770.888817] protocol 88fb is buggy, dev hsr_slave_0 [ 770.892389] protocol 88fb is buggy, dev hsr_slave_1 [ 770.898892] protocol 88fb is buggy, dev hsr_slave_1 [ 775.687216] net_ratelimit: 24 callbacks suppressed [ 775.687224] protocol 88fb is buggy, dev hsr_slave_0 [ 775.697281] protocol 88fb is buggy, dev hsr_slave_1 [ 776.647190] protocol 88fb is buggy, dev hsr_slave_0 [ 776.648656] protocol 88fb is buggy, dev hsr_slave_0 [ 776.652286] protocol 88fb is buggy, dev hsr_slave_1 [ 776.658315] protocol 88fb is buggy, dev hsr_slave_1 [ 776.807332] protocol 88fb is buggy, dev hsr_slave_0 [ 776.812414] protocol 88fb is buggy, dev hsr_slave_1 [ 777.127209] protocol 88fb is buggy, dev hsr_slave_0 [ 777.127713] protocol 88fb is buggy, dev hsr_slave_0 [ 780.807188] net_ratelimit: 16 callbacks suppressed [ 780.807197] protocol 88fb is buggy, dev hsr_slave_0 [ 780.808309] protocol 88fb is buggy, dev hsr_slave_0 [ 780.812195] protocol 88fb is buggy, dev hsr_slave_1 [ 780.818260] protocol 88fb is buggy, dev hsr_slave_1 [ 780.967998] protocol 88fb is buggy, dev hsr_slave_0 [ 780.973674] protocol 88fb is buggy, dev hsr_slave_1 [ 781.287868] protocol 88fb is buggy, dev hsr_slave_0 [ 781.293666] protocol 88fb is buggy, dev hsr_slave_1 [ 781.297242] protocol 88fb is buggy, dev hsr_slave_0 [ 781.303776] protocol 88fb is buggy, dev hsr_slave_1 11:32:02 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20440, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0x3, 0xab, {0x57, 0x9, 0x1, {0x4, 0x8000}, {0x7, 0xdaba}, @period={0x5a, 0x8, 0x8, 0x0, 0x8001, {0x1, 0x7f, 0x8001, 0x100000000}, 0x7, &(0x7f0000000040)=[0xffffffffffffff3c, 0x7fffffff, 0x10000, 0x20, 0x7e, 0xcc01, 0x1a9]}}, {0x0, 0x74, 0x9, {0x2}, {0x0, 0x100000001}, @period={0x58, 0xffffffffffffffff, 0x1ff, 0xc0f, 0x7f, {0x2, 0x3, 0x0, 0x5}, 0x3, &(0x7f0000000080)=[0x40, 0xc782, 0x3]}}}) sync() [ 786.087211] net_ratelimit: 24 callbacks suppressed [ 786.087219] protocol 88fb is buggy, dev hsr_slave_0 [ 786.097276] protocol 88fb is buggy, dev hsr_slave_1 11:32:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:32:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) [ 787.047206] protocol 88fb is buggy, dev hsr_slave_0 [ 787.047737] protocol 88fb is buggy, dev hsr_slave_0 [ 787.052417] protocol 88fb is buggy, dev hsr_slave_1 [ 787.058847] protocol 88fb is buggy, dev hsr_slave_1 [ 787.207204] protocol 88fb is buggy, dev hsr_slave_0 [ 787.212298] protocol 88fb is buggy, dev hsr_slave_1 [ 787.527194] protocol 88fb is buggy, dev hsr_slave_0 [ 787.528548] protocol 88fb is buggy, dev hsr_slave_0 [ 791.207197] net_ratelimit: 16 callbacks suppressed [ 791.207205] protocol 88fb is buggy, dev hsr_slave_0 [ 791.208473] protocol 88fb is buggy, dev hsr_slave_0 [ 791.212204] protocol 88fb is buggy, dev hsr_slave_1 [ 791.218655] protocol 88fb is buggy, dev hsr_slave_1 [ 791.368068] protocol 88fb is buggy, dev hsr_slave_0 [ 791.373465] protocol 88fb is buggy, dev hsr_slave_1 [ 791.687184] protocol 88fb is buggy, dev hsr_slave_0 [ 791.688291] protocol 88fb is buggy, dev hsr_slave_0 [ 791.692273] protocol 88fb is buggy, dev hsr_slave_1 [ 791.698447] protocol 88fb is buggy, dev hsr_slave_1 [ 796.498163] net_ratelimit: 24 callbacks suppressed [ 796.498217] protocol 88fb is buggy, dev hsr_slave_0 [ 796.508817] protocol 88fb is buggy, dev hsr_slave_1 [ 797.447236] protocol 88fb is buggy, dev hsr_slave_0 [ 797.447295] protocol 88fb is buggy, dev hsr_slave_0 [ 797.452449] protocol 88fb is buggy, dev hsr_slave_1 [ 797.457440] protocol 88fb is buggy, dev hsr_slave_1 [ 797.607192] protocol 88fb is buggy, dev hsr_slave_0 [ 797.612399] protocol 88fb is buggy, dev hsr_slave_1 [ 797.927215] protocol 88fb is buggy, dev hsr_slave_0 [ 797.928268] protocol 88fb is buggy, dev hsr_slave_0 [ 801.607198] net_ratelimit: 16 callbacks suppressed [ 801.607206] protocol 88fb is buggy, dev hsr_slave_0 [ 801.609336] protocol 88fb is buggy, dev hsr_slave_0 [ 801.612285] protocol 88fb is buggy, dev hsr_slave_1 [ 801.618096] protocol 88fb is buggy, dev hsr_slave_1 [ 801.767895] protocol 88fb is buggy, dev hsr_slave_0 [ 801.773312] protocol 88fb is buggy, dev hsr_slave_1 [ 802.087200] protocol 88fb is buggy, dev hsr_slave_0 [ 802.089574] protocol 88fb is buggy, dev hsr_slave_0 [ 802.092294] protocol 88fb is buggy, dev hsr_slave_1 [ 802.097880] protocol 88fb is buggy, dev hsr_slave_1 [ 806.887920] net_ratelimit: 24 callbacks suppressed [ 806.887944] protocol 88fb is buggy, dev hsr_slave_0 [ 806.898654] protocol 88fb is buggy, dev hsr_slave_1 [ 807.847203] protocol 88fb is buggy, dev hsr_slave_0 [ 807.848630] protocol 88fb is buggy, dev hsr_slave_0 [ 807.852321] protocol 88fb is buggy, dev hsr_slave_1 [ 807.858199] protocol 88fb is buggy, dev hsr_slave_1 [ 808.008042] protocol 88fb is buggy, dev hsr_slave_0 [ 808.013519] protocol 88fb is buggy, dev hsr_slave_1 [ 808.327218] protocol 88fb is buggy, dev hsr_slave_0 [ 808.332320] protocol 88fb is buggy, dev hsr_slave_1 [ 812.007192] net_ratelimit: 16 callbacks suppressed [ 812.008354] protocol 88fb is buggy, dev hsr_slave_0 [ 812.012179] protocol 88fb is buggy, dev hsr_slave_0 [ 812.012221] protocol 88fb is buggy, dev hsr_slave_1 [ 812.018277] protocol 88fb is buggy, dev hsr_slave_1 [ 812.167198] protocol 88fb is buggy, dev hsr_slave_0 [ 812.172290] protocol 88fb is buggy, dev hsr_slave_1 [ 812.487217] protocol 88fb is buggy, dev hsr_slave_0 [ 812.487729] protocol 88fb is buggy, dev hsr_slave_0 [ 812.492319] protocol 88fb is buggy, dev hsr_slave_1 [ 812.498049] protocol 88fb is buggy, dev hsr_slave_1 [ 817.297247] net_ratelimit: 24 callbacks suppressed [ 817.297256] protocol 88fb is buggy, dev hsr_slave_0 [ 817.307427] protocol 88fb is buggy, dev hsr_slave_1 [ 818.247200] protocol 88fb is buggy, dev hsr_slave_0 [ 818.252280] protocol 88fb is buggy, dev hsr_slave_1 [ 818.257904] protocol 