Warning: Permanently added '[localhost]:33504' (ECDSA) to the list of known hosts. 2026/01/16 14:25:52 fuzzer started 2026/01/16 14:25:53 dialing manager at localhost:42157 syzkaller login: [ 50.104793] cgroup: Unknown subsys name 'net' [ 50.167050] cgroup: Unknown subsys name 'cpuset' [ 50.179868] cgroup: Unknown subsys name 'rlimit' 2026/01/16 14:26:04 syscalls: 2214 2026/01/16 14:26:04 code coverage: enabled 2026/01/16 14:26:04 comparison tracing: enabled 2026/01/16 14:26:04 extra coverage: enabled 2026/01/16 14:26:04 setuid sandbox: enabled 2026/01/16 14:26:04 namespace sandbox: enabled 2026/01/16 14:26:04 Android sandbox: enabled 2026/01/16 14:26:04 fault injection: enabled 2026/01/16 14:26:04 leak checking: enabled 2026/01/16 14:26:04 net packet injection: enabled 2026/01/16 14:26:04 net device setup: enabled 2026/01/16 14:26:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 14:26:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 14:26:04 USB emulation: enabled 2026/01/16 14:26:04 hci packet injection: enabled 2026/01/16 14:26:04 wifi device emulation: enabled 2026/01/16 14:26:04 802.15.4 emulation: enabled 2026/01/16 14:26:04 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 14:26:04 fetching corpus: 50, signal 19596/23155 (executing program) 2026/01/16 14:26:04 fetching corpus: 100, signal 38364/43155 (executing program) 2026/01/16 14:26:04 fetching corpus: 150, signal 46789/52868 (executing program) 2026/01/16 14:26:05 fetching corpus: 200, signal 53996/61217 (executing program) 2026/01/16 14:26:05 fetching corpus: 250, signal 62357/70476 (executing program) 2026/01/16 14:26:05 fetching corpus: 300, signal 66324/75544 (executing program) 2026/01/16 14:26:05 fetching corpus: 349, signal 70835/80958 (executing program) 2026/01/16 14:26:05 fetching corpus: 398, signal 75571/86488 (executing program) 2026/01/16 14:26:05 fetching corpus: 448, signal 78863/90619 (executing program) 2026/01/16 14:26:05 fetching corpus: 498, signal 82281/94835 (executing program) 2026/01/16 14:26:05 fetching corpus: 548, signal 85751/99045 (executing program) 2026/01/16 14:26:06 fetching corpus: 597, signal 88809/102835 (executing program) 2026/01/16 14:26:06 fetching corpus: 647, signal 91429/106079 (executing program) 2026/01/16 14:26:06 fetching corpus: 697, signal 94067/109344 (executing program) 2026/01/16 14:26:06 fetching corpus: 746, signal 96890/112746 (executing program) 2026/01/16 14:26:06 fetching corpus: 796, signal 99896/116176 (executing program) 2026/01/16 14:26:06 fetching corpus: 846, signal 102139/118956 (executing program) 2026/01/16 14:26:06 fetching corpus: 896, signal 104070/121417 (executing program) 2026/01/16 14:26:06 fetching corpus: 945, signal 104881/122963 (executing program) 2026/01/16 14:26:07 fetching corpus: 995, signal 107089/125587 (executing program) 2026/01/16 14:26:07 fetching corpus: 1045, signal 109104/128011 (executing program) 2026/01/16 14:26:07 fetching corpus: 1095, signal 110869/130191 (executing program) 2026/01/16 14:26:07 fetching corpus: 1144, signal 113160/132715 (executing program) 2026/01/16 14:26:07 fetching corpus: 1193, signal 116286/135854 (executing program) 2026/01/16 14:26:07 fetching corpus: 1241, signal 117932/137853 (executing program) 2026/01/16 14:26:07 fetching corpus: 1289, signal 119254/139573 (executing program) 2026/01/16 14:26:07 fetching corpus: 1339, signal 120366/141101 (executing program) 2026/01/16 14:26:08 fetching corpus: 1389, signal 121582/142703 (executing program) 2026/01/16 14:26:08 fetching corpus: 1439, signal 122836/144289 (executing program) 2026/01/16 14:26:08 fetching corpus: 1489, signal 124094/145848 (executing program) 2026/01/16 14:26:08 fetching corpus: 1539, signal 125154/147207 (executing program) 2026/01/16 14:26:08 fetching corpus: 1589, signal 126355/148616 (executing program) 2026/01/16 14:26:08 fetching corpus: 1639, signal 128004/150366 (executing program) 2026/01/16 14:26:08 fetching corpus: 1689, signal 129520/151964 (executing program) 2026/01/16 14:26:09 fetching corpus: 1739, signal 130855/153457 (executing program) 2026/01/16 14:26:09 fetching corpus: 1786, signal 132201/154873 (executing program) 2026/01/16 14:26:09 fetching corpus: 1836, signal 133179/156072 (executing program) 2026/01/16 14:26:09 fetching corpus: 1886, signal 134544/157509 (executing program) 2026/01/16 14:26:09 fetching corpus: 1936, signal 135871/158902 (executing program) 2026/01/16 14:26:09 fetching corpus: 1986, signal 137012/160125 (executing program) 2026/01/16 14:26:09 fetching corpus: 2036, signal 137859/161125 (executing program) 2026/01/16 14:26:09 fetching corpus: 2086, signal 139211/162465 (executing program) 2026/01/16 14:26:10 fetching corpus: 2136, signal 140648/163800 (executing program) 2026/01/16 14:26:10 fetching corpus: 2185, signal 141611/164816 (executing program) 2026/01/16 14:26:10 fetching corpus: 2234, signal 142615/165868 (executing program) 2026/01/16 14:26:10 fetching corpus: 2284, signal 143624/166875 (executing program) 2026/01/16 14:26:10 fetching corpus: 2334, signal 144247/167663 (executing program) 2026/01/16 14:26:10 fetching corpus: 2384, signal 145036/168560 (executing program) 2026/01/16 14:26:10 fetching corpus: 2434, signal 146169/169580 (executing program) 2026/01/16 14:26:11 fetching corpus: 2484, signal 147051/170392 (executing program) 2026/01/16 14:26:11 fetching corpus: 2534, signal 147945/171239 (executing program) 2026/01/16 14:26:11 fetching corpus: 2583, signal 148835/172118 (executing program) 2026/01/16 14:26:11 fetching corpus: 2633, signal 149563/172843 (executing program) 2026/01/16 14:26:11 fetching corpus: 2683, signal 150216/173560 (executing program) 2026/01/16 14:26:11 fetching corpus: 2733, signal 151202/174356 (executing program) 2026/01/16 14:26:11 fetching corpus: 2783, signal 152057/175156 (executing program) 2026/01/16 14:26:11 fetching corpus: 2833, signal 152531/175751 (executing program) 2026/01/16 14:26:12 fetching corpus: 2883, signal 153217/176431 (executing program) 2026/01/16 14:26:12 fetching corpus: 2932, signal 153895/177126 (executing program) 2026/01/16 14:26:12 fetching corpus: 2982, signal 154522/177720 (executing program) 2026/01/16 14:26:12 fetching corpus: 3032, signal 155166/178326 (executing program) 2026/01/16 14:26:12 fetching corpus: 3082, signal 156417/179199 (executing program) 2026/01/16 14:26:12 fetching corpus: 3131, signal 156964/179763 (executing program) 2026/01/16 14:26:12 fetching corpus: 3181, signal 157554/180285 (executing program) 2026/01/16 14:26:12 fetching corpus: 3231, signal 158171/180831 (executing program) 2026/01/16 14:26:13 fetching corpus: 3281, signal 159075/181424 (executing program) 2026/01/16 14:26:13 fetching corpus: 3331, signal 159917/181976 (executing program) 2026/01/16 14:26:13 fetching corpus: 3381, signal 160458/182424 (executing program) 2026/01/16 14:26:13 fetching corpus: 3431, signal 161318/182931 (executing program) 2026/01/16 14:26:13 fetching corpus: 3481, signal 162010/183409 (executing program) 2026/01/16 14:26:13 fetching corpus: 3531, signal 162697/183862 (executing program) 2026/01/16 14:26:13 fetching corpus: 3581, signal 163353/184328 (executing program) 2026/01/16 14:26:13 fetching corpus: 3631, signal 164067/184773 (executing program) 2026/01/16 14:26:14 fetching corpus: 3681, signal 164698/185181 (executing program) 2026/01/16 14:26:14 fetching corpus: 3731, signal 165288/185585 (executing program) 2026/01/16 14:26:14 fetching corpus: 3781, signal 165980/185997 (executing program) 2026/01/16 14:26:14 fetching corpus: 3831, signal 166530/186383 (executing program) 2026/01/16 14:26:14 fetching corpus: 3880, signal 166964/186743 (executing program) 2026/01/16 14:26:14 fetching corpus: 3930, signal 167684/187122 (executing program) 2026/01/16 14:26:14 fetching corpus: 3980, signal 168333/187461 (executing program) 2026/01/16 14:26:14 fetching corpus: 4030, signal 168833/187780 (executing program) 2026/01/16 14:26:15 fetching corpus: 4080, signal 169912/188150 (executing program) 2026/01/16 14:26:15 fetching corpus: 4129, signal 170353/188447 (executing program) 2026/01/16 14:26:15 fetching corpus: 4179, signal 171202/188811 (executing program) 2026/01/16 14:26:15 fetching corpus: 4229, signal 171831/189064 (executing program) 2026/01/16 14:26:15 fetching corpus: 4279, signal 172159/189274 (executing program) 2026/01/16 14:26:15 fetching corpus: 4328, signal 173001/189510 (executing program) 2026/01/16 14:26:15 fetching corpus: 4378, signal 173682/189769 (executing program) 2026/01/16 14:26:15 fetching corpus: 4428, signal 174361/189948 (executing program) 2026/01/16 14:26:15 fetching corpus: 4478, signal 175035/190167 (executing program) 2026/01/16 14:26:16 fetching corpus: 4528, signal 175454/190347 (executing program) 2026/01/16 14:26:16 fetching corpus: 4578, signal 176015/190534 (executing program) 2026/01/16 