88fb is buggy, dev hsr_slave_0 [ 818.263173] protocol 88fb is buggy, dev hsr_slave_1 [ 818.408327] protocol 88fb is buggy, dev hsr_slave_0 [ 818.413755] protocol 88fb is buggy, dev hsr_slave_1 [ 818.727202] protocol 88fb is buggy, dev hsr_slave_0 [ 818.728228] protocol 88fb is buggy, dev hsr_slave_0 [ 822.407197] net_ratelimit: 16 callbacks suppressed [ 822.407206] protocol 88fb is buggy, dev hsr_slave_0 [ 822.409386] protocol 88fb is buggy, dev hsr_slave_0 [ 822.412223] protocol 88fb is buggy, dev hsr_slave_1 [ 822.418229] protocol 88fb is buggy, dev hsr_slave_1 [ 822.567934] protocol 88fb is buggy, dev hsr_slave_0 [ 822.573451] protocol 88fb is buggy, dev hsr_slave_1 [ 822.887907] protocol 88fb is buggy, dev hsr_slave_0 [ 822.895694] protocol 88fb is buggy, dev hsr_slave_1 [ 822.897189] protocol 88fb is buggy, dev hsr_slave_0 [ 822.905755] protocol 88fb is buggy, dev hsr_slave_1 [ 827.687980] net_ratelimit: 24 callbacks suppressed [ 827.688006] protocol 88fb is buggy, dev hsr_slave_0 [ 827.698674] protocol 88fb is buggy, dev hsr_slave_1 [ 828.647211] protocol 88fb is buggy, dev hsr_slave_0 [ 828.650361] protocol 88fb is buggy, dev hsr_slave_0 [ 828.652304] protocol 88fb is buggy, dev hsr_slave_1 [ 828.659780] protocol 88fb is buggy, dev hsr_slave_1 [ 828.807968] protocol 88fb is buggy, dev hsr_slave_0 [ 828.813415] protocol 88fb is buggy, dev hsr_slave_1 [ 829.127208] protocol 88fb is buggy, dev hsr_slave_0 [ 829.128312] protocol 88fb is buggy, dev hsr_slave_0 [ 832.807197] net_ratelimit: 16 callbacks suppressed [ 832.807205] protocol 88fb is buggy, dev hsr_slave_0 [ 832.807957] protocol 88fb is buggy, dev hsr_slave_0 [ 832.812215] protocol 88fb is buggy, dev hsr_slave_1 [ 832.818385] protocol 88fb is buggy, dev hsr_slave_1 [ 832.968066] protocol 88fb is buggy, dev hsr_slave_0 [ 832.973760] protocol 88fb is buggy, dev hsr_slave_1 [ 833.287219] protocol 88fb is buggy, dev hsr_slave_0 [ 833.288058] protocol 88fb is buggy, dev hsr_slave_0 [ 833.292309] protocol 88fb is buggy, dev hsr_slave_1 [ 833.299178] protocol 88fb is buggy, dev hsr_slave_1 [ 838.087246] net_ratelimit: 24 callbacks suppressed [ 838.087254] protocol 88fb is buggy, dev hsr_slave_0 [ 838.097313] protocol 88fb is buggy, dev hsr_slave_1 [ 839.047184] protocol 88fb is buggy, dev hsr_slave_0 [ 839.048418] protocol 88fb is buggy, dev hsr_slave_0 [ 839.052289] protocol 88fb is buggy, dev hsr_slave_1 [ 839.058158] protocol 88fb is buggy, dev hsr_slave_1 [ 839.207190] protocol 88fb is buggy, dev hsr_slave_0 [ 839.212281] protocol 88fb is buggy, dev hsr_slave_1 [ 839.527192] protocol 88fb is buggy, dev hsr_slave_0 [ 839.532290] protocol 88fb is buggy, dev hsr_slave_1 [ 843.207242] net_ratelimit: 16 callbacks suppressed [ 843.207251] protocol 88fb is buggy, dev hsr_slave_0 [ 843.217321] protocol 88fb is buggy, dev hsr_slave_1 [ 843.218551] protocol 88fb is buggy, dev hsr_slave_0 [ 843.227851] protocol 88fb is buggy, dev hsr_slave_1 [ 843.367216] protocol 88fb is buggy, dev hsr_slave_0 [ 843.372307] protocol 88fb is buggy, dev hsr_slave_1 [ 843.687229] protocol 88fb is buggy, dev hsr_slave_0 [ 843.692330] protocol 88fb is buggy, dev hsr_slave_1 [ 843.697866] protocol 88fb is buggy, dev hsr_slave_0 [ 843.703246] protocol 88fb is buggy, dev hsr_slave_1 [ 848.487290] net_ratelimit: 24 callbacks suppressed [ 848.487299] protocol 88fb is buggy, dev hsr_slave_0 [ 848.497381] protocol 88fb is buggy, dev hsr_slave_1 [ 849.447259] protocol 88fb is buggy, dev hsr_slave_0 [ 849.449395] protocol 88fb is buggy, dev hsr_slave_0 [ 849.452354] protocol 88fb is buggy, dev hsr_slave_1 [ 849.463053] protocol 88fb is buggy, dev hsr_slave_1 [ 849.607209] protocol 88fb is buggy, dev hsr_slave_0 [ 849.612312] protocol 88fb is buggy, dev hsr_slave_1 [ 849.927216] protocol 88fb is buggy, dev hsr_slave_0 [ 849.929109] protocol 88fb is buggy, dev hsr_slave_0 [ 853.608502] net_ratelimit: 16 callbacks suppressed [ 853.608569] protocol 88fb is buggy, dev hsr_slave_0 [ 853.617161] protocol 88fb is buggy, dev hsr_slave_0 [ 853.620462] protocol 88fb is buggy, dev hsr_slave_1 [ 853.623602] protocol 88fb is buggy, dev hsr_slave_1 [ 853.767185] protocol 88fb is buggy, dev hsr_slave_0 [ 853.772284] protocol 88fb is buggy, dev hsr_slave_1 [ 854.087199] protocol 88fb is buggy, dev hsr_slave_0 [ 854.087957] protocol 88fb is buggy, dev hsr_slave_0 [ 854.092281] protocol 88fb is buggy, dev hsr_slave_1 [ 854.098538] protocol 88fb is buggy, dev hsr_slave_1 [ 858.887851] net_ratelimit: 24 callbacks suppressed [ 858.887875] protocol 88fb is buggy, dev hsr_slave_0 [ 858.898714] protocol 88fb is buggy, dev hsr_slave_1 [ 859.847193] protocol 88fb is buggy, dev hsr_slave_0 [ 859.852311] protocol 88fb is buggy, dev hsr_slave_1 [ 859.858912] protocol 88fb is buggy, dev hsr_slave_0 [ 859.864370] protocol 88fb is buggy, dev hsr_slave_1 [ 860.007188] protocol 88fb is buggy, dev hsr_slave_0 [ 860.012274] protocol 88fb is buggy, dev hsr_slave_1 [ 860.327191] protocol 88fb is buggy, dev hsr_slave_0 [ 860.332273] protocol 88fb is buggy, dev hsr_slave_1 [ 864.007189] net_ratelimit: 16 callbacks suppressed [ 864.007198] protocol 88fb is buggy, dev hsr_slave_0 [ 864.017247] protocol 88fb is buggy, dev hsr_slave_1 [ 864.017958] protocol 88fb is buggy, dev hsr_slave_0 [ 864.027796] protocol 88fb is buggy, dev hsr_slave_1 [ 864.167192] protocol 88fb is buggy, dev hsr_slave_0 [ 864.172292] protocol 88fb is buggy, dev hsr_slave_1 [ 864.487189] protocol 88fb is buggy, dev hsr_slave_0 [ 864.492285] protocol 88fb is buggy, dev hsr_slave_1 [ 864.498470] protocol 88fb is buggy, dev hsr_slave_0 [ 864.504129] protocol 88fb is buggy, dev hsr_slave_1 [ 869.287248] net_ratelimit: 24 callbacks suppressed [ 869.287256] protocol 88fb is buggy, dev hsr_slave_0 [ 869.297322] protocol 88fb is buggy, dev hsr_slave_1 [ 870.247198] protocol 88fb is buggy, dev hsr_slave_0 [ 870.248933] protocol 88fb is buggy, dev hsr_slave_0 [ 870.252286] protocol 88fb is buggy, dev hsr_slave_1 [ 870.262731] protocol 88fb is buggy, dev hsr_slave_1 [ 870.408192] protocol 88fb is buggy, dev hsr_slave_0 [ 870.413524] protocol 88fb is buggy, dev hsr_slave_1 [ 870.727192] protocol 88fb is buggy, dev hsr_slave_0 [ 870.732280] protocol 88fb is buggy, dev hsr_slave_1 [ 874.407198] net_ratelimit: 16 callbacks suppressed [ 874.407207] protocol 88fb is buggy, dev hsr_slave_0 [ 874.409018] protocol 88fb is buggy, dev hsr_slave_0 [ 874.412207] protocol 88fb is buggy, dev hsr_slave_1 [ 874.418154] protocol 88fb is buggy, dev hsr_slave_1 [ 874.567675] protocol 88fb is buggy, dev hsr_slave_0 [ 874.573269] protocol 88fb is buggy, dev hsr_slave_1 [ 874.887754] protocol 88fb is buggy, dev hsr_slave_0 [ 874.893290] protocol 88fb is buggy, dev hsr_slave_1 [ 874.897181] protocol 88fb is buggy, dev hsr_slave_0 [ 874.903366] protocol 88fb is buggy, dev hsr_slave_1 [ 879.697646] net_ratelimit: 24 callbacks suppressed [ 879.697679] protocol 88fb is buggy, dev hsr_slave_0 [ 879.708420] protocol 88fb is buggy, dev hsr_slave_1 [ 880.647226] protocol 88fb is buggy, dev hsr_slave_0 [ 880.647587] protocol 88fb is buggy, dev hsr_slave_0 [ 880.652311] protocol 88fb is buggy, dev hsr_slave_1 [ 880.657330] protocol 88fb is buggy, dev hsr_slave_1 [ 880.807855] protocol 88fb is buggy, dev hsr_slave_0 [ 880.813493] protocol 88fb is buggy, dev hsr_slave_1 [ 881.127208] protocol 88fb is buggy, dev hsr_slave_0 [ 881.132305] protocol 88fb is buggy, dev hsr_slave_1 [ 884.807177] net_ratelimit: 16 callbacks suppressed [ 884.807186] protocol 88fb is buggy, dev hsr_slave_0 [ 884.808494] protocol 88fb is buggy, dev hsr_slave_0 [ 884.812211] protocol 88fb is buggy, dev hsr_slave_1 [ 884.818142] protocol 88fb is buggy, dev hsr_slave_1 [ 884.968046] protocol 88fb is buggy, dev hsr_slave_0 [ 884.973609] protocol 88fb is buggy, dev hsr_slave_1 [ 885.287196] protocol 88fb is buggy, dev hsr_slave_0 [ 885.288011] protocol 88fb is buggy, dev hsr_slave_0 [ 885.292298] protocol 88fb is buggy, dev hsr_slave_1 [ 885.298930] protocol 88fb is buggy, dev hsr_slave_1 [ 890.088156] net_ratelimit: 24 callbacks suppressed [ 890.088247] protocol 88fb is buggy, dev hsr_slave_0 [ 890.098977] protocol 88fb is buggy, dev hsr_slave_1 [ 891.047200] protocol 88fb is buggy, dev hsr_slave_0 [ 891.047871] protocol 88fb is buggy, dev hsr_slave_0 [ 891.052293] protocol 88fb is buggy, dev hsr_slave_1 [ 891.057307] protocol 88fb is buggy, dev hsr_slave_1 [ 891.207979] protocol 88fb is buggy, dev hsr_slave_0 [ 891.213515] protocol 88fb is buggy, dev hsr_slave_1 [ 891.527209] protocol 88fb is buggy, dev hsr_slave_0 [ 891.532299] protocol 88fb is buggy, dev hsr_slave_1 [ 895.207201] net_ratelimit: 16 callbacks suppressed [ 895.208135] protocol 88fb is buggy, dev hsr_slave_0 [ 895.212190] protocol 88fb is buggy, dev hsr_slave_0 [ 895.212242] protocol 88fb is buggy, dev hsr_slave_1 [ 895.218088] protocol 88fb is buggy, dev hsr_slave_1 [ 895.378086] protocol 88fb is buggy, dev hsr_slave_0 [ 895.383792] protocol 88fb is buggy, dev hsr_slave_1 [ 895.687213] protocol 88fb is buggy, dev hsr_slave_0 [ 895.689313] protocol 88fb is buggy, dev hsr_slave_0 [ 895.692298] protocol 88fb is buggy, dev hsr_slave_1 [ 895.699102] protocol 88fb is buggy, dev hsr_slave_1 [ 900.487984] net_ratelimit: 24 callbacks suppressed [ 900.488008] protocol 88fb is buggy, dev hsr_slave_0 [ 900.498718] protocol 88fb is buggy, dev hsr_slave_1 [ 901.447209] protocol 88fb is buggy, dev hsr_slave_0 [ 901.448162] protocol 88fb is buggy, dev hsr_slave_0 [ 901.452323] protocol 88fb is buggy, dev hsr_slave_1 [ 901.457911] protocol 88fb is buggy, dev hsr_slave_1 [ 901.607189] protocol 88fb is buggy, dev hsr_slave_0 [ 901.612278] protocol 88fb is buggy, dev hsr_slave_1 [ 901.927210] protocol 88fb is buggy, dev hsr_slave_0 [ 901.932314] protocol 88fb is buggy, dev hsr_slave_1 [ 905.607189] net_ratelimit: 16 callbacks suppressed [ 905.607197] protocol 88fb is buggy, dev hsr_slave_0 [ 905.617247] protocol 88fb is buggy, dev hsr_slave_1 [ 905.618707] protocol 88fb is buggy, dev hsr_slave_0 [ 905.627795] protocol 88fb is buggy, dev hsr_slave_1 [ 905.805180] protocol 88fb is buggy, dev hsr_slave_0 [ 905.810297] protocol 88fb is buggy, dev hsr_slave_1 [ 906.087212] protocol 88fb is buggy, dev hsr_slave_0 [ 906.092315] protocol 88fb is buggy, dev hsr_slave_1 [ 906.098189] protocol 88fb is buggy, dev hsr_slave_0 [ 906.103547] protocol 88fb is buggy, dev hsr_slave_1 [ 910.887226] net_ratelimit: 24 callbacks suppressed [ 910.887234] protocol 88fb is buggy, dev hsr_slave_0 [ 910.897287] protocol 88fb is buggy, dev hsr_slave_1 [ 911.847199] protocol 88fb is buggy, dev hsr_slave_0 [ 911.849501] protocol 88fb is buggy, dev hsr_slave_0 [ 911.852315] protocol 88fb is buggy, dev hsr_slave_1 [ 911.858499] protocol 88fb is buggy, dev hsr_slave_1 [ 912.017182] protocol 88fb is buggy, dev hsr_slave_0 [ 912.022259] protocol 88fb is buggy, dev hsr_slave_1 [ 912.327197] protocol 88fb is buggy, dev hsr_slave_0 [ 912.328751] protocol 88fb is buggy, dev hsr_slave_0 [ 916.007206] net_ratelimit: 16 callbacks suppressed [ 916.007215] protocol 88fb is buggy, dev hsr_slave_0 [ 916.017263] protocol 88fb is buggy, dev hsr_slave_1 [ 916.027226] protocol 88fb is buggy, dev hsr_slave_0 [ 916.032294] protocol 88fb is buggy, dev hsr_slave_1 [ 916.167187] protocol 88fb is buggy, dev hsr_slave_0 [ 916.172272] protocol 88fb is buggy, dev hsr_slave_1 [ 916.487234] protocol 88fb is buggy, dev hsr_slave_0 [ 916.488467] protocol 88fb is buggy, dev hsr_slave_0 [ 916.492338] protocol 88fb is buggy, dev hsr_slave_1 [ 916.498201] protocol 88fb is buggy, dev hsr_slave_1 [ 921.297866] net_ratelimit: 24 callbacks suppressed [ 921.297920] protocol 88fb is