14:26:16 fetching corpus: 4628, signal 176426/190710 (executing program) 2026/01/16 14:26:16 fetching corpus: 4678, signal 176795/190752 (executing program) 2026/01/16 14:26:16 fetching corpus: 4728, signal 177141/190754 (executing program) 2026/01/16 14:26:16 fetching corpus: 4778, signal 177669/190754 (executing program) 2026/01/16 14:26:16 fetching corpus: 4828, signal 178087/190754 (executing program) 2026/01/16 14:26:16 fetching corpus: 4878, signal 178563/190773 (executing program) 2026/01/16 14:26:16 fetching corpus: 4928, signal 179260/190785 (executing program) 2026/01/16 14:26:17 fetching corpus: 4978, signal 180195/190825 (executing program) 2026/01/16 14:26:17 fetching corpus: 5027, signal 180628/190829 (executing program) 2026/01/16 14:26:17 fetching corpus: 5077, signal 181207/191024 (executing program) 2026/01/16 14:26:17 fetching corpus: 5127, signal 181627/191033 (executing program) 2026/01/16 14:26:17 fetching corpus: 5177, signal 181967/191033 (executing program) 2026/01/16 14:26:17 fetching corpus: 5227, signal 182386/191048 (executing program) 2026/01/16 14:26:18 fetching corpus: 5277, signal 182862/191048 (executing program) 2026/01/16 14:26:18 fetching corpus: 5327, signal 183217/191048 (executing program) 2026/01/16 14:26:18 fetching corpus: 5377, signal 183710/191048 (executing program) 2026/01/16 14:26:18 fetching corpus: 5427, signal 184196/191050 (executing program) 2026/01/16 14:26:18 fetching corpus: 5477, signal 184622/191085 (executing program) 2026/01/16 14:26:18 fetching corpus: 5526, signal 185140/191085 (executing program) 2026/01/16 14:26:18 fetching corpus: 5576, signal 185829/191294 (executing program) 2026/01/16 14:26:18 fetching corpus: 5626, signal 186293/191305 (executing program) 2026/01/16 14:26:19 fetching corpus: 5676, signal 186772/191306 (executing program) 2026/01/16 14:26:19 fetching corpus: 5725, signal 187258/191309 (executing program) 2026/01/16 14:26:19 fetching corpus: 5775, signal 187608/191313 (executing program) 2026/01/16 14:26:19 fetching corpus: 5825, signal 187926/191321 (executing program) 2026/01/16 14:26:19 fetching corpus: 5875, signal 188321/191321 (executing program) 2026/01/16 14:26:19 fetching corpus: 5925, signal 188620/191323 (executing program) 2026/01/16 14:26:19 fetching corpus: 5975, signal 189106/191385 (executing program) 2026/01/16 14:26:19 fetching corpus: 6025, signal 189731/191427 (executing program) 2026/01/16 14:26:19 fetching corpus: 6071, signal 190085/191427 (executing program) 2026/01/16 14:26:19 fetching corpus: 6072, signal 190101/191427 (executing program) 2026/01/16 14:26:19 fetching corpus: 6072, signal 190101/191427 (executing program) 2026/01/16 14:26:22 starting 8 fuzzer processes 14:26:22 executing program 0: symlink(&(0x7f0000000000)='./file1/../file0/../file0\x00', &(0x7f0000000280)='./file1\x00') unlink(&(0x7f0000000040)='./file1/../file0/../file0\x00') 14:26:22 executing program 2: setresuid(0x0, 0xee00, 0xffffffffffffffff) 14:26:22 executing program 1: process_vm_writev(0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001e40)=[{0x0}], 0x1, 0x0) 14:26:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x1f, 0xfffffffffffffff7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe2(0x0, 0x4000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028c87bb665d3494a4b38ee85a413bfe88b986a0905"], 0x9) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) [ 77.626923] audit: type=1400 audit(1768573582.132:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:26:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf}}) 14:26:22 executing program 4: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 14:26:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() [ 78.777329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.781722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.784013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.786704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.788738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.791940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.801005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.806694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.808315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.813809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.828805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.837645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.839977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.847831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.850921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.900784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.902939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.904311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.905868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.907107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.915757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.918349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.920148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.921505] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.924404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.926350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.933656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.936620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.939112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.942763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.972087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.978076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.995248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.997235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.025114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.028737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.040757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.043757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.088872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.102626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.867169] Bluetooth: hci2: command tx timeout [ 80.867637] Bluetooth: hci0: command tx timeout [ 80.868195] Bluetooth: hci1: command tx timeout [ 80.994625] Bluetooth: hci4: command tx timeout [ 80.995222] Bluetooth: hci3: command tx timeout [ 80.995822] Bluetooth: hci5: command tx timeout [ 81.121742] Bluetooth: hci6: command tx timeout [ 81.249618] Bluetooth: hci7: command tx timeout [ 82.914133] Bluetooth: hci0: command tx timeout [ 82.915175] Bluetooth: hci2: command tx timeout [ 82.915211] Bluetooth: hci1: command tx timeout [ 83.041695] Bluetooth: hci3: command tx timeout [ 83.041725] Bluetooth: hci5: command tx timeout [ 83.043170] Bluetooth: hci4: command tx timeout [ 83.169633] Bluetooth: hci6: command tx timeout [ 83.298656] Bluetooth: hci7: command tx timeout [ 84.961633] Bluetooth: hci1: command tx timeout [ 84.962071] Bluetooth: hci0: command tx timeout [ 84.962454] Bluetooth: hci2: command tx timeout [ 85.089592] Bluetooth: hci4: command tx timeout [ 85.090017] Bluetooth: hci3: command tx timeout [ 85.090404] Bluetooth: hci5: command tx timeout [ 85.218135] Bluetooth: hci6: command tx timeout [ 85.346579] Bluetooth: hci7: command tx timeout [ 87.010643] Bluetooth: hci2: command tx timeout [ 87.011108] Bluetooth: hci0: command tx timeout [ 87.011499] Bluetooth: hci1: command tx timeout [ 87.138639] Bluetooth: hci3: command tx timeout [ 87.139046] Bluetooth: hci5: command tx timeout [ 87.139427] Bluetooth: hci4: command tx timeout [ 87.265700] Bluetooth: hci6: command tx timeout [ 87.394733] Bluetooth: hci7: command tx timeout [ 111.680022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.680713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.856857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.857492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.102557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.103199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.336654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.337284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.350624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.351245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:26:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf}}) 14:26:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf}}) [ 112.470866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.471470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:26:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf}}) [ 112.535798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.536384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:26:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x0) [ 112.583700] audit: type=1400 audit(1768573617.089:8): avc: denied { open } for pid=3878 