buggy, dev hsr_slave_0 [ 921.308712] protocol 88fb is buggy, dev hsr_slave_1 [ 922.247173] protocol 88fb is buggy, dev hsr_slave_0 [ 922.247798] protocol 88fb is buggy, dev hsr_slave_0 [ 922.252267] protocol 88fb is buggy, dev hsr_slave_1 [ 922.262807] protocol 88fb is buggy, dev hsr_slave_1 [ 922.408236] protocol 88fb is buggy, dev hsr_slave_0 [ 922.413841] protocol 88fb is buggy, dev hsr_slave_1 [ 922.727199] protocol 88fb is buggy, dev hsr_slave_0 [ 922.728898] protocol 88fb is buggy, dev hsr_slave_0 [ 926.407199] net_ratelimit: 16 callbacks suppressed [ 926.407207] protocol 88fb is buggy, dev hsr_slave_0 [ 926.409749] protocol 88fb is buggy, dev hsr_slave_0 [ 926.412203] protocol 88fb is buggy, dev hsr_slave_1 [ 926.418548] protocol 88fb is buggy, dev hsr_slave_1 [ 926.567864] protocol 88fb is buggy, dev hsr_slave_0 [ 926.573250] protocol 88fb is buggy, dev hsr_slave_1 [ 926.887207] protocol 88fb is buggy, dev hsr_slave_0 [ 926.892284] protocol 88fb is buggy, dev hsr_slave_1 [ 926.898165] protocol 88fb is buggy, dev hsr_slave_0 [ 926.903504] protocol 88fb is buggy, dev hsr_slave_1 [ 931.687207] net_ratelimit: 24 callbacks suppressed [ 931.687216] protocol 88fb is buggy, dev hsr_slave_0 [ 931.697271] protocol 88fb is buggy, dev hsr_slave_1 [ 932.647200] protocol 88fb is buggy, dev hsr_slave_0 [ 932.648962] protocol 88fb is buggy, dev hsr_slave_0 [ 932.652281] protocol 88fb is buggy, dev hsr_slave_1 [ 932.658542] protocol 88fb is buggy, dev hsr_slave_1 [ 932.807183] protocol 88fb is buggy, dev hsr_slave_0 [ 932.812275] protocol 88fb is buggy, dev hsr_slave_1 [ 933.127213] protocol 88fb is buggy, dev hsr_slave_0 [ 933.132314] protocol 88fb is buggy, dev hsr_slave_1 [ 936.807205] net_ratelimit: 16 callbacks suppressed [ 936.807213] protocol 88fb is buggy, dev hsr_slave_0 [ 936.809207] protocol 88fb is buggy, dev hsr_slave_0 [ 936.812219] protocol 88fb is buggy, dev hsr_slave_1 [ 936.818786] protocol 88fb is buggy, dev hsr_slave_1 [ 936.967190] protocol 88fb is buggy, dev hsr_slave_0 [ 936.972283] protocol 88fb is buggy, dev hsr_slave_1 [ 937.287191] protocol 88fb is buggy, dev hsr_slave_0 [ 937.292277] protocol 88fb is buggy, dev hsr_slave_1 [ 937.298170] protocol 88fb is buggy, dev hsr_slave_0 [ 937.303518] protocol 88fb is buggy, dev hsr_slave_1 [ 942.087206] net_ratelimit: 24 callbacks suppressed [ 942.087215] protocol 88fb is buggy, dev hsr_slave_0 [ 942.097274] protocol 88fb is buggy, dev hsr_slave_1 [ 943.047206] protocol 88fb is buggy, dev hsr_slave_0 [ 943.048966] protocol 88fb is buggy, dev hsr_slave_0 [ 943.052298] protocol 88fb is buggy, dev hsr_slave_1 [ 943.058457] protocol 88fb is buggy, dev hsr_slave_1 [ 943.207973] protocol 88fb is buggy, dev hsr_slave_0 [ 943.213478] protocol 88fb is buggy, dev hsr_slave_1 [ 943.527200] protocol 88fb is buggy, dev hsr_slave_0 [ 943.528938] protocol 88fb is buggy, dev hsr_slave_0 [ 947.207194] net_ratelimit: 16 callbacks suppressed [ 947.207203] protocol 88fb is buggy, dev hsr_slave_0 [ 947.208586] protocol 88fb is buggy, dev hsr_slave_0 [ 947.212210] protocol 88fb is buggy, dev hsr_slave_1 [ 947.227787] protocol 88fb is buggy, dev hsr_slave_1 [ 947.367189] protocol 88fb is buggy, dev hsr_slave_0 [ 947.372277] protocol 88fb is buggy, dev hsr_slave_1 [ 947.687204] protocol 88fb is buggy, dev hsr_slave_0 [ 947.689308] protocol 88fb is buggy, dev hsr_slave_0 [ 947.692314] protocol 88fb is buggy, dev hsr_slave_1 [ 947.698917] protocol 88fb is buggy, dev hsr_slave_1 [ 951.831295] device bridge_slave_1 left promiscuous mode [ 951.837396] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.914924] device bridge_slave_0 left promiscuous mode [ 951.926591] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.487218] net_ratelimit: 24 callbacks suppressed [ 952.487226] protocol 88fb is buggy, dev hsr_slave_0 [ 952.497295] protocol 88fb is buggy, dev hsr_slave_1 [ 953.447846] protocol 88fb is buggy, dev hsr_slave_0 [ 953.453735] protocol 88fb is buggy, dev hsr_slave_1 [ 953.607988] protocol 88fb is buggy, dev hsr_slave_0 [ 953.613805] protocol 88fb is buggy, dev hsr_slave_1 [ 953.927183] protocol 88fb is buggy, dev hsr_slave_0 [ 953.929014] protocol 88fb is buggy, dev hsr_slave_0 [ 953.932266] protocol 88fb is buggy, dev hsr_slave_1 [ 953.938950] protocol 88fb is buggy, dev hsr_slave_1 [ 955.169967] device hsr_slave_1 left promiscuous mode [ 955.212626] device hsr_slave_0 left promiscuous mode [ 955.264399] team0 (unregistering): Port device team_slave_1 removed [ 955.282698] team0 (unregistering): Port device team_slave_0 removed [ 955.328218] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 955.394662] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 955.524587] bond0 (unregistering): Released all slaves [ 957.607185] net_ratelimit: 12 callbacks suppressed [ 957.607193] protocol 88fb is buggy, dev hsr_slave_0 [ 957.617242] protocol 88fb is buggy, dev hsr_slave_1 [ 957.767254] protocol 88fb is buggy, dev hsr_slave_0 [ 957.777768] protocol 88fb is buggy, dev hsr_slave_1 [ 958.087209] protocol 88fb is buggy, dev hsr_slave_0 [ 958.088875] protocol 88fb is buggy, dev hsr_slave_0 [ 958.092307] protocol 88fb is buggy, dev hsr_slave_1 [ 958.102994] protocol 88fb is buggy, dev hsr_slave_1 [ 958.727205] protocol 88fb is buggy, dev hsr_slave_0 [ 958.732300] protocol 88fb is buggy, dev hsr_slave_1 [ 962.887957] net_ratelimit: 18 callbacks suppressed [ 962.887981] protocol 88fb is buggy, dev hsr_slave_0 [ 962.898791] protocol 88fb is buggy, dev hsr_slave_1 [ 963.857921] protocol 88fb is buggy, dev hsr_slave_0 [ 963.863328] protocol 88fb is buggy, dev hsr_slave_1 [ 964.007188] protocol 88fb is buggy, dev hsr_slave_0 [ 964.012285] protocol 88fb is buggy, dev hsr_slave_1 [ 964.327190] protocol 88fb is buggy, dev hsr_slave_0 [ 964.328891] protocol 88fb is buggy, dev hsr_slave_0 [ 