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.585469] audit: type=1400 audit(1768573617.089:9): avc: denied { kernel } for pid=3878 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.614865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.615493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.619166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.619797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.658842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.659459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.685139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.695182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.743437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.744063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.763222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.765072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.828995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.829622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.906664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.907223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.977045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.977655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:26:57 executing program 4: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:57 executing program 0: symlink(&(0x7f0000000000)='./file1/../file0/../file0\x00', &(0x7f0000000280)='./file1\x00') unlink(&(0x7f0000000040)='./file1/../file0/../file0\x00') 14:26:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x1f, 0xfffffffffffffff7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe2(0x0, 0x4000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028c87bb665d3494a4b38ee85a413bfe88b986a0905"], 0x9) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 14:26:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() 14:26:57 executing program 2: setresuid(0x0, 0xee00, 0xffffffffffffffff) 14:26:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 14:26:57 executing program 1: process_vm_writev(0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001e40)=[{0x0}], 0x1, 0x0) 14:26:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x0) 14:26:57 executing program 4: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 14:26:57 executing program 0: symlink(&(0x7f0000000000)='./file1/../file0/../file0\x00', &(0x7f0000000280)='./file1\x00') unlink(&(0x7f0000000040)='./file1/../file0/../file0\x00') 14:26:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x0) 14:26:58 executing program 2: setresuid(0x0, 0xee00, 0xffffffffffffffff) 14:26:58 executing program 1: process_vm_writev(0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001e40)=[{0x0}], 0x1, 0x0) 14:26:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() 14:26:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x1f, 0xfffffffffffffff7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe2(0x0, 0x4000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028c87bb665d3494a4b38ee85a413bfe88b986a0905"], 0x9) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 14:26:58 executing program 0: symlink(&(0x7f0000000000)='./file1/../file0/../file0\x00', &(0x7f0000000280)='./file1\x00') unlink(&(0x7f0000000040)='./file1/../file0/../file0\x00') 14:26:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x0) 14:26:58 executing program 4: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 14:26:58 executing program 2: setresuid(0x0, 0xee00, 0xffffffffffffffff) 14:26:58 executing program 1: process_vm_writev(0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001e40)=[{0x0}], 0x1, 0x0) 14:26:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() 14:26:58 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 14:26:58 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x5) 14:26:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:26:58 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 14:26:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x1f, 0xfffffffffffffff7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe2(0x0, 0x4000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028c87bb665d3494a4b38ee85a413bfe88b986a0905"], 0x9) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 14:26:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001"], 0x34}], 0x1}, 0x0) 14:26:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) [ 113.902565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 14:26:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:26:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001"], 0x34}], 0x1}, 0x0) 14:26:58 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r3, &(0x7f0000000140), 0x8) 14:26:58 executing program 4: get_mempolicy(0x0, &(0x7f0000000640), 0x0, &(0x7f0000864000/0x1000)=nil, 0x0) 14:26:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 114.020602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 14:26:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 14:26:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 14:26:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001"], 0x34}], 0x1}, 0x0) 14:26:58 executing program 4: get_mempolicy(0x0, &(0x7f0000000640), 0x0, &(0x7f0000864000/0x1000)=nil, 0x0) [ 114.161609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 14:26:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:26:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001"], 0x34}], 0x1}, 0x0) 14:26:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 14:26:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000080)="5473da3cdfe7588edce57d2f3b3b4afe1be7e48388ad24283582dc8f4838290e3d78163d9030abaff4a9769d086ab060d07b8080e845239d592a061fda92da202fee88e12853b8aec83d23990b7c65d34a497935755bdf3702829c8e959dfdd44196acfd5976f8aac01cb5b0c8d6b6d8ecf309ee8eb42c68cf25181d1ffe1540157ddacae4e33eed0e55578c0565b4b27130c40c9fb0ad2a5b3900771ffd7e6b331b4d683c4ce37dd09953cf1c8cd30a", 0xb0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 14:26:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 14:26:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 14:26:58 executing program 4: get_mempolicy(0x0, &(0x7f0000000640), 0x0, &(0x7f0000864000/0x1000)=nil, 0x0) 14:26:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 14:26:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 14:26:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 114.361897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 14:26:58 executing program 4: get_mempolicy(0x0, &(0x7f0000000640), 0x0, &(0x7f0000864000/0x1000)=nil, 0x0) 14:26:58 executing program 5: r0 = io_uring_setup(0x3965, &(0x7f0000000340)) io_uring_enter(r0, 0x0, 0xf0aa, 0x3, &(0x7f00000003c0), 0x8) 14:26:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 14:26:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000080)="5473da3cdfe7588edce57d2f3b3b4afe1be7e48388ad24283582dc8f4838290e3d78163d9030abaff4a9769d086ab060d07b8080e845239d592a061fda92da202fee88e12853b8aec83d23990b7c65d34a497935755bdf3702829c8e959dfdd44196acfd5976f8aac01cb5b0c8d6b6d8ecf309ee8eb42c68cf25181d1ffe1540157ddacae4e33eed0e55578c0565b4b27130c40c9fb0ad2a5b3900771ffd7e6b331b4d683c4ce37dd09953cf1c8cd30a", 0xb0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 14:26:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 14:26:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 14:26:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 14:26:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:26:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:26:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 14:26:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 14:26:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000080)="5473da3cdfe7588edce57d2f3b3b4afe1be7e48388ad24283582dc8f4838290e3d78163d9030abaff4a9769d086ab060d07b8080e845239d592a061fda92da202fee88e12853b8aec83d23990b7c65d34a497935755bdf3702829c8e959dfdd44196acfd5976f8aac01cb5b0c8d6b6d8ecf309ee8eb42c68cf25181d1ffe1540157ddacae4e33eed0e55578c0565b4b27130c40c9fb0ad2a5b3900771ffd7e6b331b4d683c4ce37dd09953cf1c8cd30a", 0xb0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 14:26:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:26:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) [ 114.665970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:26:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 14:26:59 executing program 5: r0 = io_uring_setup(0x3965, &(0x7f0000000340)) io_uring_enter(r0, 0x0, 0xf0aa, 0x3, &(0x7f00000003c0), 0x8) 14:26:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:26:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:26:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:26:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000080)="5473da3cdfe7588edce57d2f3b3b4afe1be7e48388ad24283582dc8f4838290e3d78163d9030abaff4a9769d086ab060d07b8080e845239d592a061fda92da202fee88e12853b8aec83d23990b7c65d34a497935755bdf3702829c8e959dfdd44196acfd5976f8aac01cb5b0c8d6b6d8ecf309ee8eb42c68cf25181d1ffe1540157ddacae4e33eed0e55578c0565b4b27130c40c9fb0ad2a5b3900771ffd7e6b331b4d683c4ce37dd09953cf1c8cd30a", 