964.332274] protocol 88fb is buggy, dev hsr_slave_1 [ 964.337989] protocol 88fb is buggy, dev hsr_slave_1 [ 968.007213] net_ratelimit: 12 callbacks suppressed [ 968.007222] protocol 88fb is buggy, dev hsr_slave_0 [ 968.017287] protocol 88fb is buggy, dev hsr_slave_1 [ 968.167200] protocol 88fb is buggy, dev hsr_slave_0 [ 968.172289] protocol 88fb is buggy, dev hsr_slave_1 [ 968.487223] protocol 88fb is buggy, dev hsr_slave_0 [ 968.489150] protocol 88fb is buggy, dev hsr_slave_0 [ 968.492322] protocol 88fb is buggy, dev hsr_slave_1 [ 968.498712] protocol 88fb is buggy, dev hsr_slave_1 [ 969.137620] protocol 88fb is buggy, dev hsr_slave_0 [ 969.143205] protocol 88fb is buggy, dev hsr_slave_1 [ 973.287933] net_ratelimit: 18 callbacks suppressed [ 973.287987] protocol 88fb is buggy, dev hsr_slave_0 [ 973.298577] protocol 88fb is buggy, dev hsr_slave_1 [ 974.247220] protocol 88fb is buggy, dev hsr_slave_0 [ 974.252313] protocol 88fb is buggy, dev hsr_slave_1 [ 974.407202] protocol 88fb is buggy, dev hsr_slave_0 [ 974.412297] protocol 88fb is buggy, dev hsr_slave_1 [ 974.727183] protocol 88fb is buggy, dev hsr_slave_0 [ 974.727945] protocol 88fb is buggy, dev hsr_slave_0 [ 974.732258] protocol 88fb is buggy, dev hsr_slave_1 [ 974.738126] protocol 88fb is buggy, dev hsr_slave_1 [ 978.408071] net_ratelimit: 12 callbacks suppressed [ 978.408095] protocol 88fb is buggy, dev hsr_slave_0 [ 978.418805] protocol 88fb is buggy, dev hsr_slave_1 [ 978.567186] protocol 88fb is buggy, dev hsr_slave_0 [ 978.572282] protocol 88fb is buggy, dev hsr_slave_1 [ 978.887186] protocol 88fb is buggy, dev hsr_slave_0 [ 978.888910] protocol 88fb is buggy, dev hsr_slave_0 [ 978.892263] protocol 88fb is buggy, dev hsr_slave_1 [ 978.898509] protocol 88fb is buggy, dev hsr_slave_1 [ 979.527198] protocol 88fb is buggy, dev hsr_slave_0 [ 979.532307] protocol 88fb is buggy, dev hsr_slave_1 [ 983.687869] net_ratelimit: 18 callbacks suppressed [ 983.687933] protocol 88fb is buggy, dev hsr_slave_0 [ 983.698585] protocol 88fb is buggy, dev hsr_slave_1 [ 984.657837] protocol 88fb is buggy, dev hsr_slave_0 [ 984.663274] protocol 88fb is buggy, dev hsr_slave_1 [ 984.807181] protocol 88fb is buggy, dev hsr_slave_0 [ 984.812353] protocol 88fb is buggy, dev hsr_slave_1 [ 985.127178] protocol 88fb is buggy, dev hsr_slave_0 [ 985.129085] protocol 88fb is buggy, dev hsr_slave_0 [ 985.132276] protocol 88fb is buggy, dev hsr_slave_1 [ 985.139083] protocol 88fb is buggy, dev hsr_slave_1 [ 988.807974] net_ratelimit: 12 callbacks suppressed [ 988.808009] protocol 88fb is buggy, dev hsr_slave_0 [ 988.818540] protocol 88fb is buggy, dev hsr_slave_1 [ 988.967178] protocol 88fb is buggy, dev hsr_slave_0 [ 988.972275] protocol 88fb is buggy, dev hsr_slave_1 [ 989.287207] protocol 88fb is buggy, dev hsr_slave_0 [ 989.292306] protocol 88fb is buggy, dev hsr_slave_1 [ 989.298897] protocol 88fb is buggy, dev hsr_slave_0 [ 989.304247] protocol 88fb is buggy, dev hsr_slave_1 [ 989.937951] protocol 88fb is buggy, dev hsr_slave_0 [ 989.943624] protocol 88fb is buggy, dev hsr_slave_1 [ 994.087219] net_ratelimit: 18 callbacks suppressed [ 994.087228] protocol 88fb is buggy, dev hsr_slave_0 [ 994.097323] protocol 88fb is buggy, dev hsr_slave_1 11:35:31 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7c) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x12000, 0x4000}) 11:35:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x2) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:31 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:31 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) 11:35:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:31 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:31 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) 11:35:31 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) [ 995.047191] protocol 88fb is buggy, dev hsr_slave_0 [ 995.052300] protocol 88fb is buggy, dev hsr_slave_1 [ 995.207207] protocol 88fb is buggy, dev hsr_slave_0 [ 995.212309] protocol 88fb is buggy, dev hsr_slave_1 11:35:32 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) [ 995.527184] protocol 88fb is buggy, dev hsr_slave_0 [ 995.527189] protocol 88fb is buggy, dev hsr_slave_0 [ 995.527232] protocol 88fb is buggy, dev hsr_slave_1 [ 995.532310] protocol 88fb is buggy, dev hsr_slave_1 11:35:32 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ptrace(0x11, r0) 11:35:33 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ptrace(0x11, r0) [ 997.042710] IPVS: ftp: loaded support on port[0] = 21 11:35:33 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ptrace(0x11, r0) [ 997.353384] chnl_net:caif_netlink_parms(): no params data found [ 997.483215] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.497617] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.517986] device bridge_slave_0 entered promiscuous mode [ 997.539780] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.554320] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.571025] device bridge_slave_1 entered promiscuous mode [ 997.620716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.640527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.720318] team0: Port device team_slave_0 added [ 997.741999] team0: Port device team_slave_1 added [ 997.860334] device hsr_slave_0 entered promiscuous mode [ 997.902933] device hsr_slave_1 entered promiscuous mode [ 997.956811] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.963236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.969945] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.976314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.201348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.253361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.272585] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.312570] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.397310] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 998.422741] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.451899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.470534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.514766] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.521274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.587522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.595382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.637658] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.644159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.717504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.725529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.797360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.805464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.861087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 998.917188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.957761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.964904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.980246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.017900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.025496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.077893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.085953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.157984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.164460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 999.187214] net_ratelimit: 12 callbacks suppressed [ 999.187221] protocol 88fb is buggy, dev hsr_slave_0 [ 999.197247] protocol 88fb is buggy, dev hsr_slave_1 [ 999.207172] protocol 88fb is buggy, dev hsr_slave_0 [ 999.212254] protocol 88fb is buggy, dev hsr_slave_1 [ 999.309973] protocol 88fb is buggy, dev hsr_slave_0 [ 999.315597] protocol 88fb is buggy, dev hsr_slave_1 [ 999.377201] protocol 88fb is buggy, dev hsr_slave_0 [ 999.382313] protocol 88fb is buggy, dev hsr_slave_1 [ 999.427942] protocol 88fb is buggy, dev hsr_slave_0 [ 999.433451] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.487211] net_ratelimit: 27 callbacks suppressed [ 1004.487219] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.497294] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.447221] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.452331] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.607197] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.612302] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.777189] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.782282] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.927182] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.927210] protocol 88fb is buggy, dev hsr_slave_1 11:35:43 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) 11:35:43 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl(r0, 0x4, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exe'], 0x1) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) 11:35:43 executing program 3: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="afd7089a35ff3b44ae98719159ebc686bf88f17e3e53ff63c7be6bde7184144ebf8f5d877d82960bde43b28ee0c0aad62a9ea3a5cffba452bbfeae8f9a847baee045766e3d7ff99a6034700777ea93207eeeeb34db557f3f69b6ae6dd52470220c30e3e6b8e4f4df33ec486e6ff03bc50b679e93ba727e0b06938c0a450343f275b68233bab8b8b297453f07aafff0591b4e5466c1d1c279ad4657495b441feb73193c81fbb9ad04bfaa0a0c407d774bf57e6d7f81d15a78e940b801ccfbc6930a8bdcb3064636ed108a32f50821") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x1b, 0x7, @thr={&(0x7f0000000180)="89df", &(0x7f0000000340)="d8fec228b7e863c85016b334caa6dca9dc349b17bd410dfbcada963a2f2347c27d93cbc786f1635164dc7c9c41a77ee2fd274b5ed25a3aa93717e76152f9bc3a6703eb7c9574d32c6e5e8f31ac7ec69b3d37db46f3742f1f15bdd133db95d442bf9927a9dd4dffd66d32d6ef5b34f29f7724535f0fb6536f84958dc01037"}}, &(0x7f0000001500)=0x0) timer_settime(r4, 0x0, &(0x7f0000001680)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/218, &(0x7f0000000300)=0xda) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001400)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) setfsuid(r5) [ 1008.611351] ------------[ cut here ]------------ [ 1008.618119] kernel BUG at mm/page_alloc.c:3010! [ 1008.622794] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1008.628151] CPU: 1 PID: 1045 Comm: kcompactd0 Not tainted 5.0.0+ #12 [ 1008.634632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.643989] RIP: 0010:__isolate_free_page+0x3b8/0x4c0 [ 1008.649177] Code: 83 c4 20 44 89 e1 b8 01 00 00 00 5b 48 d3 e0 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c6 80 fa 71 87 4c 89 ff e8 3a ff 0b 00 0f 0b <0f> 0b 48 c7 c6 80 f6 71 87 4c 89 ff e8 27 ff 0b 00 0f 0b 48 8b 7d [ 1008.668065] RSP: 0018:ffff8880a83b7850 EFLAGS: 00010007 [ 1008.673411] RAX: 0000000000000000 RBX: ffffea0001f01a08 RCX: dffffc0000000000 [ 1008.680660] RDX: 1ffff11025fff916 RSI: 0000000000000005 RDI: ffff88812fffc880 [ 1008.687911] RBP: ffff8880a83b7898 R08: ffff8880a87cc080 R09: ffffed1015076f02 [ 1008.695161] R10: ffffed1015076f01 R11: 0000000000000003 R12: 0000000000000005 [ 1008.702412] R13: 0000000000000005 R14: 0000000000000001 R15: ffff88812fffc880 [ 1008.709665] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1008.717870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1008.723732] CR2: 0000000000aaafe8 CR3: 00000001b48b9000 CR4: 00000000001426e0 [ 1008.730990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1008.738239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1008.745487] Call Trace: [ 1008.748066] compaction_alloc+0xa9b/0x2290 [ 1008.752292] ? isolate_freepages_block+0xd40/0xd40 [ 1008.757204] ? trace_hardirqs_on+0x67/0x230 [ 1008.761513] migrate_pages+0x484/0x2cd0 [ 