0xb0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 14:26:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:26:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:27:00 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:27:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 14:27:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:27:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 5: r0 = io_uring_setup(0x3965, &(0x7f0000000340)) io_uring_enter(r0, 0x0, 0xf0aa, 0x3, &(0x7f00000003c0), 0x8) 14:27:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:27:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0) 14:27:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:27:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 14:27:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 14:27:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:01 executing program 7: prctl$PR_CAPBSET_DROP(0x18, 0x10001) 14:27:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 14:27:01 executing program 7: prctl$PR_CAPBSET_DROP(0x18, 0x10001) 14:27:01 executing program 5: r0 = io_uring_setup(0x3965, &(0x7f0000000340)) io_uring_enter(r0, 0x0, 0xf0aa, 0x3, &(0x7f00000003c0), 0x8) 14:27:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:27:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 14:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x180, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 14:27:01 executing program 7: prctl$PR_CAPBSET_DROP(0x18, 0x10001) 14:27:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 14:27:01 executing program 0: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0x9, 0xfffffffffffffffe) 14:27:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14:27:01 executing program 7: prctl$PR_CAPBSET_DROP(0x18, 0x10001) 14:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x180, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 14:27:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x180, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 14:27:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 117.285724] audit: type=1326 audit(1768573621.791:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4137 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd87b8ab19 code=0x0 14:27:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14:27:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 14:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x180, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) [ 117.426016] audit: type=1400 audit(1768573621.904:11): avc: denied { block_suspend } for pid=4152 comm="syz-executor.7" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 117.448252] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 117.448278] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 117.449611] Bluetooth: hci7: adv larger than maximum supported [ 117.449637] Bluetooth: hci7: adv larger than maximum supported [ 117.450231] Bluetooth: hci7: adv larger than maximum supported [ 117.451092] Bluetooth: hci7: Malformed LE Event: 0x0d [ 118.067954] audit: type=1326 audit(1768573622.574:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4137 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd87b8ab19 code=0x0 14:27:02 executing program 0: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0x9, 0xfffffffffffffffe) 14:27:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 14:27:02 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x80000000) 14:27:02 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14:27:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xb5c, 0x4) getpgrp(0x0) 14:27:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) 14:27:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) [ 118.264379] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 118.264404] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 118.268751] Bluetooth: hci4: adv larger than maximum supported [ 118.268778] Bluetooth: hci4: adv larger than maximum supported [ 118.269352] Bluetooth: hci4: adv larger than maximum supported [ 118.269881] Bluetooth: hci4: Malformed LE Event: 0x0d [ 118.273375] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 118.273391] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 118.275098] Bluetooth: hci7: adv larger than maximum supported [ 118.275111] Bluetooth: hci7: adv larger than maximum supported [ 118.275922] Bluetooth: hci7: adv larger than maximum supported [ 118.276406] Bluetooth: hci7: Malformed LE Event: 0x0d 14:27:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:02 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x80000000) [ 118.351662] audit: type=1326 audit(1768573622.857:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4184 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd87b8ab19 code=0x0 14:27:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 118.395613] Bluetooth: hci5: unexpected event 0x3e length: 431 > 260 [ 118.395644] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260 [ 118.398230] Bluetooth: hci5: adv larger than maximum supported [ 118.398256] Bluetooth: hci5: Malformed LE Event: 0x0d 14:27:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) 14:27:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 14:27:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) [ 118.556172] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 118.556197] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 118.559397] Bluetooth: hci4: Malformed LE Event: 0x0d [ 118.560172] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260 [ 118.560188] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260 [ 118.561582] Bluetooth: hci3: Malformed LE Event: 0x0d 14:27:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:27:03 executing program 0: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0x9, 0xfffffffffffffffe) 14:27:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 14:27:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x80000000) [ 119.228693] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 119.228720] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 119.230258] Bluetooth: hci4: Malformed LE Event: 0x0d [ 119.246146] audit: type=1326 audit(1768573623.752:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4214 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd87b8ab19 code=0x0 [ 119.266887] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 119.266911] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 119.268027] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260 [ 119.268314] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260 [ 119.268347] Bluetooth: hci7: Malformed LE Event: 0x0d [ 119.268884] Bluetooth: hci3: Malformed LE Event: 0x0d 14:27:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 14:27:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) [ 119.331097] Bluetooth: hci5: unexpected event 0x3e length: 431 > 260 [ 119.331122] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260 [ 119.332191] Bluetooth: hci5: Malformed LE Event: 0x0d 14:27:03 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x80000000) 14:27:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:27:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) 14:27:03 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 119.473638] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 119.474196] Bluetooth: hci7: Malformed LE Event: 0x0d [ 119.511426] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260 [ 119.512471] Bluetooth: hci3: Malformed LE Event: 0x0d 14:27:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) 14:27:04 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:27:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:04 executing program 0: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0x9, 0xfffffffffffffffe) 14:27:04 executing program 1: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:04 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x9, r3, r1, 0xfffffffffffffffc, 0x0) 14:27:04 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:27:04 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x46, 0xfffffffffffffffe, 0x0) 14:27:04 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x9, r3, r1, 0xfffffffffffffffc, 0x0) [ 120.154695] audit: type=1326 audit(1768573624.655:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4253 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd87b8ab19 code=0x0 14:27:04 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.184968] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260 [ 120.185638] Bluetooth: hci5: Malformed LE Event: 0x0d 14:27:04 