1008.765473] ? __ClearPageMovable+0x250/0x250 [ 1008.769949] ? isolate_freepages_block+0xd40/0xd40 [ 1008.774863] compact_zone+0x1b56/0x38d0 [ 1008.778830] ? compaction_suitable+0x3b0/0x3b0 [ 1008.783397] ? rcu_read_lock_sched_held+0x110/0x130 [ 1008.788397] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.793918] ? compaction_suitable+0xfb/0x3b0 [ 1008.798396] kcompactd_do_work+0x303/0xaa0 [ 1008.802613] ? sysfs_compact_node+0x100/0x100 [ 1008.807097] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1008.811573] kcompactd+0x247/0x890 [ 1008.815100] ? kcompactd_do_work+0xaa0/0xaa0 [ 1008.819489] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1008.824052] ? trace_hardirqs_on+0x67/0x230 [ 1008.828354] ? finish_wait+0x260/0x260 [ 1008.832224] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1008.837306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.842828] ? __kthread_parkme+0xfb/0x1b0 [ 1008.847045] kthread+0x357/0x430 [ 1008.850392] ? kcompactd_do_work+0xaa0/0xaa0 [ 1008.854789] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1008.860307] ret_from_fork+0x3a/0x50 [ 1008.864008] Modules linked in: [ 1008.867187] [ 1008.867192] ====================================================== [ 1008.867196] WARNING: possible circular locking dependency detected [ 1008.867199] 5.0.0+ #12 Not tainted [ 1008.867203] ------------------------------------------------------ [ 1008.867206] kcompactd0/1045 is trying to acquire lock: [ 1008.867209] 00000000855a3996 (console_owner){-.-.}, at: console_unlock+0x440/0x10a0 [ 1008.867219] [ 1008.867222] but task is already holding lock: [ 1008.867224] 000000003b40a3c6 (&(&zone->lock)->rlock){..-.}, at: compaction_alloc+0x669/0x2290 [ 1008.867234] [ 1008.867238] which lock already depends on the new lock. [ 1008.867239] [ 1008.867241] [ 1008.867245] the existing dependency chain (in reverse order) is: [ 1008.867247] [ 1008.867248] -> #3 (&(&zone->lock)->rlock){..-.}: [ 1008.867258] lock_acquire+0x16f/0x3f0 [ 1008.867262] _raw_spin_lock_irqsave+0x95/0xcd [ 1008.867265] get_page_from_freelist+0x6c7/0x4170 [ 1008.867268] __alloc_pages_nodemask+0x248/0x7e0 [ 1008.867271] cache_grow_begin+0x9c/0x860 [ 1008.867274] __kmalloc+0x67f/0x740 [ 1008.867277] __tty_buffer_request_room+0x1fb/0x5c0 [ 1008.867281] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1008.867284] pty_write+0x133/0x200 [ 1008.867287] tty_put_char+0x137/0x160 [ 1008.867290] __process_echoes+0x5c8/0xa40 [ 1008.867293] n_tty_receive_buf_common+0xaeb/0x2ac0 [ 1008.867296] n_tty_receive_buf2+0x34/0x40 [ 1008.867300] tty_ldisc_receive_buf+0xaf/0x1c0 [ 1008.867303] tty_port_default_receive_buf+0x7d/0xb0 [ 1008.867306] flush_to_ldisc+0x228/0x390 [ 1008.867309] process_one_work+0x98e/0x1790 [ 1008.867312] worker_thread+0x98/0xe40 [ 1008.867318] kthread+0x357/0x430 [ 1008.867321] ret_from_fork+0x3a/0x50 [ 1008.867322] [ 1008.867324] -> #2 (&(&port->lock)->rlock){-.-.}: [ 1008.867334] lock_acquire+0x16f/0x3f0 [ 1008.867337] _raw_spin_lock_irqsave+0x95/0xcd [ 1008.867340] tty_port_tty_get+0x22/0x80 [ 1008.867344] tty_port_default_wakeup+0x16/0x40 [ 1008.867347] tty_port_tty_wakeup+0x5d/0x70 [ 1008.867350] uart_write_wakeup+0x46/0x70 [ 1008.867353] serial8250_tx_chars+0x4a4/0xb20 [ 1008.867356] serial8250_handle_irq.part.0+0x1be/0x2e0 [ 1008.867360] serial8250_default_handle_irq+0xc5/0x150 [ 1008.867363] serial8250_interrupt+0xfb/0x1a0 [ 1008.867367] __handle_irq_event_percpu+0x146/0x900 [ 1008.867370] handle_irq_event_percpu+0x74/0x160 [ 1008.867373] handle_irq_event+0xa7/0x134 [ 1008.867376] handle_edge_irq+0x264/0x8e0 [ 1008.867379] handle_irq+0x252/0x3d8 [ 1008.867381] do_IRQ+0x99/0x1d0 [ 1008.867384] ret_from_intr+0x0/0x1e [ 1008.867388] _raw_spin_unlock_irqrestore+0x95/0xe0 [ 1008.867391] uart_write+0x3b6/0x6f0 [ 1008.867394] n_tty_write+0x3ff/0x1150 [ 1008.867396] tty_write+0x45b/0x7a0 [ 1008.867400] redirected_tty_write+0xb2/0xc0 [ 1008.867402] __vfs_write+0x116/0x8e0 [ 1008.867405] vfs_write+0x20c/0x580 [ 1008.867408] ksys_write+0xea/0x1f0 [ 1008.867411] __x64_sys_write+0x73/0xb0 [ 1008.867414] do_syscall_64+0x103/0x610 [ 1008.867417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.867419] [ 1008.867421] -> #1 (&port_lock_key){-.-.}: [ 1008.867430] lock_acquire+0x16f/0x3f0 [ 1008.867433] _raw_spin_lock_irqsave+0x95/0xcd [ 1008.867437] serial8250_console_write+0x253/0x9c0 [ 1008.867440] univ8250_console_write+0x5f/0x70 [ 1008.867443] console_unlock+0xbc6/0x10a0 [ 1008.867446] vprintk_emit+0x280/0x6d0 [ 1008.867449] vprintk_default+0x28/0x30 [ 1008.867452] vprintk_func+0x7e/0x189 [ 1008.867455] printk+0xba/0xed [ 1008.867458] register_console+0x74d/0xb50 [ 1008.867461] univ8250_console_init+0x3e/0x4b [ 1008.867464] console_init+0x4f7/0x761 [ 1008.867467] start_kernel+0x568/0x83c [ 1008.867470] x86_64_start_reservations+0x29/0x2b [ 1008.867473] x86_64_start_kernel+0x77/0x7b [ 1008.867476] secondary_startup_64+0xa4/0xb0 [ 1008.867478] [ 1008.867480] -> #0 (console_owner){-.-.}: [ 1008.867490] __lock_acquire+0x239c/0x3fb0 [ 1008.867492] lock_acquire+0x16f/0x3f0 [ 1008.867495] console_unlock+0x4aa/0x10a0 [ 1008.867498] vprintk_emit+0x280/0x6d0 [ 1008.867501] vprintk_default+0x28/0x30 [ 1008.867504] vprintk_func+0x7e/0x189 [ 1008.867507] printk+0xba/0xed [ 1008.867510] report_bug.cold+0x11/0x5d [ 1008.867512] do_error_trap+0x11b/0x200 [ 1008.867515] do_invalid_op+0x37/0x50 [ 1008.867518] invalid_op+0x14/0x20 [ 1008.867521] __isolate_free_page+0x3b8/0x4c0 [ 1008.867524] compaction_alloc+0xa9b/0x2290 [ 1008.867527] migrate_pages+0x484/0x2cd0 [ 1008.867530] compact_zone+0x1b56/0x38d0 [ 1008.867534] kcompactd_do_work+0x303/0xaa0 [ 1008.867536] kcompactd+0x247/0x890 [ 1008.867539] kthread+0x357/0x430 [ 1008.867542] ret_from_fork+0x3a/0x50 [ 1008.867543] [ 1008.867547] other info that might help us debug this: [ 1008.867548] [ 1008.867551] Chain exists of: [ 1008.867552] console_owner --> &(&port->lock)->rlock --> &(&zone->lock)->rlock [ 1008.867565] [ 1008.867568] Possible unsafe locking scenario: [ 1008.867569] [ 1008.867573] CPU0 CPU1 [ 1008.867576] ---- ---- [ 1008.867577] lock(&(&zone->lock)->rlock); [ 1008.867584] lock(&(&port->lock)->rlock); [ 1008.867591] lock(&(&zone->lock)->rlock); [ 1008.867597] lock(console_owner); [ 1008.867603] [ 1008.867605] *** DEADLOCK *** [ 1008.867607] [ 1008.867609] 2 locks held by kcompactd0/1045: [ 1008.867611] #0: 000000003b40a3c6 (&(&zone->lock)->rlock){..-.}, at: compaction_alloc+0x669/0x2290 [ 1008.867623] #1: 00000000f46e2e9e (console_lock){+.+.}, at: vprintk_emit+0x267/0x6d0 [ 1008.867635] [ 1008.867637] stack backtrace: [ 1008.867641] CPU: 1 PID: 1045 Comm: kcompactd0 Not tainted 5.0.0+ #12 [ 1008.867647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.867649] Call Trace: [ 1008.867652] dump_stack+0x172/0x1f0 [ 1008.867656] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1008.867660] check_prev_add.constprop.0+0xf11/0x23c0 [ 1008.867663] ? check_usage+0x570/0x570 [ 1008.867667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.867670] ? vsnprintf+0x58b/0x1af0 [ 1008.867673] ? graph_lock+0x7b/0x200 [ 1008.867676] ? __lockdep_reset_lock+0x450/0x450 [ 1008.867680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.867683] ? find_first_zero_bit+0x9a/0xc0 [ 1008.867687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.867690] __lock_acquire+0x239c/0x3fb0 [ 1008.867693] ? mark_held_locks+0xf0/0xf0 [ 1008.867696] ? kasan_check_write+0x14/0x20 [ 1008.867698] lock_acquire+0x16f/0x3f0 [ 1008.867701] ? console_unlock+0x440/0x10a0 [ 1008.867704] console_unlock+0x4aa/0x10a0 [ 1008.867708] ? console_unlock+0x440/0x10a0 [ 1008.867710] vprintk_emit+0x280/0x6d0 [ 1008.867713] vprintk_default+0x28/0x30 [ 1008.867716] vprintk_func+0x7e/0x189 [ 1008.867718] printk+0xba/0xed [ 1008.867722] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1008.867725] ? __probe_kernel_read+0x171/0x1c0 [ 1008.867728] ? is_valid_bugaddr+0x9c/0xd0 [ 1008.867731] ? ist_end_non_atomic+0x10/0x10 [ 1008.867740] ? report_bug.cold+0x5/0x5d [ 1008.867743] ? report_bug+0x1cc/0x2b0 [ 1008.867746] ? __isolate_free_page+0x3b8/0x4c0 [ 1008.867749] report_bug.cold+0x11/0x5d [ 1008.867752] do_error_trap+0x11b/0x200 [ 1008.867755] do_invalid_op+0x37/0x50 [ 1008.867758] ? __isolate_free_page+0x3b8/0x4c0 [ 1008.867761] invalid_op+0x14/0x20 [ 1008.867764] RIP: 0010:__isolate_free_page+0x3b8/0x4c0 [ 1008.867775] Code: 83 c4 20 44 89 e1 b8 01 00 00 00 5b 48 d3 e0 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c6 80 fa 71 87 4c 89 ff e8 3a ff 0b 00 0f 0b <0f> 0b 48 c7 c6 80 f6 71 87 4c 89 ff e8 27 ff 0b 00 0f 0b 48 8b 7d [ 1008.867778] RSP: 0018:ffff8880a83b7850 EFLAGS: 00010007 [ 1008.867784] RAX: 0000000000000000 RBX: ffffea0001f01a08 RCX: dffffc0000000000 [ 1008.867789] RDX: 1ffff11025fff916 RSI: 0000000000000005 RDI: ffff88812fffc880 [ 1008.867793] RBP: ffff8880a83b7898 R08: ffff8880a87cc080 R09: ffffed1015076f02 [ 1008.867798] R10: ffffed1015076f01 R11: 0000000000000003 R12: 0000000000000005 [ 1008.867803] R13: 0000000000000005 R14: 0000000000000001 R15: ffff88812fffc880 [ 1008.867806] compaction_alloc+0xa9b/0x2290 [ 1008.867809] ? isolate_freepages_block+0xd40/0xd40 [ 1008.867812] ? trace_hardirqs_on+0x67/0x230 [ 1008.867815] migrate_pages+0x484/0x2cd0 [ 1008.867819] ? __ClearPageMovable+0x250/0x250 [ 1008.867822] ? isolate_freepages_block+0xd40/0xd40 [ 1008.867825] compact_zone+0x1b56/0x38d0 [ 1008.867828] ? compaction_suitable+0x3b0/0x3b0 [ 1008.867832] ? rcu_read_lock_sched_held+0x110/0x130 [ 1008.867836] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.867839] ? compaction_suitable+0xfb/0x3b0 [ 1008.867842] kcompactd_do_work+0x303/0xaa0 [ 1008.867845] ? sysfs_compact_node+0x100/0x100 [ 1008.867848] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1008.867851] kcompactd+0x247/0x890 [ 1008.867854] ? kcompactd_do_work+0xaa0/0xaa0 [ 1008.867857] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1008.867860] ? trace_hardirqs_on+0x67/0x230 [ 1008.867863] ? finish_wait+0x260/0x260 [ 1008.867867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1008.867870] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.867874] ? __kthread_parkme+0xfb/0x1b0 [ 1008.867876] kthread+0x357/0x430 [ 1008.867879] ? kcompactd_do_work+0xaa0/0xaa0 [ 1008.867883] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1008.867886] ret_from_fork+0x3a/0x50 [ 1009.773312] ---[ end trace 889bdccf3a5f8f54 ]--- [ 1009.778070] RIP: 0010:__isolate_free_page+0x3b8/0x4c0 [ 1009.783247] Code: 83 c4 20 44 89 e1 b8 01 00 00 00 5b 48 d3 e0 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c6 80 fa 71 87 4c 89 ff e8 3a ff 0b 00 0f 0b <0f> 0b 48 c7 c6 80 f6 71 87 4c 89 ff e8 27 ff 0b 00 0f 0b 48 8b 7d [ 1009.802129] RSP: 0018:ffff8880a83b7850 EFLAGS: 00010007 [ 1009.807482] RAX: 0000000000000000 RBX: ffffea0001f01a08 RCX: dffffc0000000000 [ 1009.814734] RDX: 1ffff11025fff916 RSI: 0000000000000005 RDI: ffff88812fffc880 [ 1009.821988] RBP: ffff8880a83b7898 R08: ffff8880a87cc080 R09: ffffed1015076f02 [ 1009.829242] R10: ffffed1015076f01 R11: 0000000000000003 R12: 0000000000000005 [ 1009.836496] R13: 0000000000000005 R14: 0000000000000001 R15: ffff88812fffc880 [ 1009.843750] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1009.851953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.857814] CR2: 0000000000aaafe8 CR3: 00000001b48b9000 CR4: 00000000001426e0 [ 1009.865069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1009.872318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1009.879570] Kernel panic - not syncing: Fatal exception [ 1011.036996] Shutting down cpus with NMI [ 1011.041833] Kernel Offset: disabled [ 1011.045451] Rebooting in 86400 seconds..