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x46, 0xfffffffffffffffe, 0x0) 14:27:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 14:27:05 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x9, r3, r1, 0xfffffffffffffffc, 0x0) 14:27:05 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x100}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:27:05 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:05 executing program 1: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x46, 0xfffffffffffffffe, 0x0) 14:27:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) 14:27:05 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0) 14:27:05 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:05 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x9, r3, r1, 0xfffffffffffffffc, 0x0) 14:27:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x46, 0xfffffffffffffffe, 0x0) 14:27:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 14:27:05 executing program 1: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:05 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 14:27:05 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0) 14:27:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)='5', 0x1}]) 14:27:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:05 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0) 14:27:05 executing program 1: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) [ 121.442358] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 121.443832] Bluetooth: hci7: Injecting HCI hardware error event [ 121.445613] Bluetooth: hci7: hardware error 0x00 14:27:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 14:27:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 14:27:06 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0) 14:27:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 14:27:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 14:27:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 14:27:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)='5', 0x1}]) 14:27:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 14:27:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)='5', 0x1}]) 14:27:06 executing program 4: prctl$PR_SET_MM_MAP(0x4e, 0xe, 0x0, 0x0) 14:27:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) [ 122.225753] [ 122.226030] ===================================== [ 122.226655] WARNING: bad unlock balance detected! [ 122.227298] 6.19.0-rc5-next-20260116 #1 Not tainted [ 122.227956] ------------------------------------- [ 122.228581] syz-executor.4/4361 is trying to release lock (rcu_read_lock) at: [ 122.235136] [] __wait_on_freeing_inode+0x105/0x350 [ 122.236008] but there are no more locks to release! [ 122.236648] [ 122.236648] other info that might help us debug this: [ 122.237502] 4 locks held by syz-executor.4/4361: [ 122.238123] #0: ffff88800f7a23f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 122.239297] #1: ffff88804e0f3d10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 122.240608] #2: ffff88800f7a6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 122.241783] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 122.242991] [ 122.242991] stack backtrace: [ 122.243598] CPU: 0 UID: 0 PID: 4361 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 122.243623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.243635] Call Trace: [ 122.243642] [ 122.243649] dump_stack_lvl+0xca/0x120 [ 122.243694] ? __wait_on_freeing_inode+0x105/0x350 [ 122.243723] print_unlock_imbalance_bug+0x118/0x130 [ 122.243748] ? __wait_on_freeing_inode+0x105/0x350 [ 122.243774] lock_release+0x1ee/0x270 [ 122.243804] __wait_on_freeing_inode+0x10a/0x350 [ 122.243829] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.243856] ? __pfx_var_wake_function+0x10/0x10 [ 122.243885] ? lock_is_held_type+0x9e/0x120 [ 122.243905] insert_inode_locked+0x25f/0x890 [ 122.243934] __ext4_new_inode+0x223d/0x4cd0 [ 122.243963] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.243987] ? __pfx___dquot_initialize+0x10/0x10 [ 122.244018] ? __pfx_avc_has_perm+0x10/0x10 [ 122.244044] ext4_symlink+0x623/0xb40 [ 122.244076] ? __pfx_ext4_symlink+0x10/0x10 [ 122.244103] ? security_inode_permission+0x72/0xe0 [ 122.244125] vfs_symlink+0x44b/0x840 [ 122.244153] filename_symlinkat+0x158/0x440 [ 122.244178] ? __pfx_filename_symlinkat+0x10/0x10 [ 122.244201] ? strncpy_from_user+0x21b/0x2f0 [ 122.244229] __x64_sys_symlink+0x82/0x110 [ 122.244252] do_syscall_64+0xbf/0x420 [ 122.244274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.244295] RIP: 0033:0x7f12ac366427 [ 122.244310] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.244329] RSP: 002b:00007ffc0ef2b4c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.244348] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12ac366427 [ 122.244360] RDX: ffffffffffffffbc RSI: 00007f12ac3c100e RDI: 00007f12ac3c01dd [ 122.244373] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc0ef2af40 [ 122.244386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.244397] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc0ef2b590 [ 122.244415] [ 122.269877] ------------[ cut here ]------------ [ 122.273008] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.4/4361 [ 122.276672] Modules linked in: [ 122.277176] CPU: 0 UID: 0 PID: 4361 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 122.278614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.279771] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 122.280617] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 122.283038] RSP: 0018:ffff88804ef0f9a0 EFLAGS: 00010286 [ 122.283916] RAX: 00000000ffffffff RBX: ffff88804bfd5280 RCX: ffffffff815660f7 [ 122.284917] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88804bfd567c [ 122.285918] RBP: ffff88804bfd5280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 122.286926] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804bfd5280 [ 122.287944] R13: 0000000000000001 R14: ffffffff85c0f860 R15: ffff88804e0f2938 [ 122.288964] FS: 0000555572711400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 122.290092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.290935] CR2: 00007f835c1a73a4 CR3: 000000004a087000 CR4: 0000000000350ef0 [ 122.291961] Call Trace: [ 122.292358] [ 122.293633] __wait_on_freeing_inode+0x10f/0x350 [ 122.294855] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.296831] ? __pfx_var_wake_function+0x10/0x10 [ 122.299020] ? lock_is_held_type+0x9e/0x120 [ 122.300979] insert_inode_locked+0x25f/0x890 [ 122.303899] __ext4_new_inode+0x223d/0x4cd0 [ 122.308312] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.310486] ? __pfx___dquot_initialize+0x10/0x10 [ 122.311900] ? __pfx_avc_has_perm+0x10/0x10 [ 122.315050] ext4_symlink+0x623/0xb40 [ 122.319093] ? __pfx_ext4_symlink+0x10/0x10 [ 122.320958] ? security_inode_permission+0x72/0xe0 [ 122.323884] vfs_symlink+0x44b/0x840 [ 122.326163] filename_symlinkat+0x158/0x440 [ 122.328188] ? __pfx_filename_symlinkat+0x10/0x10 [ 122.329494] ? strncpy_from_user+0x21b/0x2f0 [ 122.332932] __x64_sys_symlink+0x82/0x110 [ 122.334215] do_syscall_64+0xbf/0x420 [ 122.335689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.336620] RIP: 0033:0x7f12ac366427 [ 122.337233] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.339671] RSP: 002b:00007ffc0ef2b4c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.340747] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12ac366427 [ 122.341757] RDX: ffffffffffffffbc RSI: 00007f12ac3c100e RDI: 00007f12ac3c01dd [ 122.342772] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc0ef2af40 [ 122.343794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.344810] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc0ef2b590 [ 122.349702] [ 122.350028] irq event stamp: 605 [ 122.350465] hardirqs last enabled at (605): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 122.351978] hardirqs last disabled at (604): [] _raw_spin_lock_irqsave+0x53/0x60 [ 122.353330] softirqs last enabled at (600): [] kernel_fpu_end+0x59/0x70 [ 122.354590] softirqs last disabled at (598): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 122.355981] ---[ end trace 0000000000000000 ]--- [ 122.358542] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 122.359318] Bluetooth: hci4: Injecting HCI hardware error event [ 122.359998] Bluetooth: hci4: hardware error 0x00 [ 122.402609] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 122.404680] Bluetooth: hci5: Injecting HCI hardware error event [ 122.405281] Bluetooth: hci5: hardware error 0x00 14:27:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)='5', 0x1}]) 14:27:06 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 14:27:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 14:27:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:06 executing program 4: prctl$PR_SET_MM_MAP(0x4e, 0xe, 0x0, 0x0) 14:27:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18"], 0x18}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="392eb7b2d80526ce70349124f78183e7b2c872f5513e4e9099578e922a30d78d5f8357324083486603f14920b9e02c41d82ea31ec72a4270c08c9bc6d84c594c36b2d03a4bc04aaa3a4700fd43cde118e776d91cc0a27f422f1a9a187859b860dcc90c9b461ee32cf5", 0x69}, {&(0x7f0000000100)="1c743b68b2894b22f27c82552404ebf00638a31a837cf00555d7c360708a0d97f62d280e826d3b0431b79784ee7389516cac244fe5a3755b21b10af7de1ae3a3564e64e36b23a35df4a2c247a54af3aecbdac1f60d859942aa7e3ccb673745a2272c3c07b380c7", 0x67}, {&(0x7f0000000180)="1333259355e1becff71a9c7e5921a10270482a2c83625978ad6d1d28d9bf09627effe6c22340add21f97cf2d9a01bb6fbf3c5985fc9f1ef5a9085f3090a0f6b33c842d06ae8655a937d6dfb210e07a24a63f44cda4cf5a2aac1f64181e692d42b499f9d7663378e8539708b861bfd793bb242f9b0083", 0x76}, {&(0x7f0000000200)="ec", 0x1}, {&(0x7f0000000240)="9e463a082cb57c87837148ff9a0d066a88e6358b8f63cdb6c3dfdda6908a99109a6b", 0x22}], 0x5}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="bea7bfda57e0c34dc9211d4e10e15e341dc90e7bd9f148904f0ce5ad503b134abd7782e43244a6a4fc505f7ea2cf2469e613852c5dd62c54624f62ab6b013eef66daf1057c9ef8ccedaa5b0a13b4166391fdc450b1cc34add0125eafac96baaaeef2d33e61180c9bd04575dc0d71c8f365276b23d10aabc888ecf4844b7c6c4a9750552a21a5851b18cd4985add28e5e2bbf46268c86b248faa442583a1b11b2fba36c09786147a07e05f52fb26280fbbcc734c525e7f160e0f3b76a0514e1cb501eb446ad2117d1b61ea081dac0527b409e23badf35d2513acf13c65e3ecc45379d2a154f853309ad53", 0xea}, {&(0x7f00000004c0)="0e5eb910e19f0b9510c04ed084c35fe3290e51bacde749d413889c96799edb8fa5585cdd3a2a14ff5cccb35301c4", 0x2e}, {&(0x7f0000000500)="d26389f48c6feb63ffdf867c34f42fbe77187c740f07d3a6cdf710a875ae634545808a971e7c0a77bacfabb1b445178ea49be3089d39abc691a698c86c5217984e590e0f398fb7e912d6d5fc4f66632c5d68e165050764f56dee599f3d8f798bcae9956798b44efe8d0e22019962a274552c54f9cf5511e3c9c5c9ebede154db6d90199b7e828011825167ef", 0x8c}, {&(0x7f00000015c0)="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", 0x294}], 0x4}}], 0x3, 0xc000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) [ 122.593894] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 122.594878] Bluetooth: hci3: Injecting HCI hardware error event [ 122.595702] Bluetooth: hci3: hardware error 0x00 14:27:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353033313039333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003b6f4d0472b34eacba0268aaada5ab8e010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffddf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000ddf4655fddf4655fddf4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000ddf4655fddf4655fddf4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000002000200000000000800030000000af30100040000000000000000000000010000001f000000000000000000000000000000000000000000000000000000000000000000000000000000e56bfc17000000000000000000000000000000000000000000000000ed8100001a040000ddf4655fddf4655fddf4655f00000000000001000400000000000800010000000af301000400000000000000000000000200000027000000000000000000000000000000000000000000000000000000000000000000000000000000694f777d000000000000000000000000000000000000000000000000ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3235303331303933372f66696c65302f66696c6530000000000000000000000000000000000000000000006177ccbb000000000000000000000000000000000000000000000000ed8100000a000000ddf4655fddf4655fddf4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000029000000000000000000000000000000000000000000000000000000000000000000000000000000dfa38368200000000000000000000000000000000000000000000000ed81000028230000ddf4655fddf4655fddf4655f00000000000002001200000000000800010000000af30100040000000000000000000000090000002a00000000000000000000000000000000000000000000000000000000000000000000000000000079189cdc000000000000000000000000000000000000000000000000ed81000064000000ddf4655fddf4655fddf4655f00000000000001000200000000000800010000000af30100040000000000000000000000010000003300000000000000000000000000000000000000000000000000000000000000000000000000000007b8a9eb00"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) 14:27:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:27:07 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f0000000340)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='.', 0x1}]) 14:27:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x1f, 0xfffffffffffffff7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe2(&(0x7f0000000080), 0x4000) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 14:27:07 executing program 4: prctl$PR_SET_MM_MAP(0x4e, 0xe, 0x0, 0x0) 14:27:07 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 14:27:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18"], 0x18}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="392eb7b2d80526ce70349124f78183e7b2c872f5513e4e9099578e922a30d78d5f8357324083486603f14920b9e02c41d82ea31ec72a4270c08c9bc6d84c594c36b2d03a4bc04aaa3a4700fd43cde118e776d91cc0a27f422f1a9a187859b860dcc90c9b461ee32cf5", 0x69}, {&(0x7f0000000100)="1c743b68b2894b22f27c82552404ebf00638a31a837cf00555d7c360708a0d97f62d280e826d3b0431b79784ee7389516cac244fe5a3755b21b10af7de1ae3a3564e64e36b23a35df4a2c247a54af3aecbdac1f60d859942aa7e3ccb673745a2272c3c07b380c7", 0x67}, {&(0x7f0000000180)="1333259355e1becff71a9c7e5921a10270482a2c83625978ad6d1d28d9bf09627effe6c22340add21f97cf2d9a01bb6fbf3c5985fc9f1ef5a9085f3090a0f6b33c842d06ae8655a937d6dfb210e07a24a63f44cda4cf5a2aac1f64181e692d42b499f9d7663378e8539708b861bfd793bb242f9b0083", 0x76}, {&(0x7f0000000200)="ec", 0x1}, {&(0x7f0000000240)="9e463a082cb57c87837148ff9a0d066a88e6358b8f63cdb6c3dfdda6908a99109a6b", 0x22}], 0x5}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="bea7bfda57e0c34dc9211d4e10e15e341dc90e7bd9f148904f0ce5ad503b134abd7782e43244a6a4fc505f7ea2cf2469e613852c5dd62c54624f62ab6b013eef66daf1057c9ef8ccedaa5b0a13b4166391fdc450b1cc34add0125eafac96baaaeef2d33e61180c9bd04575dc0d71c8f365276b23d10aabc888ecf4844b7c6c4a9750552a21a5851b18cd4985add28e5e2bbf46268c86b248faa442583a1b11b2fba36c09786147a07e05f52fb26280fbbcc734c525e7f160e0f3b76a0514e1cb501eb446ad2117d1b61ea081dac0527b409e23badf35d2513acf13c65e3ecc45379d2a154f853309ad53", 0xea}, {&(0x7f00000004c0)="0e5eb910e19f0b9510c04ed084c35fe3290e51bacde749d413889c96799edb8fa5585cdd3a2a14ff5cccb35301c4", 0x2e}, {&(0x7f0000000500)="d26389f48c6feb63ffdf867c34f42fbe77187c740f07d3a6cdf710a875ae634545808a971e7c0a77bacfabb1b445178ea49be3089d39abc691a698c86c5217984e590e0f398fb7e912d6d5fc4f66632c5d68e165050764f56dee599f3d8f798bcae9956798b44efe8d0e22019962a274552c54f9cf5511e3c9c5c9ebede154db6d90199b7e828011825167ef", 0x8c}, {&(0x7f00000015c0)="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", 0x294}], 0x4}}], 0x3, 0xc000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) [ 122.703117] loop3: detected capacity change from 0 to 512 [ 122.729350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 14:27:07 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 14:27:07 executing program 4: prctl$PR_SET_MM_MAP(0x4e, 0xe, 0x0, 0x0) 14:27:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18"], 0x18}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="392eb7b2d80526ce70349124f78183e7b2c872f5513e4e9099578e922a30d78d5f8357324083486603f14920b9e02c41d82ea31ec72a4270c08c9bc6d84c594c36b2d03a4bc04aaa3a4700fd43cde118e776d91cc0a27f422f1a9a187859b860dcc90c9b461ee32cf5", 0x69}, {&(0x7f0000000100)="1c743b68b2894b22f27c82552404ebf00638a31a837cf00555d7c360708a0d97f62d280e826d3b0431b79784ee7389516cac244fe5a3755b21b10af7de1ae3a3564e64e36b23a35df4a2c247a54af3aecbdac1f60d859942aa7e3ccb673745a2272c3c07b380c7", 0x67}, {&(0x7f0000000180)="1333259355e1becff71a9c7e5921a10270482a2c83625978ad6d1d28d9bf09627effe6c22340add21f97cf2d9a01bb6fbf3c5985fc9f1ef5a9085f3090a0f6b33c842d06ae8655a937d6dfb210e07a24a63f44cda4cf5a2aac1f64181e692d42b499f9d7663378e8539708b861bfd793bb242f9b0083", 0x76}, {&(0x7f0000000200)="ec", 0x1}, {&(0x7f0000000240)="9e463a082cb57c87837148ff9a0d066a88e6358b8f63cdb6c3dfdda6908a99109a6b", 0x22}], 0x5}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="bea7bfda57e0c34dc9211d4e10e15e341dc90e7bd9f148904f0ce5ad503b134abd7782e43244a6a4fc505f7ea2cf2469e613852c5dd62c54624f62ab6b013eef66daf1057c9ef8ccedaa5b0a13b4166391fdc450b1cc34add0125eafac96baaaeef2d33e61180c9bd04575dc0d71c8f365276b23d10aabc888ecf4844b7c6c4a9750552a21a5851b18cd4985add28e5e2bbf46268c86b248faa442583a1b11b2fba36c09786147a07e05f52fb26280fbbcc734c525e7f160e0f3b76a0514e1cb501eb446ad2117d1b61ea081dac0527b409e23badf35d2513acf13c65e3ecc45379d2a154f853309ad53", 0xea}, {&(0x7f00000004c0)="0e5eb910e19f0b9510c04ed084c35fe3290e51bacde749d413889c96799edb8fa5585cdd3a2a14ff5cccb35301c4", 0x2e}, {&(0x7f0000000500)="d26389f48c6feb63ffdf867c34f42fbe77187c740f07d3a6cdf710a875ae634545808a971e7c0a77bacfabb1b445178ea49be3089d39abc691a698c86c5217984e590e0f398fb7e912d6d5fc4f66632c5d68e165050764f56dee599f3d8f798bcae9956798b44efe8d0e22019962a274552c54f9cf5511e3c9c5c9ebede154db6d90199b7e828011825167ef", 0x8c}, {&(0x7f00000015c0)="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", 0x294}], 0x4}}], 0x3, 0xc000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) [ 122.742092] ext4 filesystem being mounted at /syzkaller-testdir701240106/syzkaller.uKofG8/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) 14:27:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x20000000000600}, {&(0x7f0000000040)="e6a38010ae46f52bdd524affa3fe8bd44852bc95dd15a22e374336f3b96edd17f5235080ee6141557adc3fd7331ff0dcf453f59140db5b02ed", 0x39, 0x1d4}], 0x0, &(0x7f0000010d00)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:27:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:27:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00', 0x0}) 14:27:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x31e, 0x0) [ 122.792616] loop0: detected capacity change from 0 to 131078 14:27:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18"], 0x18}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="392eb7b2d80526ce70349124f78183e7b2c872f5513e4e9099578e922a30d78d5f8357324083486603f14920b9e02c41d82ea31ec72a4270c08c9bc6d84c594c36b2d03a4bc04aaa3a4700fd43cde118e776d91cc0a27f422f1a9a187859b860dcc90c9b461ee32cf5", 0x69}, {&(0x7f0000000100)="1c743b68b2894b22f27c82552404ebf00638a31a837cf00555d7c360708a0d97f62d280e826d3b0431b79784ee7389516cac244fe5a3755b21b10af7de1ae3a3564e64e36b23a35df4a2c247a54af3aecbdac1f60d859942aa7e3ccb673745a2272c3c07b380c7", 0x67}, {&(0x7f0000000180)="1333259355e1becff71a9c7e5921a10270482a2c83625978ad6d1d28d9bf09627effe6c22340add21f97cf2d9a01bb6fbf3c5985fc9f1ef5a9085f3090a0f6b33c842d06ae8655a937d6dfb210e07a24a63f44cda4cf5a2aac1f64181e692d42b499f9d7663378e8539708b861bfd793bb242f9b0083", 0x76}, {&(0x7f0000000200)="ec", 0x1}, {&(0x7f0000000240)="9e463a082cb57c87837148ff9a0d066a88e6358b8f63cdb6c3dfdda6908a99109a6b", 0x22}], 0x5}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="bea7bfda57e0c34dc9211d4e10e15e341dc90e7bd9f148904f0ce5ad503b134abd7782e43244a6a4fc505f7ea2cf2469e613852c5dd62c54624f62ab6b013eef66daf1057c9ef8ccedaa5b0a13b4166391fdc450b1cc34add0125eafac96baaaeef2d33e61180c9bd04575dc0d71c8f365276b23d10aabc888ecf4844b7c6c4a9750552a21a5851b18cd4985add28e5e2bbf46268c86b248faa442583a1b11b2fba36c09786147a07e05f52fb26280fbbcc734c525e7f160e0f3b76a0514e1cb501eb446ad2117d1b61ea081dac0527b409e23badf35d2513acf13c65e3ecc45379d2a154f853309ad53", 0xea}, {&(0x7f00000004c0)="0e5eb910e19f0b9510c04ed084c35fe3290e51bacde749d413889c96799edb8fa5585cdd3a2a14ff5cccb35301c4", 0x2e}, {&(0x7f0000000500)="d26389f48c6feb63ffdf867c34f42fbe77187c740f07d3a6cdf710a875ae634545808a971e7c0a77bacfabb1b445178ea49be3089d39abc691a698c86c5217984e590e0f398fb7e912d6d5fc4f66632c5d68e165050764f56dee599f3d8f798bcae9956798b44efe8d0e22019962a274552c54f9cf5511e3c9c5c9ebede154db6d90199b7e828011825167ef", 0x8c}, {&(0x7f00000015c0)="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", 0x294}], 0x4}}], 0x3, 0xc000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) [ 122.806808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 14:27:07 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 14:27:07 executing program 4: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 14:27:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:27:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x20000000000600}, {&(0x7f0000000040)="e6a38010ae46f52bdd524affa3fe8bd44852bc95dd15a22e374336f3b96edd17f5235080ee6141557adc3fd7331ff0dcf453f59140db5b02ed", 0x39, 0x1d4}], 0x0, &(0x7f0000010d00)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00', 0x0}) 14:27:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:27:07 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) [ 122.919296] loop0: detected capacity change from 0 to 131078 14:27:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x31e, 0x0) 14:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x20000000000600}, {&(0x7f0000000040)="e6a38010ae46f52bdd524affa3fe8bd44852bc95dd15a22e374336f3b96edd17f5235080ee6141557adc3fd7331ff0dcf453f59140db5b02ed", 0x39, 0x1d4}], 0x0, &(0x7f0000010d00)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:27:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00', 0x0}) 14:27:07 executing program 4: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 14:27:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:27:07 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) [ 123.023016] loop0: detected capacity change from 0 to 131078 14:27:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x20000000000600}, {&(0x7f0000000040)="e6a38010ae46f52bdd524affa3fe8bd44852bc95dd15a22e374336f3b96edd17f5235080ee6141557adc3fd7331ff0dcf453f59140db5b02ed", 0x39, 0x1d4}], 0x0, &(0x7f0000010d00)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:27:07 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) 14:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 123.101305] loop0: detected capacity change from 0 to 131078 14:27:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00', 0x0}) 14:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) 14:27:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x31e, 0x0) 14:27:07 executing program 4: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 14:27:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 14:27:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x31e, 0x0) 14:27:07 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000001240)=ANY=[], 0x20) 14:27:07 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x4) 14:27:07 executing program 0: setitimer(0x1000000, 0x0, 0x0) [ 123.258583] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 14:27:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 14:27:07 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x4) 14:27:07 executing program 0: setitimer(0x1000000, 0x0, 0x0) 14:27:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_destroy(0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:27:07 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000001240)=ANY=[], 0x20) 14:27:07 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000000)) 14:27:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 14:27:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:27:07 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000000)) 14:27:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 14:27:07 executing program 4: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 14:27:07 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000001240)=ANY=[], 0x20) 14:27:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_destroy(0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:27:07 executing program 0: setitimer(0x1000000, 0x0, 0x0) 14:27:07 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x4) 14:27:07 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x4) 14:27:07 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:27:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @ssrr={0x89, 0x3}]}}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 14:27:07 executing program 0: setitimer(0x1000000, 0x0, 0x0) 14:27:07 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000000)) 14:27:07 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000001240)=ANY=[], 0x20) [ 123.557233] Bluetooth: hci7: Opcode 0x0c03 failed: -110 14:27:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @ssrr={0x89, 0x3}]}}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_destroy(0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:27:08 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000000)) 14:27:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000032c0), 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) 14:27:08 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:27:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:27:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000a00)) 14:27:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000a00)) 14:27:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @ssrr={0x89, 0x3}]}}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 14:27:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 14:27:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:27:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000a00)) 14:27:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000032c0), 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_destroy(0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:27:08 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:27:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 14:27:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000a00)) 14:27:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @ssrr={0x89, 0x3}]}}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 14:27:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:27:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000032c0), 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) 14:27:08 executing program 0: ioperm(0x0, 0x2, 0xffffffff80000000) ioperm(0x0, 0x8, 0x0) 14:27:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 0: ioperm(0x0, 0x2, 0xffffffff80000000) ioperm(0x0, 0x8, 0x0) 14:27:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) [ 123.987861] audit: type=1400 audit(1768573628.494:16): avc: denied { read } for pid=4582 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:27:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) write$sndseq(r0, 0x0, 0x0) 14:27:08 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0xf, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:27:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000032c0), 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) 14:27:08 executing program 0: ioperm(0x0, 0x2, 0xffffffff80000000) ioperm(0x0, 0x8, 0x0) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:27:08 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000800)={0x2, 0xd4, &(0x7f0000000700)="657975ad0c164ab5b11860f8acb515e1a8f08b7317f238d2fe83d5953f866b9fa2848c03c5ed9733d8de5027f8fe7bcdb5a758979bfa1be4bf04900a1c07740145f2f9efb86ff0fcc15ed449139edbe8ed38527eb44ea9896d1157e9b1831d4de942020b1bb4f0de8c4c60a8e125a269b3357e61b92897cb8136d92cd20bdff5e3789b8b3fc88382a02ef2d43f3cb31fe6336122f7efeb6ea3ba09d385aebd2c9cb2868849caf1b1c319781c0dfba0515835f3272f33ade95fef913b66029dadddce03f9cd7e80f39fe43b007e966ac869fc75b7"}) 14:27:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) write$sndseq(r0, 0x0, 0x0) 14:27:08 executing program 0: ioperm(0x0, 0x2, 0xffffffff80000000) ioperm(0x0, 0x8, 0x0) 14:27:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0xf, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:27:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:27:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0xf, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:27:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0xf, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:27:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) write$sndseq(r0, 0x0, 0x0) 14:27:08 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000), 0x0) 14:27:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c}}) 14:27:08 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000), 0x0) 14:27:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:27:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 14:27:08 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000), 0x0) 14:27:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) write$sndseq(r0, 0x0, 0x0) [ 124.451600] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 124.452166] Bluetooth: hci5: Opcode 0x0c03 failed: -110 14:27:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c}}) 14:27:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000), 0x0) 14:27:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:27:09 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x5}, @queue}], 0x1c) 14:27:09 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x5}, @queue}], 0x1c) 14:27:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c}}) 14:27:09 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x5}, @queue}], 0x1c) [ 124.644600] Bluetooth: hci3: Opcode 0x0c03 failed: -110 14:27:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x81d6ccafac113ff6, 0x80, 0x6, 0x7d, 0x4, 0x0, 0x0, 0x800000d389, 0x82801, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fd, 0x0, @perf_config_ext={0x0, 0x7}, 0x8201, 0x0, 0x2a1a, 0x6, 0x0, 0x886, 0x1, 0x0, 0xae, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = fork() ptrace(0x10, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x9633d000) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) 14:27:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:27:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x5}, @queue}], 0x1c) 14:27:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c}}) 14:27:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000001ec0)=""/35, 0x23) getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe) 14:27:09 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x8b2b6c1a9bb265cb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}]}, 0x38}}, 0x0) 14:27:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)) fcntl$getownex(r0, 0x9, 0x0) 14:27:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:27:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 14:27:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x42) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5319) [ 124.902425] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 14:27:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:27:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:27:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x42) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5319) 14:27:09 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 14:27:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)) fcntl$getownex(r0, 0x9, 0x0) 14:27:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 14:27:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x8b2b6c1a9bb265cb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}]}, 0x38}}, 0x0) [ 125.000633] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 14:27:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x8b2b6c1a9bb265cb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}]}, 0x38}}, 0x0) 14:27:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)) fcntl$getownex(r0, 0x9, 0x0) 14:27:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323134393739343100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000e0f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006b1710a600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000006f20934800000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332313439373934312f66696c65302f66696c653000000000000000000000000000000000000000000000afa6093f00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009270a1b300000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000743fdfdf00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2efb56f000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) 14:27:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:27:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x120, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @dev}}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 14:27:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x42) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5319) 14:27:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 14:27:09 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) [ 125.076204] loop5: detected capacity change from 0 to 2048 [ 125.086542] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 125.097980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 14:27:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)) fcntl$getownex(r0, 0x9, 0x0) 14:27:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x42) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5319) 14:27:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x120, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @dev}}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 14:27:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:27:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) [ 125.152169] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 14:27:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xffff) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) [ 125.166134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 14:27:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:27:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x8b2b6c1a9bb265cb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}]}, 0x38}}, 0x0) 14:27:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x120, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x3c}, @in6=@priv VM DIAGNOSIS: 14:27:06 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804ef0f4a8 R8 =0000000000000000 R9 =ffffed100167e046 R10=0000000000000020 R11=206f7420676e6973 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555572711400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f835c1a73a4 CR3=000000004a087000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=ffffffff0000ff00000000ff00000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801aa57b40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff1100354af69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801aa57b78 RIP=ffffffff84d1a2d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576e81400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555576e8ac58 CR3=000000000bd04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000